hxxps://discord[.]com/api/webhooks/951565322840862730/4aE4j6x4YXP3eBMbzUkURTY1g4UU99pU7a5DSU5qjg8GlmmffMOrYrR7kIL2_UkoKXuM

Resubmissions

12/03/2022, 20:42 UTC

220312-zhc4ksahc9 10

12/03/2022, 20:37 UTC

220312-zeajaacgbk 6

Analysis

max time kernel
1683s
max time network
1743s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
12/03/2022, 20:42 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://discord.com/api/webhooks/951565322840862730/4aE4j6x4YXP3eBMbzUkURTY1g4UU99pU7a5DSU5qjg8GlmmffMOrYrR7kIL2_UkoKXuM

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Suspicious behavior: EnumeratesProcesses 17 IoCs

pid	Process
1496	chrome.exe
1496	chrome.exe
1512	chrome.exe
1512	chrome.exe
2764	chrome.exe
2764	chrome.exe
3920	chrome.exe
3920	chrome.exe
4788	chrome.exe
4788	chrome.exe
2828	chrome.exe
2828	chrome.exe
3348	chrome.exe
3348	chrome.exe
3348	chrome.exe
3348	chrome.exe
3348	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe
1512	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1512 wrote to memory of 1860	1512	chrome.exe	79
PID 1512 wrote to memory of 1860	1512	chrome.exe	79
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 4560	1512	chrome.exe	80
PID 1512 wrote to memory of 1496	1512	chrome.exe	81
PID 1512 wrote to memory of 1496	1512	chrome.exe	81
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83
PID 1512 wrote to memory of 552	1512	chrome.exe	83

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" https://discord.com/api/webhooks/951565322840862730/4aE4j6x4YXP3eBMbzUkURTY1g4UU99pU7a5DSU5qjg8GlmmffMOrYrR7kIL2_UkoKXuM
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1512
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc2e404f50,0x7ffc2e404f60,0x7ffc2e404f70
  2⤵
  PID:1860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1660 /prefetch:2
  2⤵
  PID:4560
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2024 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2332 /prefetch:8
  2⤵
  PID:552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3052 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3044 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4292 /prefetch:8
  2⤵
  PID:392
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:4132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4956 /prefetch:8
  2⤵
  PID:2956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4872 /prefetch:8
  2⤵
  PID:680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4832 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4340 /prefetch:8
  2⤵
  PID:3136
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4624 /prefetch:8
  2⤵
  PID:3532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:3452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5364 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:4012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=996 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1036 /prefetch:8
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4764 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5204 /prefetch:8
  2⤵
  PID:1168
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:2256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5380 /prefetch:8
  2⤵
  PID:2260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4524 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5568 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:3528
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5232 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1632,7555133660085358254,5375925884126178329,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4364 /prefetch:8
  2⤵
  PID:812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4856

Network

DNS

discord.com

chrome.exe

Remote address:

8.8.8.8:53

Request

discord.com

IN A

Response

discord.com

IN A

162.159.136.232

discord.com

IN A

162.159.138.232

discord.com

IN A

162.159.137.232

discord.com

IN A

162.159.128.233

discord.com

IN A

162.159.135.232
DNS

clients2.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.google.com

IN A

Response

clients2.google.com

IN CNAME

clients.l.google.com

clients.l.google.com

IN A

142.250.179.174
DNS

accounts.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN A

Response

accounts.google.com

IN A

172.217.168.237
POST

https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard

chrome.exe

Remote address:

172.217.168.237:443

Request

POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/2.0
host: accounts.google.com
content-length: 1
origin: https://www.google.com
content-type: application/x-www-form-urlencoded
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

a.nel.cloudflare.com

chrome.exe

Remote address:

8.8.8.8:53

Request

a.nel.cloudflare.com

IN A

Response

a.nel.cloudflare.com

IN A

35.190.80.1
OPTIONS

https://a.nel.cloudflare.com/report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN

chrome.exe

Remote address:

35.190.80.1:443

Request

OPTIONS /report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN HTTP/2.0
host: a.nel.cloudflare.com
origin: https://discord.com
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://a.nel.cloudflare.com/report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN

chrome.exe

Remote address:

35.190.80.1:443

Request

POST /report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN HTTP/2.0
host: a.nel.cloudflare.com
content-length: 482
content-type: application/reports+json
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://a.nel.cloudflare.com/report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6

chrome.exe

Remote address:

35.190.80.1:443

Request

OPTIONS /report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6 HTTP/2.0
host: a.nel.cloudflare.com
origin: https://discord.com
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
POST

https://a.nel.cloudflare.com/report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6

chrome.exe

Remote address:

35.190.80.1:443

Request

POST /report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6 HTTP/2.0
host: a.nel.cloudflare.com
content-length: 1000
content-type: application/reports+json
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

edgedl.me.gvt1.com

chrome.exe

Remote address:

8.8.8.8:53

Request

edgedl.me.gvt1.com

IN A

Response

edgedl.me.gvt1.com

IN A

34.104.35.123
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

chrome.exe

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx HTTP/1.1
Host: edgedl.me.gvt1.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 248531
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "c994e6"
last-modified: Fri, 25 Feb 2022 22:08:36 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 15:24:29 GMT
age: 19112
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 8c1414ea-f192-4d7b-b6e7-bf81a567ae72
cache-control: public,max-age=86400
DNS

dns.google

chrome.exe

Remote address:

8.8.8.8:53

Request

dns.google

IN A

Response

dns.google

IN A

8.8.4.4

dns.google

IN A

8.8.8.8
DNS

clients2.googleusercontent.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.googleusercontent.com

IN A

Response

clients2.googleusercontent.com

IN CNAME

googlehosted.l.googleusercontent.com

googlehosted.l.googleusercontent.com

IN A

172.217.168.193
GET

https://clients2.googleusercontent.com/crx/blobs/Acy1k0bHBYNfB1VuD_TUQo2T_tZPo8ohpiOswAynD7ImvGycEvycZaZ6UFcMybzudkM8Jzb1Fxy1UOcQMtSIeN7L--Wd9_w8ix3PgUJSBnFLAyYoYJ0bAMZSmuUO-N9ucOd7JwzC2rfA-lsaN0YWPg/extension_8921_104_0_3.crx

chrome.exe

Remote address:

172.217.168.193:443

Request

GET /crx/blobs/Acy1k0bHBYNfB1VuD_TUQo2T_tZPo8ohpiOswAynD7ImvGycEvycZaZ6UFcMybzudkM8Jzb1Fxy1UOcQMtSIeN7L--Wd9_w8ix3PgUJSBnFLAyYoYJ0bAMZSmuUO-N9ucOd7JwzC2rfA-lsaN0YWPg/extension_8921_104_0_3.crx HTTP/2.0
host: clients2.googleusercontent.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

api.msn.com

chrome.exe

Remote address:

8.8.8.8:53

Request

api.msn.com

IN A

Response

api.msn.com

IN CNAME

api-msn-com.a-0003.a-msedge.net

api-msn-com.a-0003.a-msedge.net

IN CNAME

a-0003.a-msedge.net

a-0003.a-msedge.net

IN A

204.79.197.203
GET

https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb

chrome.exe

Remote address:

142.250.179.131:443

Request

GET /safebrowsing/csd/client_model_v5_variation_6.pb HTTP/2.0
host: ssl.gstatic.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

settings-win.data.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

settings-win.data.microsoft.com

IN A

Response

settings-win.data.microsoft.com

IN CNAME

atm-settingsfe-prod-geo.trafficmanager.net

atm-settingsfe-prod-geo.trafficmanager.net

IN CNAME

settings-prod-eus2-1.eastus2.cloudapp.azure.com

settings-prod-eus2-1.eastus2.cloudapp.azure.com

IN A

52.167.249.196
DNS

time.windows.com

chrome.exe

Remote address:

8.8.8.8:53

Request

time.windows.com

IN A

Response

time.windows.com

IN CNAME

twc.trafficmanager.net

twc.trafficmanager.net

IN A

20.101.57.9
DNS

crl3.digicert.com

chrome.exe

Remote address:

8.8.8.8:53

Request

crl3.digicert.com

IN A

Response

crl3.digicert.com

IN CNAME

cs9.wac.phicdn.net

cs9.wac.phicdn.net

IN A

93.184.220.29
DNS

ctldl.windowsupdate.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A

Response

ctldl.windowsupdate.com

IN CNAME

wu-bg-shim.trafficmanager.net

wu-bg-shim.trafficmanager.net

IN CNAME

cds.d2s7q6s2.hwcdn.net

cds.d2s7q6s2.hwcdn.net

IN A

209.197.3.8
DNS

fe3cr.delivery.mp.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

fe3cr.delivery.mp.microsoft.com

IN A

Response

fe3cr.delivery.mp.microsoft.com

IN CNAME

fe3.delivery.mp.microsoft.com

fe3.delivery.mp.microsoft.com

IN CNAME

glb.cws.prod.dcat.dsp.trafficmanager.net

glb.cws.prod.dcat.dsp.trafficmanager.net

IN A

20.54.89.15
DNS

fe3cr.delivery.mp.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

fe3cr.delivery.mp.microsoft.com

IN A

Response

fe3cr.delivery.mp.microsoft.com

IN CNAME

fe3.delivery.mp.microsoft.com

fe3.delivery.mp.microsoft.com

IN CNAME

glb.cws.prod.dcat.dsp.trafficmanager.net

glb.cws.prod.dcat.dsp.trafficmanager.net

IN A

52.152.108.96
DNS

slscr.update.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

slscr.update.microsoft.com

IN A

Response

slscr.update.microsoft.com

IN CNAME

sls.update.microsoft.com

sls.update.microsoft.com

IN CNAME

glb.sls.prod.dcat.dsp.trafficmanager.net

glb.sls.prod.dcat.dsp.trafficmanager.net

IN A

20.54.89.106
DNS

slscr.update.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

slscr.update.microsoft.com

IN A

Response

slscr.update.microsoft.com

IN CNAME

sls.update.microsoft.com

sls.update.microsoft.com

IN CNAME

glb.sls.prod.dcat.dsp.trafficmanager.net

glb.sls.prod.dcat.dsp.trafficmanager.net

IN A

52.242.101.226
DNS

nexusrules.officeapps.live.com

chrome.exe

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A

Response

nexusrules.officeapps.live.com

IN CNAME

prod.nexusrules.live.com.akadns.net

prod.nexusrules.live.com.akadns.net

IN A

52.109.12.19
POST

http://update.googleapis.com/service/update2/json?cup2key=10:1841116160&cup2hreq=9c3cc32c970bc75e350f8bfdd981fe60067da1b32308627b53071405b6354dd0

chrome.exe

Remote address:

142.250.179.163:80

Request

POST /service/update2/json?cup2key=10:1841116160&cup2hreq=9c3cc32c970bc75e350f8bfdd981fe60067da1b32308627b53071405b6354dd0 HTTP/1.1
Host: update.googleapis.com
Connection: keep-alive
Content-Length: 3017
X-Goog-Update-AppId: gcmjkmgdlgnkkcocmoeiminaijmmjnii,ehgidpndbllacpjalkiimkbadgjfnnmc,khaoiebndkojlmppeemjhbpbandiljpe,cmahhnpholdijhjokonmfdjbfmklppij,obedbbhbpmojnkanicioggnmelmoomoc,hnimpnehoodheedghdeeijklkeaacbdc,llkgjffcdpffmhiakmfcdcblohccpfmo,jflookgnkcckhobaglndicnbbgbonegd,gkmgaooipdjhmangpemjhigmamcehddo,ojhpjlocmbogdgmfpkhlaaeamibhnphh,ggkkehgbnfjpeggfpleeakpidbkibbmn,jamhcnnkihinmdlkakkaopbjbbcngflc,aemomkdncapdnfajjbbcbdebjljbpmpj,bklopemakmnopmghhmccadeonafabnal,ihnlcenocehgdaegdmhbidjhnhdchfmm,giekcmmlnklenlaomppkphknjmnnpneh,hfnkpimlhhgieaddgfemjhofmfblmnib,eeigpngbgcognadeebkilcpcaedhellh,oimompecagnajdejgnnjijobebaeigek
X-Goog-Update-Interactivity: bg
X-Goog-Update-Updater: chrome-89.0.4389.114
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Content-Security-Policy: script-src 'report-sample' 'nonce-Fv4XvlI67FSkxMUAgyZUfQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 12 Mar 2022 20:43:59 GMT
X-Cup-Server-Proof: 304402202f38b286b00f8c31c158d237a65851221b6140b7c07d08f5d07ccb92b6f579440220700f31c7138ac9ccaa33afbb6e9a17407df5e28ed026d2493f2cdc3560a0bf4f:9c3cc32c970bc75e350f8bfdd981fe60067da1b32308627b53071405b6354dd0
ETag: W/"304402202f38b286b00f8c31c158d237a65851221b6140b7c07d08f5d07ccb92b6f579440220700f31c7138ac9ccaa33afbb6e9a17407df5e28ed026d2493f2cdc3560a0bf4f:9c3cc32c970bc75e350f8bfdd981fe60067da1b32308627b53071405b6354dd0"
Content-Type: application/json; charset=utf-8
X-Daynum: 5549
X-Daystart: 45839
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 3708
Server: GSE
POST

http://update.googleapis.com/service/update2/json

chrome.exe

Remote address:

142.250.179.163:80

Request

POST /service/update2/json HTTP/1.1
Host: update.googleapis.com
Connection: keep-alive
Content-Length: 998
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Content-Security-Policy: script-src 'report-sample' 'nonce-MAh6gZcvr0wrSozpwln7Bg' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 12 Mar 2022 20:44:11 GMT
Content-Type: application/json; charset=utf-8
X-Daynum: 5549
X-Daystart: 45851
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 170
Server: GSE
POST

http://update.googleapis.com/service/update2/json

chrome.exe

Remote address:

142.250.179.163:80

Request

POST /service/update2/json HTTP/1.1
Host: update.googleapis.com
Connection: keep-alive
Content-Length: 969
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Content-Security-Policy: script-src 'report-sample' 'nonce-Ln1mJoXmNsVGCnVSlqWDyQ' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 12 Mar 2022 20:44:28 GMT
Content-Type: application/json; charset=utf-8
X-Daynum: 5549
X-Daystart: 45868
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 172
Server: GSE
POST

http://update.googleapis.com/service/update2/json

chrome.exe

Remote address:

142.250.179.163:80

Request

POST /service/update2/json HTTP/1.1
Host: update.googleapis.com
Connection: keep-alive
Content-Length: 975
Content-Type: application/json
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate

Response

HTTP/1.1 200 OK

Content-Security-Policy: script-src 'report-sample' 'nonce-nnZwJrH0Uv6aLh7JltH0mw' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 12 Mar 2022 20:44:48 GMT
Content-Type: application/json; charset=utf-8
X-Daynum: 5549
X-Daystart: 45888
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 170
Server: GSE
DNS

edgedl.me.gvt1.com

chrome.exe

Remote address:

8.8.8.8:53

Request

edgedl.me.gvt1.com

IN A

Response

edgedl.me.gvt1.com

IN A

34.104.35.123
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 38693
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9193
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 1220e675-1128-425e-a7a6-85498a729d77
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Feb 2022 14:51:40 GMT
Range: bytes=0-1119
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 1120
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9193
content-range: bytes 0-1119/38693
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: f511954c-6cb4-4b98-8af4-0af49beeb503
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Feb 2022 14:51:40 GMT
Range: bytes=1120-3127
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 2008
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9196
content-range: bytes 1120-3127/38693
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 14edb75a-8861-4b14-b36f-76c74e253550
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Feb 2022 14:51:40 GMT
Range: bytes=3128-7576
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 4449
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9198
content-range: bytes 3128-7576/38693
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 839244e5-8d7e-4f8c-9ef4-6a83318b06c8
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Feb 2022 14:51:40 GMT
Range: bytes=7577-17499
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 9923
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9199
content-range: bytes 7577-17499/38693
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 879abfb6-612b-4f0d-8121-b5d1df85373e
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Feb 2022 14:51:40 GMT
Range: bytes=17500-38692
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 21193
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c944ae"
last-modified: Wed, 23 Feb 2022 14:51:40 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:10:46 GMT
age: 9200
content-range: bytes 17500-38692/38693
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 3a8062d1-c3a9-4254-bfbe-bdfbe92e430b
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5700
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "29c66a"
last-modified: Wed, 08 Aug 2018 11:12:10 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 15:08:57 GMT
age: 20127
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 9fd6ac48-b295-45f7-ab8d-240bcf1848f6
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 08 Aug 2018 11:12:10 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5700
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "29c66a"
last-modified: Wed, 08 Aug 2018 11:12:10 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 15:08:57 GMT
age: 20127
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: b4678ee8-f60a-45a9-b88e-1fb300de8127
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5585
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c84f36"
last-modified: Mon, 14 Feb 2022 23:31:10 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:15:36 GMT
age: 8948
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 833f553d-0620-4bc7-8d86-745e014b456a
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 14 Feb 2022 23:31:10 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5585
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c84f36"
last-modified: Mon, 14 Feb 2022 23:31:10 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:15:36 GMT
age: 8948
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: ae23a529-439a-476d-a205-2473582737bb
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9555
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "9deda9"
last-modified: Mon, 29 Mar 2021 22:42:38 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:39:43 GMT
age: 7526
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 7b7e81c0-8b27-4c9a-8373-d83251e817f3
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 29 Mar 2021 22:42:38 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9555
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "9deda9"
last-modified: Mon, 29 Mar 2021 22:42:38 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:39:43 GMT
age: 7526
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 007d660f-9fba-4976-97f7-ab13230d5783
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 996991
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb0886"
last-modified: Mon, 07 Mar 2022 19:30:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 10:56:43 GMT
age: 35335
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: e7ded220-cca5-4b1b-8124-fdb334345a31
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 07 Mar 2022 19:30:39 GMT
Range: bytes=0-288001
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 288002
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb0886"
last-modified: Mon, 07 Mar 2022 19:30:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 10:56:43 GMT
age: 35335
content-range: bytes 0-288001/996991
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: d7125682-1be1-4821-b396-c58b2f1e716d
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 07 Mar 2022 19:30:39 GMT
Range: bytes=288002-753009
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 465008
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb0886"
last-modified: Mon, 07 Mar 2022 19:30:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 10:56:43 GMT
age: 35336
content-range: bytes 288002-753009/996991
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: e8a34af3-8082-4b11-991d-792eabf54b99
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 07 Mar 2022 19:30:39 GMT
Range: bytes=753010-996990
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 243981
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb0886"
last-modified: Mon, 07 Mar 2022 19:30:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 10:56:43 GMT
age: 35337
content-range: bytes 753010-996990/996991
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 4c868455-4e54-4bf0-9889-461bfd7a66a1
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com
DNS

safebrowsing.googleapis.com

chrome.exe

Remote address:

8.8.8.8:53

Request

safebrowsing.googleapis.com

IN A

Response

safebrowsing.googleapis.com

IN A

142.250.179.202
DNS

settings-win.data.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

settings-win.data.microsoft.com

IN A

Response

settings-win.data.microsoft.com

IN CNAME

atm-settingsfe-prod-geo.trafficmanager.net

atm-settingsfe-prod-geo.trafficmanager.net

IN CNAME

settings-prod-eus2-1.eastus2.cloudapp.azure.com

settings-prod-eus2-1.eastus2.cloudapp.azure.com

IN A

52.167.249.196
DNS

ctldl.windowsupdate.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A

Response

ctldl.windowsupdate.com

IN CNAME

wu-bg-shim.trafficmanager.net

wu-bg-shim.trafficmanager.net

IN CNAME

cds.d2s7q6s2.hwcdn.net

cds.d2s7q6s2.hwcdn.net

IN A

209.197.3.8
DNS

login.live.com

chrome.exe

Remote address:

8.8.8.8:53

Request

login.live.com

IN A

Response

login.live.com

IN CNAME

login.msa.msidentity.com

login.msa.msidentity.com

IN CNAME

www.tm.lg.prod.aadmsa.trafficmanager.net

www.tm.lg.prod.aadmsa.trafficmanager.net

IN CNAME

prda.aadg.msidentity.com

prda.aadg.msidentity.com

IN CNAME

www.tm.a.prd.aadg.trafficmanager.net

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.132

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.131

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.8

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.67

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.9

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.134

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.69

www.tm.a.prd.aadg.trafficmanager.net

IN A

20.190.151.70
DNS

settings-win.data.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

settings-win.data.microsoft.com

IN A

Response

settings-win.data.microsoft.com

IN CNAME

atm-settingsfe-prod-geo.trafficmanager.net

atm-settingsfe-prod-geo.trafficmanager.net

IN CNAME

settings-prod-eus2-1.eastus2.cloudapp.azure.com

settings-prod-eus2-1.eastus2.cloudapp.azure.com

IN A

52.167.249.196
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.4.4:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
POST

https://update.googleapis.com/service/update2/json

chrome.exe

Remote address:

142.250.179.163:443

Request

POST /service/update2/json HTTP/2.0
host: update.googleapis.com
content-length: 933
content-type: application/json
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
POST

https://update.googleapis.com/service/update2/json

chrome.exe

Remote address:

142.250.179.163:443

Request

POST /service/update2/json HTTP/2.0
host: update.googleapis.com
content-length: 1066
content-type: application/json
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
DNS

ctldl.windowsupdate.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A

Response

ctldl.windowsupdate.com

IN CNAME

wu-bg-shim.trafficmanager.net

wu-bg-shim.trafficmanager.net

IN CNAME

cds.d2s7q6s2.hwcdn.net

cds.d2s7q6s2.hwcdn.net

IN A

209.197.3.8
DNS

nexusrules.officeapps.live.com

chrome.exe

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A

Response

nexusrules.officeapps.live.com

IN CNAME

prod.nexusrules.live.com.akadns.net

prod.nexusrules.live.com.akadns.net

IN A

52.109.76.32
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 6760942
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "2e2fe7"
last-modified: Wed, 10 Oct 2018 17:49:21 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:19:30 GMT
age: 26861
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: ff63ddb1-904f-428a-bd57-ca30bcf9f23c
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 10 Oct 2018 17:49:21 GMT
Range: bytes=0-2305634
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 2305635
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "2e2fe7"
last-modified: Wed, 10 Oct 2018 17:49:21 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:19:30 GMT
age: 26861
content-range: bytes 0-2305634/6760942
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 0be59c0c-9d52-4101-a373-4c16f480698d
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 10 Oct 2018 17:49:21 GMT
Range: bytes=2305635-6061775
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 3756141
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "2e2fe7"
last-modified: Wed, 10 Oct 2018 17:49:21 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:19:30 GMT
age: 26862
content-range: bytes 2305635-6061775/6760942
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 033b7606-c725-4bb0-84dc-df2213197532
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 10 Oct 2018 17:49:21 GMT
Range: bytes=6061776-6760941
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 699166
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "2e2fe7"
last-modified: Wed, 10 Oct 2018 17:49:21 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:19:30 GMT
age: 26863
content-range: bytes 6061776-6760941/6760942
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 1d772b0e-a192-48c7-b7ad-7ce59f78ead6
cache-control: public,max-age=86400
DNS

self.events.data.microsoft.com

chrome.exe

Remote address:

8.8.8.8:53

Request

self.events.data.microsoft.com

IN A

Response

self.events.data.microsoft.com

IN CNAME

self-events-data.trafficmanager.net

self-events-data.trafficmanager.net

IN CNAME

onedscolprdcus12.centralus.cloudapp.azure.com

onedscolprdcus12.centralus.cloudapp.azure.com

IN A

13.89.179.10
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 2912
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "ca3e43"
last-modified: Thu, 03 Mar 2022 17:58:29 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:15:16 GMT
age: 9213
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 75a57a7b-7c64-4017-ae40-31471c6c4d3a
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 03 Mar 2022 17:58:29 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 2912
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "ca3e43"
last-modified: Thu, 03 Mar 2022 17:58:29 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 18:15:16 GMT
age: 9213
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 05ffa43d-f2d1-4d5d-b627-ea470f79ddb4
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 26903
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb245b"
last-modified: Mon, 07 Mar 2022 23:56:13 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:49:48 GMT
age: 10843
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: be8db387-4607-445c-b171-7ebace8f61a1
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 07 Mar 2022 23:56:13 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 26903
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "cb245b"
last-modified: Mon, 07 Mar 2022 23:56:13 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:49:48 GMT
age: 10843
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 6e17d893-60c5-49ff-b04c-42e018549da3
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 394133
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "662670"
last-modified: Tue, 28 Jul 2020 19:50:19 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:25:45 GMT
age: 30290
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: b5dc6d7f-9098-42d6-bfe4-0d3b425f6cf0
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Tue, 28 Jul 2020 19:50:19 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 394133
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "662670"
last-modified: Tue, 28 Jul 2020 19:50:19 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:25:45 GMT
age: 30291
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 6744c0a3-b524-41db-b74f-417e30139a43
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9941
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c9df33"
last-modified: Mon, 28 Feb 2022 20:10:44 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 01:17:53 GMT
age: 70371
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: b85ee2bd-4c4e-4956-8132-a5418ddff557
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 28 Feb 2022 20:10:44 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9941
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "c9df33"
last-modified: Mon, 28 Feb 2022 20:10:44 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 01:17:53 GMT
age: 70371
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 148af0b0-b7b2-4baf-b4fa-c8d8539ff175
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 818390
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "ccbe74"
last-modified: Sat, 12 Mar 2022 17:44:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:45:57 GMT
age: 11099
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 0723e105-c4e0-4834-a7df-4c8921881ad5
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Sat, 12 Mar 2022 17:44:39 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 818390
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "ccbe74"
last-modified: Sat, 12 Mar 2022 17:44:39 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:45:57 GMT
age: 11099
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: ad9c111a-42df-48d0-80b9-0029850f7e20
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9505
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "a93f27"
last-modified: Mon, 16 Aug 2021 20:43:55 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:16:34 GMT
age: 12879
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 7ef4d211-d9e8-48fa-a186-3f7e06fc6b1f
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 16 Aug 2021 20:43:55 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9505
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "a93f27"
last-modified: Mon, 16 Aug 2021 20:43:55 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 17:16:34 GMT
age: 12879
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 7227271c-e4f5-459d-bb85-8b58880e4adc
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 3809
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "81a15c"
last-modified: Thu, 07 Jan 2021 02:23:28 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:33:22 GMT
age: 26292
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 37761bcb-5b1a-485d-b996-f5ebadbb0e42
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 07 Jan 2021 02:23:28 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 3809
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "81a15c"
last-modified: Thu, 07 Jan 2021 02:23:28 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 13:33:22 GMT
age: 26292
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: bde0b655-2eba-4f8d-91ab-89b0bb5e531b
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5406
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "413d8a"
last-modified: Wed, 17 Jul 2019 00:41:02 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 15:53:38 GMT
age: 17880
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 9b3da1cc-b64e-44f3-9c9c-dd009dac6158
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 17 Jul 2019 00:41:02 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 5406
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "413d8a"
last-modified: Wed, 17 Jul 2019 00:41:02 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 15:53:38 GMT
age: 17880
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 461a83fe-8e05-4c55-a11e-2ce3eb3691e5
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 25470
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "ccbeb6"
last-modified: Sat, 12 Mar 2022 20:13:07 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 20:15:10 GMT
age: 2196
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: bac43a6e-de90-4291-80fa-a6fd5519bd6a
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Sat, 12 Mar 2022 20:13:07 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 25470
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "ccbeb6"
last-modified: Sat, 12 Mar 2022 20:13:07 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 20:15:10 GMT
age: 2196
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: af1815aa-678d-43f5-8033-84dd8183b430
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 113772
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "764869"
last-modified: Mon, 02 Nov 2020 15:59:03 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:59:58 GMT
age: 28321
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 96d4d9ef-0e42-41dd-9b69-b7454dc30334
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 02 Nov 2020 15:59:03 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 113772
content-security-policy: default-src 'none'
content-type: application/octet-stream
etag: "764869"
last-modified: Mon, 02 Nov 2020 15:59:03 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:59:58 GMT
age: 28321
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 6952d02a-2b2b-4f2b-8bc3-62716925bc20
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 6539679
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "c8c83d"
last-modified: Sat, 19 Feb 2022 00:44:49 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:30:23 GMT
age: 30113
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: bd87ab06-f3cb-4892-8a48-cc81e970733e
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Sat, 19 Feb 2022 00:44:49 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 6539679
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "c8c83d"
last-modified: Sat, 19 Feb 2022 00:44:49 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 12 Mar 2022 12:30:23 GMT
age: 30113
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
x-request-id: 48c539bc-e6d9-43d4-ab02-f34846c089e5
cache-control: public,max-age=86400
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABBnVwZGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAE4ADABKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.4.4:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABBnVwZGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAE4ADABKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
DNS

dns.google

chrome.exe

Remote address:

8.8.8.8:53

Request

dns.google

IN A

Response

dns.google

IN A

8.8.4.4

dns.google

IN A

8.8.8.8
GET

https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

chrome.exe

Remote address:

142.250.179.202:443

Request

GET /v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/2.0
host: safebrowsing.googleapis.com
x-http-method-override: POST
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
DNS

ocsp.digicert.com

chrome.exe

Remote address:

8.8.8.8:53

Request

ocsp.digicert.com

IN A

Response

ocsp.digicert.com

IN CNAME

cs9.wac.phicdn.net

cs9.wac.phicdn.net

IN A

93.184.220.29

172.217.168.237:443

https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard

tls, http2

chrome.exe

2.0kB
7.4kB
21
22

HTTP Request

POST https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
142.250.179.174:443

clients2.google.com

tls, https

chrome.exe

2.3kB
9.9kB
20
22
162.159.136.232:443

discord.com

tls, https

chrome.exe

2.9kB
16.4kB
28
36
162.159.136.232:443

discord.com

tls, https

chrome.exe

897 B
2.9kB
7
6
35.190.80.1:443

https://a.nel.cloudflare.com/report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6

tls, http2

chrome.exe

5.1kB
7.1kB
37
32

HTTP Request

OPTIONS https://a.nel.cloudflare.com/report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN

HTTP Request

POST https://a.nel.cloudflare.com/report/v3?s=a9E3r%2BJiLLYzqnRCXwDbeNMg8j6a%2FLnxIQW3QeZTAFEDOfFIEZyYaQjkp650IIrAaeNlpmlkgqdaEfTCyFFLZhF0loEti2JDGnbnpRVsgsloaqJf5Zzrkzzd7HXN

HTTP Request

OPTIONS https://a.nel.cloudflare.com/report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6

HTTP Request

POST https://a.nel.cloudflare.com/report/v3?s=oswE34ZwLAONqkX84rcMrtCD%2BWK6sgP%2F%2BpmS1Fhm4JO3%2FzSItnKX12oFh1tbwwcTiOLBN0f9VUjVlNfHbSGspIqWejW%2FC1FygATPxS6e4BswkOzlE6JvQX%2FIuBB6
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

http

chrome.exe

4.8kB
256.3kB
95
180

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

HTTP Response

200
8.8.4.4:443

dns.google

tls, https

chrome.exe

2.7kB
9.4kB
29
36
8.8.4.4:443

dns.google

tls, https

chrome.exe

2.3kB
8.3kB
24
27
172.217.168.193:443

https://clients2.googleusercontent.com/crx/blobs/Acy1k0bHBYNfB1VuD_TUQo2T_tZPo8ohpiOswAynD7ImvGycEvycZaZ6UFcMybzudkM8Jzb1Fxy1UOcQMtSIeN7L--Wd9_w8ix3PgUJSBnFLAyYoYJ0bAMZSmuUO-N9ucOd7JwzC2rfA-lsaN0YWPg/extension_8921_104_0_3.crx

tls, http2

chrome.exe

15.6kB
850.2kB
316
591

HTTP Request

GET https://clients2.googleusercontent.com/crx/blobs/Acy1k0bHBYNfB1VuD_TUQo2T_tZPo8ohpiOswAynD7ImvGycEvycZaZ6UFcMybzudkM8Jzb1Fxy1UOcQMtSIeN7L--Wd9_w8ix3PgUJSBnFLAyYoYJ0bAMZSmuUO-N9ucOd7JwzC2rfA-lsaN0YWPg/extension_8921_104_0_3.crx
204.79.197.203:443

api.msn.com

tls

564 B
5.9kB
8
6
142.250.179.131:443

https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb

tls, http2

chrome.exe

3.6kB
92.2kB
57
76

HTTP Request

GET https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb
8.8.4.4:443

dns.google

tls, https

chrome.exe

2.1kB
8.1kB
21
24
8.8.4.4:443

dns.google

tls, https

chrome.exe

943 B
5.8kB
8
8
142.250.179.163:443

update.googleapis.com

tls

chrome.exe

909 B
5.0kB
8
8
142.250.179.163:80

http://update.googleapis.com/service/update2/json

http

chrome.exe

8.9kB
8.3kB
21
25

HTTP Request

POST http://update.googleapis.com/service/update2/json?cup2key=10:1841116160&cup2hreq=9c3cc32c970bc75e350f8bfdd981fe60067da1b32308627b53071405b6354dd0

HTTP Response

200

HTTP Request

POST http://update.googleapis.com/service/update2/json

HTTP Response

200

HTTP Request

POST http://update.googleapis.com/service/update2/json

HTTP Response

200

HTTP Request

POST http://update.googleapis.com/service/update2/json

HTTP Response

200
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

http

23.7kB
1.1MB
397
770

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/bdaqy7owebp4aswjnc7iwpm2ie_9.34.0/gcmjkmgdlgnkkcocmoeiminaijmmjnii_9.34.0_all_acb7qksdc2wjznjioir7p6lt3dwq.crx3

HTTP Response

206

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acfifkd2sz342wmnbw7yvdwmtc5a_48/khaoiebndkojlmppeemjhbpbandiljpe_48_win_ccfl2wvh5b5bfuztfguafrvlpm.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ANlaTV2JH2WK9RCoHi__mxg_1.0.6/S3ybLvFx94Hgn9pWLt24ug

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ac4ayorvhy3m7mulzlz3xbrjhxra_20220222.432047118/obedbbhbpmojnkanicioggnmelmoomoc_20220222.432047118_all_ENUS_adk5edzqjddmptxeubineeojwavq.crx3

HTTP Response

206

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx
142.250.179.163:443

update.googleapis.com

tls

chrome.exe

909 B
5.0kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
142.250.179.202:443

safebrowsing.googleapis.com

tls

chrome.exe

909 B
5.0kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.1kB
8
7
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
142.250.179.163:443

update.googleapis.com

tls

chrome.exe

909 B
5.0kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.2kB
8
8
142.250.179.163:443

update.googleapis.com

tls

chrome.exe

909 B
5.0kB
8
8
8.8.4.4:443

dns.google

tls

chrome.exe

909 B
5.1kB
8
7
8.8.4.4:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

1.8kB
7.4kB
19
20

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
142.250.179.163:443

https://update.googleapis.com/service/update2/json

tls, http2

chrome.exe

4.3kB
8.5kB
26
31

HTTP Request

POST https://update.googleapis.com/service/update2/json

HTTP Request

POST https://update.googleapis.com/service/update2/json
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

http

111.9kB
7.0MB
2404
4745

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvYjFkQUFWdmlaXy12MHFUTGhWQUViMUVlUQ/0.57.44.2492_hnimpnehoodheedghdeeijklkeaacbdc.crx

HTTP Response

206
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

http

963 B
4.4kB
8
8

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOTVkQUFYWTN2V0pFMl9rR2VLalMxS0pyZw/1.0.0.12_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

HTTP Response

200
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx

http

136.7kB
8.2MB
2848
5608

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ack7ut75hqoo5tco66getjgytyrq_2782/jflookgnkcckhobaglndicnbbgbonegd_2782_all_adtj3mouf5ugodspfqd56gujxgeq.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/APhHMzuprJvS7ixvnAk_gdI_1/anGnv31dmOJhheXBnYQ3gw

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/lizctwwurubi2f4ylro4atx2r4_2022.2.28.1201/ggkkehgbnfjpeggfpleeakpidbkibbmn_2022.2.28.1201_all_lagfqpzp3r7j542cj6bsb7d7i4.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/ad4ezhznnc2z6niizfss6joroezq_101.0.4940.0/jamhcnnkihinmdlkakkaopbjbbcngflc_101.0.4940.0_all_ac65plve4agysttqorxw3befowma.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/YGkwa4MXjfWSuERyWQYP_A_4/aapLKTSZ439A-0g3nqJr3Q

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/acyu2vdgu5z3bl33iaa5zu7rnb4q_7211/hfnkpimlhhgieaddgfemjhofmfblmnib_7211_all_acglemjob2sqpcjmtfxyjpzg4agq.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AJqZYiqGvCtix64S2N84g-M_2020.11.2.164946/EWvH2e-LS80S29cxzuTfRA

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvOGQ5QUFYTUR2NWZzUHhaQjJuZnJrYS1vQQ/4.10.2391.0_oimompecagnajdejgnnjijobebaeigek.crx

HTTP Response

200
8.8.4.4:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABBnVwZGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAE4ADABKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

1.8kB
2.7kB
18
18

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABBnVwZGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAE4ADABKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
8.8.4.4:443

dns.google

tls, https

chrome.exe

1.2kB
1.6kB
13
14
142.250.179.202:443

https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

tls, http2

chrome.exe

157.5kB
9.7MB
3394
6618

HTTP Request

GET https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
204.79.197.200:443

www.bing.com

tls, https

3.0kB
8.5kB
18
18

224.0.0.251:5353

3.1kB
53
8.8.8.8:53

discord.com

dns

chrome.exe

57 B
137 B
1
1

DNS Request

discord.com

DNS Response

162.159.136.232

162.159.138.232

162.159.137.232

162.159.128.233

162.159.135.232
8.8.8.8:53

clients2.google.com

dns

chrome.exe

65 B
105 B
1
1

DNS Request

clients2.google.com

DNS Response

142.250.179.174
8.8.8.8:53

accounts.google.com

dns

chrome.exe

65 B
81 B
1
1

DNS Request

accounts.google.com

DNS Response

172.217.168.237
8.8.8.8:53

a.nel.cloudflare.com

dns

chrome.exe

66 B
82 B
1
1

DNS Request

a.nel.cloudflare.com

DNS Response

35.190.80.1
8.8.8.8:53

edgedl.me.gvt1.com

dns

chrome.exe

64 B
80 B
1
1

DNS Request

edgedl.me.gvt1.com

DNS Response

34.104.35.123
8.8.8.8:53

dns.google

dns

chrome.exe

56 B
88 B
1
1

DNS Request

dns.google

DNS Response

8.8.4.4

8.8.8.8
8.8.8.8:53

dns.google

dns

chrome.exe

76 B
121 B
1
1

DNS Request

clients2.googleusercontent.com

DNS Response

172.217.168.193
8.8.8.8:53

dns.google

dns

chrome.exe

57 B
132 B
1
1

DNS Request

api.msn.com

DNS Response

204.79.197.203
8.8.4.4:443

dns.google

https

chrome.exe

3.6kB
7.7kB
9
9
8.8.8.8:53

dns.google

dns

chrome.exe

77 B
207 B
1
1

DNS Request

settings-win.data.microsoft.com

DNS Response

52.167.249.196
8.8.8.8:53

dns.google

dns

chrome.exe

62 B
114 B
1
1

DNS Request

time.windows.com

DNS Response

20.101.57.9
8.8.8.8:53

dns.google

dns

chrome.exe

63 B
111 B
1
1

DNS Request

crl3.digicert.com

DNS Response

93.184.220.29
8.8.8.8:53

dns.google

dns

chrome.exe

69 B
161 B
1
1

DNS Request

ctldl.windowsupdate.com

DNS Response

209.197.3.8
8.8.8.8:53

dns.google

dns

chrome.exe

77 B
165 B
1
1

DNS Request

fe3cr.delivery.mp.microsoft.com

DNS Response

20.54.89.15
8.8.8.8:53

dns.google

dns

chrome.exe

77 B
165 B
1
1

DNS Request

fe3cr.delivery.mp.microsoft.com

DNS Response

52.152.108.96
8.8.8.8:53

dns.google

dns

chrome.exe

72 B
160 B
1
1

DNS Request

slscr.update.microsoft.com

DNS Response

20.54.89.106
8.8.8.8:53

dns.google

dns

chrome.exe

72 B
160 B
1
1

DNS Request

slscr.update.microsoft.com

DNS Response

52.242.101.226
8.8.8.8:53

dns.google

dns

chrome.exe

76 B
141 B
1
1

DNS Request

nexusrules.officeapps.live.com

DNS Response

52.109.12.19
8.8.4.4:443

dns.google

https

chrome.exe

1.7kB
5.5kB
4
4
8.8.8.8:53

dns.google

dns

chrome.exe

64 B
80 B
1
1

DNS Request

edgedl.me.gvt1.com

DNS Response

34.104.35.123
8.8.8.8:53

dns.google

dns

chrome.exe

73 B
89 B
1
1

DNS Request

safebrowsing.googleapis.com

DNS Response

142.250.179.202
8.8.8.8:53

dns.google

dns

chrome.exe

77 B
207 B
1
1

DNS Request

settings-win.data.microsoft.com

DNS Response

52.167.249.196
8.8.8.8:53

dns.google

dns

chrome.exe

69 B
161 B
1
1

DNS Request

ctldl.windowsupdate.com

DNS Response

209.197.3.8
8.8.8.8:53

dns.google

dns

chrome.exe

60 B
333 B
1
1

DNS Request

login.live.com

DNS Response

20.190.151.132

20.190.151.131

20.190.151.8

20.190.151.67

20.190.151.9

20.190.151.134

20.190.151.69

20.190.151.70
8.8.8.8:53

dns.google

dns

chrome.exe

77 B
207 B
1
1

DNS Request

settings-win.data.microsoft.com

DNS Response

52.167.249.196
142.250.179.163:443

https

chrome.exe

2.9kB
5.5kB
4
4
8.8.8.8:53

dns.google

dns

chrome.exe

69 B
161 B
1
1

DNS Request

ctldl.windowsupdate.com

DNS Response

209.197.3.8
8.8.8.8:53

dns.google

dns

chrome.exe

76 B
141 B
1
1

DNS Request

nexusrules.officeapps.live.com

DNS Response

52.109.76.32
142.250.179.163:443

https

chrome.exe

2.9kB
2.3kB
5
4
8.8.8.8:53

dns.google

dns

chrome.exe

76 B
197 B
1
1

DNS Request

self.events.data.microsoft.com

DNS Response

13.89.179.10
142.250.179.163:443

https

chrome.exe

2.8kB
2.3kB
4
3
142.250.179.163:443

https

chrome.exe

13.5kB
8.6kB
29
28
8.8.8.8:53

dns.google

dns

chrome.exe

56 B
88 B
1
1

DNS Request

dns.google

DNS Response

8.8.4.4

8.8.8.8
8.8.4.4:443

dns.google

https

chrome.exe

3.3kB
7.8kB
7
7
8.8.8.8:53

dns.google

dns

chrome.exe

63 B
111 B
1
1

DNS Request

ocsp.digicert.com

DNS Response

93.184.220.29

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Web Service

T1102

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request