9e8f0edc2f018fd0890dbc1a451abe9f32fbbda47dd7e8dbdd44f8e5dcca2955

Analysis

max time kernel
157s
max time network
160s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
07/08/2024, 07:17 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cs16_setup_rus.exe
Size

241.0MB
MD5

c438f464db5b6d21df1176e85d40ba91
SHA1

2d43a6c6a981dff4ce8ceef1723c81c073aca634
SHA256

9e8f0edc2f018fd0890dbc1a451abe9f32fbbda47dd7e8dbdd44f8e5dcca2955
SHA512

f6a2fd8d1e85c3e903efdb544a18b2ff2295fc0c3547d1ef56753f8b1bcd8ee4ffde98fae1ca317d3e3371811f97bafd0afbfc4d04fab41879a4f35dc8128a42
SSDEEP

6291456:UjYqMmFu7JqgEINtHzM1FrxEAp6y9a66D2Zehnhr/H:U4mFuggzzorR84a2AHrf

Score

8^/10

discovery evasion persistence privilege_escalation

Malware Config

Signatures

Modifies Windows Firewall 2 TTPs 3 IoCs

evasion

Windows Service

T1543.003

Disable or Modify System Firewall

T1562.004

pid	Process
836	netsh.exe
4108	netsh.exe
1960	netsh.exe

Executes dropped EXE 3 IoCs

pid	Process
1964	cs16_setup_rus.tmp
3468	cs.exe
2812	crashpad_handler.exe

Loads dropped DLL 37 IoCs

pid	Process
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe
3468	cs.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\D:	cs.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Event Triggered Execution: Netsh Helper DLL 1 TTPs 9 IoCs

Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

persistence privilege_escalation

Netsh Helper DLL

T1546.007

description	ioc	Process
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key queried	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe
Key value enumerated	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh	netsh.exe

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	crashpad_handler.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	wmic.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cs16_setup_rus.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cs16_setup_rus.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	netsh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cs.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	netsh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	netsh.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WMIC.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	wmic.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1964	cs16_setup_rus.tmp
1964	cs16_setup_rus.tmp

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3468	cs.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	676	WMIC.exe
Token: SeSecurityPrivilege	676	WMIC.exe
Token: SeTakeOwnershipPrivilege	676	WMIC.exe
Token: SeLoadDriverPrivilege	676	WMIC.exe
Token: SeSystemProfilePrivilege	676	WMIC.exe
Token: SeSystemtimePrivilege	676	WMIC.exe
Token: SeProfSingleProcessPrivilege	676	WMIC.exe
Token: SeIncBasePriorityPrivilege	676	WMIC.exe
Token: SeCreatePagefilePrivilege	676	WMIC.exe
Token: SeBackupPrivilege	676	WMIC.exe
Token: SeRestorePrivilege	676	WMIC.exe
Token: SeShutdownPrivilege	676	WMIC.exe
Token: SeDebugPrivilege	676	WMIC.exe
Token: SeSystemEnvironmentPrivilege	676	WMIC.exe
Token: SeRemoteShutdownPrivilege	676	WMIC.exe
Token: SeUndockPrivilege	676	WMIC.exe
Token: SeManageVolumePrivilege	676	WMIC.exe
Token: 33	676	WMIC.exe
Token: 34	676	WMIC.exe
Token: 35	676	WMIC.exe
Token: 36	676	WMIC.exe
Token: SeIncreaseQuotaPrivilege	676	WMIC.exe
Token: SeSecurityPrivilege	676	WMIC.exe
Token: SeTakeOwnershipPrivilege	676	WMIC.exe
Token: SeLoadDriverPrivilege	676	WMIC.exe
Token: SeSystemProfilePrivilege	676	WMIC.exe
Token: SeSystemtimePrivilege	676	WMIC.exe
Token: SeProfSingleProcessPrivilege	676	WMIC.exe
Token: SeIncBasePriorityPrivilege	676	WMIC.exe
Token: SeCreatePagefilePrivilege	676	WMIC.exe
Token: SeBackupPrivilege	676	WMIC.exe
Token: SeRestorePrivilege	676	WMIC.exe
Token: SeShutdownPrivilege	676	WMIC.exe
Token: SeDebugPrivilege	676	WMIC.exe
Token: SeSystemEnvironmentPrivilege	676	WMIC.exe
Token: SeRemoteShutdownPrivilege	676	WMIC.exe
Token: SeUndockPrivilege	676	WMIC.exe
Token: SeManageVolumePrivilege	676	WMIC.exe
Token: 33	676	WMIC.exe
Token: 34	676	WMIC.exe
Token: 35	676	WMIC.exe
Token: 36	676	WMIC.exe
Token: SeIncreaseQuotaPrivilege	1280	WMIC.exe
Token: SeSecurityPrivilege	1280	WMIC.exe
Token: SeTakeOwnershipPrivilege	1280	WMIC.exe
Token: SeLoadDriverPrivilege	1280	WMIC.exe
Token: SeSystemProfilePrivilege	1280	WMIC.exe
Token: SeSystemtimePrivilege	1280	WMIC.exe
Token: SeProfSingleProcessPrivilege	1280	WMIC.exe
Token: SeIncBasePriorityPrivilege	1280	WMIC.exe
Token: SeCreatePagefilePrivilege	1280	WMIC.exe
Token: SeBackupPrivilege	1280	WMIC.exe
Token: SeRestorePrivilege	1280	WMIC.exe
Token: SeShutdownPrivilege	1280	WMIC.exe
Token: SeDebugPrivilege	1280	WMIC.exe
Token: SeSystemEnvironmentPrivilege	1280	WMIC.exe
Token: SeRemoteShutdownPrivilege	1280	WMIC.exe
Token: SeUndockPrivilege	1280	WMIC.exe
Token: SeManageVolumePrivilege	1280	WMIC.exe
Token: 33	1280	WMIC.exe
Token: 34	1280	WMIC.exe
Token: 35	1280	WMIC.exe
Token: 36	1280	WMIC.exe
Token: SeIncreaseQuotaPrivilege	1280	WMIC.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1964	cs16_setup_rus.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3468	cs.exe
3468	cs.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 3916 wrote to memory of 1964	3916	cs16_setup_rus.exe	78
PID 3916 wrote to memory of 1964	3916	cs16_setup_rus.exe	78
PID 3916 wrote to memory of 1964	3916	cs16_setup_rus.exe	78
PID 1964 wrote to memory of 1960	1964	cs16_setup_rus.tmp	81
PID 1964 wrote to memory of 1960	1964	cs16_setup_rus.tmp	81
PID 1964 wrote to memory of 1960	1964	cs16_setup_rus.tmp	81
PID 1964 wrote to memory of 4108	1964	cs16_setup_rus.tmp	82
PID 1964 wrote to memory of 4108	1964	cs16_setup_rus.tmp	82
PID 1964 wrote to memory of 4108	1964	cs16_setup_rus.tmp	82
PID 1964 wrote to memory of 836	1964	cs16_setup_rus.tmp	83
PID 1964 wrote to memory of 836	1964	cs16_setup_rus.tmp	83
PID 1964 wrote to memory of 836	1964	cs16_setup_rus.tmp	83
PID 1964 wrote to memory of 4088	1964	cs16_setup_rus.tmp	87
PID 1964 wrote to memory of 4088	1964	cs16_setup_rus.tmp	87
PID 1964 wrote to memory of 4088	1964	cs16_setup_rus.tmp	87
PID 4088 wrote to memory of 676	4088	cmd.exe	89
PID 4088 wrote to memory of 676	4088	cmd.exe	89
PID 4088 wrote to memory of 676	4088	cmd.exe	89
PID 4088 wrote to memory of 1280	4088	cmd.exe	91
PID 4088 wrote to memory of 1280	4088	cmd.exe	91
PID 4088 wrote to memory of 1280	4088	cmd.exe	91
PID 3468 wrote to memory of 2812	3468	cs.exe	95
PID 3468 wrote to memory of 2812	3468	cs.exe	95
PID 3468 wrote to memory of 2812	3468	cs.exe	95
PID 3468 wrote to memory of 3304	3468	cs.exe	97
PID 3468 wrote to memory of 3304	3468	cs.exe	97
PID 3468 wrote to memory of 3304	3468	cs.exe	97
PID 3468 wrote to memory of 1016	3468	cs.exe	99
PID 3468 wrote to memory of 1016	3468	cs.exe	99
PID 3468 wrote to memory of 1016	3468	cs.exe	99

cURL User-Agent 1 IoCs

Uses User-Agent string associated with cURL utility.

description	flow	ioc
HTTP User-Agent header	7	curl/8.4.0-DEV

C:\Users\Admin\AppData\Local\Temp\cs16_setup_rus.exe
"C:\Users\Admin\AppData\Local\Temp\cs16_setup_rus.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3916
- C:\Users\Admin\AppData\Local\Temp\is-4B31A.tmp\cs16_setup_rus.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-4B31A.tmp\cs16_setup_rus.tmp" /SL5="$802D4,252147328,124416,C:\Users\Admin\AppData\Local\Temp\cs16_setup_rus.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1964
- - C:\Windows\SysWOW64\netsh.exe
    "C:\Windows\system32\netsh.exe" firewall add allowedprogram "C:\Games\Counter Strike 1.6\cs.exe" "Counter-Strike 1.6" ENABLE ALL
    3⤵
    - Modifies Windows Firewall
    - Event Triggered Execution: Netsh Helper DLL
    - System Location Discovery: System Language Discovery
    PID:1960
- - C:\Windows\SysWOW64\netsh.exe
    "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="Counter-Strike 1.6" dir=in action=allow program="C:\Games\Counter Strike 1.6\cs.exe" enable=yes
    3⤵
    - Modifies Windows Firewall
    - Event Triggered Execution: Netsh Helper DLL
    - System Location Discovery: System Language Discovery
    PID:4108
- - C:\Windows\SysWOW64\netsh.exe
    "C:\Windows\system32\netsh.exe" advfirewall firewall add rule name="Counter-Strike 1.6" dir=out action=allow program="C:\Games\Counter Strike 1.6\cs.exe" enable=yes
    3⤵
    - Modifies Windows Firewall
    - Event Triggered Execution: Netsh Helper DLL
    - System Location Discovery: System Language Discovery
    PID:836
- - C:\Windows\SysWOW64\cmd.exe
    "cmd.exe" /c wmic.exe path win32_computersystemproduct get uuid > "C:\Users\Admin\AppData\Local\Temp\is-JRQBT.tmp\wmic_result.txt" && wmic.exe os get Version, Caption >> "C:\Users\Admin\AppData\Local\Temp\is-JRQBT.tmp\wmic_result.txt"
    3⤵
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:4088
  - - C:\Windows\SysWOW64\Wbem\WMIC.exe
      wmic.exe path win32_computersystemproduct get uuid
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      PID:676
  - - C:\Windows\SysWOW64\Wbem\WMIC.exe
      wmic.exe os get Version, Caption
      4⤵
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      PID:1280

C:\Games\Counter Strike 1.6\cs.exe
"C:\Games\Counter Strike 1.6\cs.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3468
- C:\Games\Counter Strike 1.6\crashpad_handler.exe
  "C:\Games\Counter Strike 1.6\crashpad_handler.exe" --no-rate-limit "--database=C:\Games\Counter Strike 1.6\crashes" "--metrics-dir=C:\Games\Counter Strike 1.6\crashes" --url=https://sentry.cs16nextclient.com:443/api/3/minidump/?sentry_client=sentry.native/0.6.6&sentry_key=d5683aac3be41375ad96f7e8b8032bc7 --attachment=launcher.log --attachment=platform\config\serverbrowser.dat --attachment=user_game_config.ini --attachment=setting_guard.ini --attachment=qconsole.log --attachment=debug.log --attachment=nitro_api.log "--attachment=C:\Games\Counter Strike 1.6\crashes\667dcaa7-d744-41a7-f4d9-d278e030b778.run\__sentry-event" "--attachment=C:\Games\Counter Strike 1.6\crashes\667dcaa7-d744-41a7-f4d9-d278e030b778.run\__sentry-breadcrumb1" "--attachment=C:\Games\Counter Strike 1.6\crashes\667dcaa7-d744-41a7-f4d9-d278e030b778.run\__sentry-breadcrumb2" --initial-client-data=0x36c,0x370,0x374,0x348,0x378,0xd3b6dc,0xd3b6f4,0xd3b704
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2812
- C:\Windows\SysWOW64\Wbem\wmic.exe
  wmic path win32_baseboard get serialnumber
  2⤵
  - System Location Discovery: System Language Discovery
  PID:3304
- C:\Windows\SysWOW64\Wbem\wmic.exe
  wmic diskdrive get name, serialnumber /format:csv
  2⤵
  - System Location Discovery: System Language Discovery
  PID:1016

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004B8
1⤵
PID:4084

Network

DNS

api.gameanalytics.com

cs.exe

Remote address:

8.8.8.8:53

Request

api.gameanalytics.com

IN A

Response

api.gameanalytics.com

IN A

54.208.69.199

api.gameanalytics.com

IN A

3.211.107.229

api.gameanalytics.com

IN A

184.73.195.155

api.gameanalytics.com

IN A

52.204.227.150

api.gameanalytics.com

IN A

3.213.131.250

api.gameanalytics.com

IN A

44.197.53.67

api.gameanalytics.com

IN A

54.84.176.231

api.gameanalytics.com

IN A

3.224.115.160
DNS

api.gameanalytics.com

cs.exe

Remote address:

8.8.8.8:53

Request

api.gameanalytics.com

IN A
DNS

cs.masterserver.su

cs.exe

Remote address:

8.8.8.8:53

Request

cs.masterserver.su

IN A

Response

cs.masterserver.su

IN A

104.21.234.198

cs.masterserver.su

IN A

104.21.234.199
DNS

cs.masterserver.su

cs.exe

Remote address:

8.8.8.8:53

Request

cs.masterserver.su

IN A
DNS

8.8.8.8.in-addr.arpa

Remote address:

8.8.8.8:53

Request

8.8.8.8.in-addr.arpa

IN PTR

Response

8.8.8.8.in-addr.arpa

IN PTR

dnsgoogle
DNS

198.234.21.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

198.234.21.104.in-addr.arpa

IN PTR

Response
DNS

225.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

225.50.174.46.in-addr.arpa

IN PTR

Response

225.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

190.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

190.213.122.62.in-addr.arpa

IN PTR

Response

190.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

27.137.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

27.137.230.37.in-addr.arpa

IN PTR

Response

27.137.230.37.in-addr.arpa

IN PTR

37-230-137-27whostonline
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/8.4.0-DEV
Accept: */*
Accept-Encoding: deflate, gzip
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015192
Content-type: application/json
LaunchGameCount: 0
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:19:58 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
ETag: W/"1603-Mm4FFLJ9wvG6xnziO1J1Xl6s3ZM"
Content-Encoding: gzip
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GcObdGZHSZpiNFAywEGyEImAzxLSLTzeLfgNTq6Sxb8z57r%2F3KpnH4fWCI3soWDPiErFi6hi84vIk%2B8Z68k1idxiFZiTIsbhpsre2geNL6ffiset4KMksCGJfNHCAzdyvTKpAAQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af5805f1a0094f1-LHR
alt-svc: h3=":443"; ma=86400
DNS

199.69.208.54.in-addr.arpa

Remote address:

8.8.8.8:53

Request

199.69.208.54.in-addr.arpa

IN PTR

Response

199.69.208.54.in-addr.arpa

IN PTR

ec2-54-208-69-199 compute-1 amazonawscom
DNS

234.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

234.204.136.45.in-addr.arpa

IN PTR

Response

234.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015194
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:19:59 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
ETag: W/"703-eJZyuqakQ+hnWKI3tzfw0kiXGH4"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GGLkVkKrVeAcDaqLMumBs2h3F2yRFuFnOm0KmB1JK5oSVa5TgGNqepBzHEGiIUeWxXJzMbwtT5b9Sw1%2BtVZcMyCmFurD%2BZdiNigJu1fzoJ1Ycp07PnhV7Xsb5HRFPFZm4PgbzSk%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580653f799557-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015194
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:19:59 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 87
Connection: keep-alive
X-Powered-By: Express
ETag: W/"57-2cTyaUzTHYZJxGl5CeUiNTW99qk"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2Fntscy%2BZQf6mzN4MHuV90Ht8G%2FeqhtFrbevg3jAOphJTDs%2BOaxLll0RKr9APgBMTsZK0qNfwlSQGDlvppV4J7PZPAUz4oLEOAdQa8HifHquN1n73olwUjQ%2Bm%2FgEmMu%2BscMQ9aA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af5806539b4cd39-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015197
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:02 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 87
Connection: keep-alive
X-Powered-By: Express
ETag: W/"57-j6d0RTs7tldAO45AU7Kmx6u5tdA"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=poRSByMb1nlOS6IuLDMLCPy1%2FjIJQBT3ZfK3OhgRThBMsngN3bbYWTGX7B0iiiBlu1K4bJ69qL6umCPbmsW7YjzjUTXU6ACGPoKUimEVos5h%2FplkTYRYjyfHCrZ%2Bz0zb2GuvYdg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580779a1563c8-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015197
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:02 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 87
Connection: keep-alive
X-Powered-By: Express
ETag: W/"57-wyc1yifbcICwcx9QR9e5YW9Smqk"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3xNah77p0NYcICydMdoIzc76wWA8yUqN0MqveYJywJ5T1nvN6DiL2GC%2FQnTIurMm%2FFckl8bexIGo8%2Bf1R6GUCbiafVqZg0hHV4AV1WSM60tyivRt2Zt5TtQTythBJ2eNEMeH6bo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580779dd09455-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015197
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 407

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vUxJYZ3wxviM8GqrgxN0sBvdqKG5CxsReILDLyCxWn5zL5e5XBoFYmyXjGLDFP1ESCd9D8bHJCYpVr0XbYHfaoLiMz5QJw7czKcsNgmAmIXCpRwwIz1FKk1uAyqNTMw%2BixzQ3ts%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af58078af6b9401-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015197
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:02 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cE9ThQ0VxoUNqkt9nqUOgKREJauiDSQIqD09HX5dWJIm6aMhHqQVChsmZ3Od64ozFxDa2aMBJHh57ZjiXcWYyRdMEqVJ8BEhth4hf7cle%2FSlfZr3ajX1fKW0hJV0HAq5a1U%2FJVM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af58078f840417c-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015198
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:03 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
ETag: W/"c83-tcPYoAgCgJjpzgTQpV6dgL9fCxM"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lYe2VEwX3cEKpg8QsmA7nMY8uHGcbAFApCrSjj0klNvqrcEe4Mjiwv%2FJj1%2BoqjUA3wyn0UsVqKYpAnbJEfdyCqee%2FiGOMm6b8JPp4SgSxVqme4ctf6l0XX%2BcjO5uCnRdQuMUibM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af5807e8b88640c-LHR
alt-svc: h3=":443"; ma=86400
DNS

57.214.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

57.214.122.62.in-addr.arpa

IN PTR

Response

57.214.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

147.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

147.52.174.46.in-addr.arpa

IN PTR

Response

147.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

139.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

139.55.174.46.in-addr.arpa

IN PTR

Response

139.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

75.214.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

75.214.122.62.in-addr.arpa

IN PTR

Response

75.214.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

153.210.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

153.210.230.37.in-addr.arpa

IN PTR

Response

153.210.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

40.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

40.54.174.46.in-addr.arpa

IN PTR

Response

40.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

79.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

79.55.174.46.in-addr.arpa

IN PTR

Response

79.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

10.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.52.174.46.in-addr.arpa

IN PTR

Response

10.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

153.158.181.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

153.158.181.95.in-addr.arpa

IN PTR

Response

153.158.181.95.in-addr.arpa

IN PTR

15315818195in-addrarpacsservru
DNS

nexusrules.officeapps.live.com

Remote address:

8.8.8.8:53

Request

nexusrules.officeapps.live.com

IN A

Response

nexusrules.officeapps.live.com

IN CNAME

prod.nexusrules.live.com.akadns.net

prod.nexusrules.live.com.akadns.net

IN A

52.111.236.21
DNS

245.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

245.50.174.46.in-addr.arpa

IN PTR

Response

245.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

120.210.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

120.210.230.37.in-addr.arpa

IN PTR

Response

120.210.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

216.49.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.49.174.46.in-addr.arpa

IN PTR

Response

216.49.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

142.49.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

142.49.174.46.in-addr.arpa

IN PTR

Response

142.49.174.46.in-addr.arpa

IN PTR

zmcsomodru
DNS

235.158.181.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

235.158.181.95.in-addr.arpa

IN PTR

Response

235.158.181.95.in-addr.arpa

IN PTR

23515818195in-addrarpacsservru
DNS

88.49.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

88.49.174.46.in-addr.arpa

IN PTR

Response

88.49.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

217.53.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.53.174.46.in-addr.arpa

IN PTR

Response

217.53.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

252.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

252.54.174.46.in-addr.arpa

IN PTR

Response

252.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

38.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

38.54.174.46.in-addr.arpa

IN PTR

Response

38.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

38.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

38.55.174.46.in-addr.arpa

IN PTR

Response

38.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

174.48.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.48.174.46.in-addr.arpa

IN PTR

Response

174.48.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

227.205.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

227.205.136.45.in-addr.arpa

IN PTR

Response

227.205.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

158.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

158.52.174.46.in-addr.arpa

IN PTR

Response

158.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

105.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

105.50.174.46.in-addr.arpa

IN PTR

Response

105.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

96.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

96.228.230.37.in-addr.arpa

IN PTR

Response

96.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

116.2.93.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

116.2.93.194.in-addr.arpa

IN PTR

Response

116.2.93.194.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

57.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

57.55.174.46.in-addr.arpa

IN PTR

Response

57.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

230.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

230.54.174.46.in-addr.arpa

IN PTR

Response

230.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

68.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

68.55.174.46.in-addr.arpa

IN PTR

Response

68.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

155.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

155.52.174.46.in-addr.arpa

IN PTR

Response

155.52.174.46.in-addr.arpa

IN PTR

cloudvdsrs-mediaru
DNS

96.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

96.204.136.45.in-addr.arpa

IN PTR

Response

96.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

51.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

51.215.122.62.in-addr.arpa

IN PTR

Response

51.215.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

129.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

129.215.122.62.in-addr.arpa

IN PTR

Response

129.215.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

127.48.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

127.48.174.46.in-addr.arpa

IN PTR

Response

127.48.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

191.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

191.213.122.62.in-addr.arpa

IN PTR

Response

191.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

101.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

101.215.122.62.in-addr.arpa

IN PTR

Response

101.215.122.62.in-addr.arpa

IN PTR

csbroru
DNS

242.162.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

242.162.230.37.in-addr.arpa

IN PTR

Response

242.162.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

225.210.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

225.210.230.37.in-addr.arpa

IN PTR

Response

225.210.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

228.51.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

228.51.174.46.in-addr.arpa

IN PTR

Response

228.51.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

216.51.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

216.51.174.46.in-addr.arpa

IN PTR

Response

216.51.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

173.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

173.204.136.45.in-addr.arpa

IN PTR

Response

173.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

27.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

27.228.230.37.in-addr.arpa

IN PTR

Response

27.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

238.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

238.213.122.62.in-addr.arpa

IN PTR

Response

238.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

36.53.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

36.53.174.46.in-addr.arpa

IN PTR

Response

36.53.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

211.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

211.54.174.46.in-addr.arpa

IN PTR

Response

211.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

135.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

135.228.230.37.in-addr.arpa

IN PTR

Response

135.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

129.2.93.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

129.2.93.194.in-addr.arpa

IN PTR

Response

129.2.93.194.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

63.205.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

63.205.136.45.in-addr.arpa

IN PTR

Response

63.205.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

22.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

22.52.174.46.in-addr.arpa

IN PTR

Response

22.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

177.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

177.54.174.46.in-addr.arpa

IN PTR

Response

177.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

190.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

190.215.122.62.in-addr.arpa

IN PTR

Response

190.215.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

232.53.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

232.53.174.46.in-addr.arpa

IN PTR

Response

232.53.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

151.2.93.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

151.2.93.194.in-addr.arpa

IN PTR

Response

151.2.93.194.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

159.80.223.92.in-addr.arpa

Remote address:

8.8.8.8:53

Request

159.80.223.92.in-addr.arpa

IN PTR

Response

159.80.223.92.in-addr.arpa

IN PTR

hbksvarog-gamecom
DNS

56.205.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

56.205.136.45.in-addr.arpa

IN PTR

Response

56.205.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

151.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

151.52.174.46.in-addr.arpa

IN PTR

Response

151.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

241.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.52.174.46.in-addr.arpa

IN PTR

Response

241.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

161.205.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

161.205.136.45.in-addr.arpa

IN PTR

Response

161.205.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

142.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

142.204.136.45.in-addr.arpa

IN PTR

Response

142.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

211.158.181.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

211.158.181.95.in-addr.arpa

IN PTR

Response

211.158.181.95.in-addr.arpa

IN PTR

21115818195in-addrarpacsservru
DNS

211.11.191.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

211.11.191.93.in-addr.arpa

IN PTR

Response

211.11.191.93.in-addr.arpa

IN PTR

93-191-11-211fiordru
DNS

21.236.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

21.236.111.52.in-addr.arpa

IN PTR

Response
DNS

self.events.data.microsoft.com

Remote address:

8.8.8.8:53

Request

self.events.data.microsoft.com

IN A

Response

self.events.data.microsoft.com

IN CNAME

self-events-data.trafficmanager.net

self-events-data.trafficmanager.net

IN CNAME

onedscolprdcus14.centralus.cloudapp.azure.com

onedscolprdcus14.centralus.cloudapp.azure.com

IN A

104.208.16.90
DNS

85.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

85.204.136.45.in-addr.arpa

IN PTR

Response

85.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

159.137.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

159.137.230.37.in-addr.arpa

IN PTR

Response

159.137.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

6.210.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

6.210.230.37.in-addr.arpa

IN PTR

Response

6.210.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

17.49.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

17.49.174.46.in-addr.arpa

IN PTR

Response

17.49.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

151.158.181.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

151.158.181.95.in-addr.arpa

IN PTR

Response

151.158.181.95.in-addr.arpa

IN PTR

15115818195in-addrarpacsservru
DNS

213.11.191.93.in-addr.arpa

Remote address:

8.8.8.8:53

Request

213.11.191.93.in-addr.arpa

IN PTR

Response

213.11.191.93.in-addr.arpa

IN PTR

93-191-11-213fiordru
DNS

252.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

252.213.122.62.in-addr.arpa

IN PTR

Response

252.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

172.2.93.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.2.93.194.in-addr.arpa

IN PTR

Response

172.2.93.194.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

209.162.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

209.162.230.37.in-addr.arpa

IN PTR

Response

209.162.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

148.155.63.5.in-addr.arpa

Remote address:

8.8.8.8:53

Request

148.155.63.5.in-addr.arpa

IN PTR

Response

148.155.63.5.in-addr.arpa

IN PTR

5-63-155-148cloudvpsregruhostingru
DNS

194.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.204.136.45.in-addr.arpa

IN PTR

Response

194.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

179.48.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

179.48.174.46.in-addr.arpa

IN PTR

Response

179.48.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

40.2.93.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

40.2.93.194.in-addr.arpa

IN PTR

Response

40.2.93.194.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

188.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

188.204.136.45.in-addr.arpa

IN PTR

Response

188.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

107.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

107.215.122.62.in-addr.arpa

IN PTR

Response

107.215.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

227.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

227.213.122.62.in-addr.arpa

IN PTR

Response

227.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

64.213.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

64.213.122.62.in-addr.arpa

IN PTR

Response

64.213.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

90.16.208.104.in-addr.arpa

Remote address:

8.8.8.8:53

Request

90.16.208.104.in-addr.arpa

IN PTR

Response
DNS

233.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

233.228.230.37.in-addr.arpa

IN PTR

Response

233.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

155.55.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

155.55.174.46.in-addr.arpa

IN PTR

Response

155.55.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

254.54.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

254.54.174.46.in-addr.arpa

IN PTR

Response

254.54.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

63.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

63.50.174.46.in-addr.arpa

IN PTR

Response

63.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

ctldl.windowsupdate.com

Remote address:

8.8.8.8:53

Request

ctldl.windowsupdate.com

IN A

Response

ctldl.windowsupdate.com

IN CNAME

ctldl.windowsupdate.com.delivery.microsoft.com

ctldl.windowsupdate.com.delivery.microsoft.com

IN CNAME

wu-b-net.trafficmanager.net

wu-b-net.trafficmanager.net

IN CNAME

bg.microsoft.map.fastly.net

bg.microsoft.map.fastly.net

IN A

199.232.210.172

bg.microsoft.map.fastly.net

IN A

199.232.214.172
DNS

142.162.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

142.162.230.37.in-addr.arpa

IN PTR

Response

142.162.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

226.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

226.215.122.62.in-addr.arpa

IN PTR

Response

226.215.122.62.in-addr.arpa

IN PTR

s1mxplrsru
DNS

168.204.136.45.in-addr.arpa

Remote address:

8.8.8.8:53

Request

168.204.136.45.in-addr.arpa

IN PTR

Response

168.204.136.45.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

174.215.122.62.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.215.122.62.in-addr.arpa

IN PTR

Response

174.215.122.62.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

172.51.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.51.174.46.in-addr.arpa

IN PTR

Response

172.51.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

115.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

115.52.174.46.in-addr.arpa

IN PTR

Response

115.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

10.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

10.50.174.46.in-addr.arpa

IN PTR

Response

10.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

144.53.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

144.53.174.46.in-addr.arpa

IN PTR

Response

144.53.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

174.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.228.230.37.in-addr.arpa

IN PTR

Response

174.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

60.113.158.185.in-addr.arpa

Remote address:

8.8.8.8:53

Request

60.113.158.185.in-addr.arpa

IN PTR

Response
DNS

115.50.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

115.50.174.46.in-addr.arpa

IN PTR

Response

115.50.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

28.48.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

28.48.174.46.in-addr.arpa

IN PTR

Response

28.48.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

71.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

71.228.230.37.in-addr.arpa

IN PTR

Response

71.228.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

184.137.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

184.137.230.37.in-addr.arpa

IN PTR

Response

184.137.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

158.162.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

158.162.230.37.in-addr.arpa

IN PTR

Response

158.162.230.37.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

174.49.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

174.49.174.46.in-addr.arpa

IN PTR

Response

174.49.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

231.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

231.52.174.46.in-addr.arpa

IN PTR

Response

231.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

250.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

250.52.174.46.in-addr.arpa

IN PTR

Response

250.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

199.52.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

199.52.174.46.in-addr.arpa

IN PTR

Response

199.52.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
DNS

84.199.89.152.in-addr.arpa

Remote address:

8.8.8.8:53

Request

84.199.89.152.in-addr.arpa

IN PTR

Response
DNS

211.228.230.37.in-addr.arpa

Remote address:

8.8.8.8:53

Request

211.228.230.37.in-addr.arpa

IN PTR

Response

211.228.230.37.in-addr.arpa

IN PTR

mailcnabcru
DNS

172.210.232.199.in-addr.arpa

Remote address:

8.8.8.8:53

Request

172.210.232.199.in-addr.arpa

IN PTR

Response
DNS

142.158.181.95.in-addr.arpa

Remote address:

8.8.8.8:53

Request

142.158.181.95.in-addr.arpa

IN PTR

Response

142.158.181.95.in-addr.arpa

IN PTR

14215818195in-addrarpacsservru
DNS

196.116.67.194.in-addr.arpa

Remote address:

8.8.8.8:53

Request

196.116.67.194.in-addr.arpa

IN PTR

Response

196.116.67.194.in-addr.arpa

IN PTR

mailcshubru
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015201
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 259

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:06 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7lR6Zj1VV19CQoEdFrwJ%2BV7awVEsEtdEau%2FaaNuKmC7pVGWG3ybvd4OTqHIPXR%2B0IUo5mAjA8zwwk3L%2B6ZCXOav5lAXMVXqVV4c3RRyFf0p6lsdCxmyml7Cq%2FEoeWefd56RijrY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580925c3979bc-LHR
alt-svc: h3=":443"; ma=86400
DNS

137.48.174.46.in-addr.arpa

Remote address:

8.8.8.8:53

Request

137.48.174.46.in-addr.arpa

IN PTR

Response

137.48.174.46.in-addr.arpa

IN PTR

Hosted-bymyarenaru
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015202
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:07 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FYtagL3MWCwkUUMZkA2ROtF2fI9GsM6PGqOEWisO9huoU2dnxkYrbjyS5j1zVgigjGV1iDVghpcxV96J93ATVKsaCR%2FDbIVBwD3NSOszqXZzRGrOccZCcRX5%2FTtkPJ65iG00LV4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580977a0e6353-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015207
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:12 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MdXafXzCxD3IoRyCm7jkymkQRhuN0GhvAwU1ARFaSFtNrq8Qb2w1dkfinv0XzyDu1G%2FuOq43x8SY5zGIpzS9XjasdP4jTO8waqsaHdAmX3ew%2FDIoCWBMve3YwCvZCgf3cGhmB4k%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580b829788892-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015212
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:18 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BLVDDiRQl2RYIy1FpSax%2F2lOfu775H50GhQfSzR%2FQPMFapJ6Wu2XsIWxGdoYpqpBTug9vargIe2R1Y0Q5prWSc6JG7Sxl%2Bq0%2BhpzZJywfv9SHBmiHg%2FuTzKqfAW5rS%2BXEuQBgM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580d8f9ec71b6-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015217
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:23 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PxdiHrlB2%2FSosKaidsbQbLs1pbPqWM%2BMqNSJeklb0%2Bm0VHBvRjjm2Xwh1AFLg4bZqVp%2BCy0ppAzZOjmw4gf0p2%2FTfald1E1j8eXP5B7oPUI7Bzy74OzkGQHgUURUcRlbV8Se1h4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af580f85c116329-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015222
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:28 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3ryUXyKEakc%2FaIygPhb3s5Zqppsh7wXfs2OgE9IxbUq3%2FRKWBn5PmFoCRv9OreOgMNVgej5KpHpferHA7j42shWp11craMAAY9nLUEC73yf6s3wvzz%2B3QVGf%2BIJFP9k1YMzy4%2BI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581185cad7333-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015228
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:33 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RF6xkqYxwH8yHHDvKExPVd6vOfBjBOLjbtu7w8ifdxxVfFFnUO6OdyroXuvIok%2F1p2ic6%2Fl%2BeYIx9hfnip1XDozxHwv2NhoxwAn%2BDBBhmxigzJDayMC6vrLHo4qBU1n%2BWkWTPA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581393c4363ab-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015233
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:38 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=t%2BJ9qrWrtpa8HwqtWcNEJe%2BmTiBd%2F6lvwFxlVLe%2FJE1lASp2FX3B3n%2F4YrOCB5BDKSmA4uaKrYDh4lBdZ5xNGXXBFoiBQ%2FTYsdyfpyt49FvZt%2F2sYXi6qidozaINOGUFjwUFN58%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af5815928be94c9-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015238
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:43 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i%2FInIPFlyKdqW7vJoy%2BtDpt%2BlEdfnYoKl%2BmnQ4jIEC%2BHKkz1dmuO%2FZagCivy9qKPmOqQgen80XtXNzWSGADqNRLABk%2FCzDJEM%2F5qvKYIeWSzDlpM5SlgJs2IBrqwxL1oNrQLLqs%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af58179fa1763b6-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015243
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:49 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lvW3vIA%2B1SnE9pDP3jgLkOxzZr1oui0bUXPJ6BoSU5spzsghih%2BalvklnaJepXl4w1%2B%2FLdRvzzJmGO%2F6xlz6OVH%2FPlFoMTHzl5o4RzXAhZj4i%2B742Lc0%2B%2FVhxWo6Ju8O2xwfESM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581997b7d63f5-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015248
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:54 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=44jhLzRmiax2XQjU6y9ghemVE4ISRZ6Kx1MyQ8bq00zY5KJr24IlMic9%2F5plfTGzQ1oMxis3s8qb6L%2BtUzlE2j0iLHAv1OtwW38hIc%2BTKJIChhfx09xdqk8J8IrgQt655ubrm2U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581b99ea3bd93-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015253
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6QUbVAVsHYdM0ckaR4lo8z86%2B2e2gC%2B%2Finznvuvk%2F0Rt8a5G57OS8W9ntaSH%2Fk4ixeZco9HIxxYiWbF44bZ8LTO1rr13e%2F2oPPfJ6DlqO0kMXT%2BnKxeTe6Ugp3KC0xC5Hb2dGV8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581d92ddd06f5-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015254
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 107

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:20:59 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Powered-By: Express
ETag: W/"703-ppHxq/OU8osn5dzqHTdkbuttvhc"
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LoQ0darx5wsEHRMD6wuanVgakuHPSkozlDOxdTt%2BI6%2BKsUskF9KZzB5w%2FmNv8%2B3WQwt6Ozofd1jsLUAmZUVJiHoGSXHKMfZywnbCPkprBXKBfOt33GUrG2KjdsswIO3A%2BcTiWZ8%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581dc8b0c636a-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015258
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:21:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W6KSAaISzmfoPBUOAwsTPpP1rfCUqSFTTTVnIf5RACbRG2YQNi94WFb7BO1%2BJcsPwFi9XhR%2F5uiGgbIQRnsaEc2D0feMAZFGHMAPvME%2BSuhkNyEmlHe8fksDW0IvFdjyEhQzE34%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af581f90f9e6316-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015263
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:21:09 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B0%2FXwqCPxtD1zp8GEpTfzSweiE9BT5NCWsqOKZ65n58d6HX4fVhphc7CO7vKHUuRAxP5LXymcLI41WnJjmty8yHQhmPDXwNjTz4Omqd2ldjOEdi8sOkMjCxU4tVYKhGmvSPjuBM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af58218ca7f5315-LHR
alt-svc: h3=":443"; ma=86400
POST

http://cs.masterserver.su/gc

cs.exe

Remote address:

104.21.234.198:80

Request

POST /gc HTTP/1.1
Host: cs.masterserver.su
User-Agent: curl/7.79.1
Accept: */*
Accept-Encoding: identity
Branch: allmsnet
BuildVersion: 2.3.2
Client-Time: 1723015269
Content-type: application/json
LaunchGameCount: 1
Partner: allmsnet
UID: 0A8AF5C0-CC57-4D4C-AE13-C0EB6D73A881
Content-Length: 279

Response

HTTP/1.1 200 OK

Date: Wed, 07 Aug 2024 07:21:14 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oPYH3omJ0kKtWCd65bHzdqXboCdlmTGHvyKgDmzzz180wUMKL%2FziY%2FC36g1Jnq0vvjMeg2U8XgP6oorBV5JxVEq%2BuwtDKvFEW4J6x9RC8cCMcdo3gEOg3sH3F7PTchHgPk4%2B7tQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8af582393802068e-LHR
alt-svc: h3=":443"; ma=86400

127.0.0.1:60184

cs.exe
127.0.0.1:60186

cs.exe
54.208.69.199:443

api.gameanalytics.com

tls

cs.exe

1.3kB
3.3kB
10
8
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

748 B
5.4kB
7
8

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
54.208.69.199:443

api.gameanalytics.com

tls

cs.exe

2.0kB
3.1kB
12
7
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

694 B
2.7kB
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

648 B
874 B
5
3

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
127.0.0.1:60234

cs.exe
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

648 B
906 B
5
4

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

648 B
906 B
5
4

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

994 B
826 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
828 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

694 B
4.2kB
6
7

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

996 B
1.6kB
9
8

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
54.208.69.199:443

api.gameanalytics.com

tls

cs.exe

1.6kB
3.1kB
10
10
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
830 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
127.0.0.1:60387

cs.exe
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
828 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
838 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
834 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
834 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
834 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
838 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
840 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
842 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
830 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
838 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

694 B
2.7kB
6
6

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
830 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
828 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200
104.21.234.198:80

http://cs.masterserver.su/gc

http

cs.exe

866 B
832 B
6
5

HTTP Request

POST http://cs.masterserver.su/gc

HTTP Response

200

8.8.8.8:53

api.gameanalytics.com

dns

cs.exe

134 B
195 B
2
1

DNS Request

api.gameanalytics.com

DNS Request

api.gameanalytics.com

DNS Response

54.208.69.199

3.211.107.229

184.73.195.155

52.204.227.150

3.213.131.250

44.197.53.67

54.84.176.231

3.224.115.160
8.8.8.8:53

cs.masterserver.su

dns

cs.exe

128 B
96 B
2
1

DNS Request

cs.masterserver.su

DNS Request

cs.masterserver.su

DNS Response

104.21.234.198

104.21.234.199
8.8.8.8:53

8.8.8.8.in-addr.arpa

dns

356 B
550 B
5
5

DNS Request

8.8.8.8.in-addr.arpa

DNS Request

198.234.21.104.in-addr.arpa

DNS Request

225.50.174.46.in-addr.arpa

DNS Request

190.213.122.62.in-addr.arpa

DNS Request

27.137.230.37.in-addr.arpa
8.8.8.8:53

199.69.208.54.in-addr.arpa

dns

145 B
234 B
2
2

DNS Request

199.69.208.54.in-addr.arpa

DNS Request

234.204.136.45.in-addr.arpa
46.174.50.225:27015

cs.exe

53 B
328 B
1
2
45.136.204.234:27015

cs.exe

53 B
129 B
1
1
62.122.214.57:27015

cs.exe

53 B
328 B
1
2
62.122.214.75:27015

cs.exe

53 B
342 B
1
2
46.174.54.40:27015

cs.exe

53 B
144 B
1
1
46.174.52.10:27250

cs.exe

53 B
139 B
1
1
37.230.210.120:27015

cs.exe

53 B
146 B
1
1
46.174.49.142:27015

cs.exe

53 B
302 B
1
2
46.174.54.252:27015

cs.exe

53 B
294 B
1
2
45.136.205.227:27015

cs.exe

53 B
127 B
1
1
46.174.52.158:27015

cs.exe

106 B
552 B
2
4
194.93.2.116:27015

cs.exe

106 B
352 B
2
2
46.174.55.57:27015

cs.exe

53 B
281 B
1
2
46.174.54.230:27015

cs.exe

106 B
272 B
2
2
46.174.55.68:27015

cs.exe

53 B
275 B
1
2
8.8.8.8:53

57.214.122.62.in-addr.arpa

dns

216 B
318 B
3
3

DNS Request

57.214.122.62.in-addr.arpa

DNS Request

147.52.174.46.in-addr.arpa

DNS Request

139.55.174.46.in-addr.arpa
8.8.8.8:53

75.214.122.62.in-addr.arpa

dns

145 B
213 B
2
2

DNS Request

75.214.122.62.in-addr.arpa

DNS Request

153.210.230.37.in-addr.arpa
8.8.8.8:53

40.54.174.46.in-addr.arpa

dns

142 B
210 B
2
2

DNS Request

40.54.174.46.in-addr.arpa

DNS Request

79.55.174.46.in-addr.arpa
8.8.8.8:53

10.52.174.46.in-addr.arpa

dns

292 B
476 B
4
4

DNS Request

10.52.174.46.in-addr.arpa

DNS Request

153.158.181.95.in-addr.arpa

DNS Request

nexusrules.officeapps.live.com

DNS Response

52.111.236.21

DNS Request

245.50.174.46.in-addr.arpa
8.8.8.8:53

120.210.230.37.in-addr.arpa

dns

145 B
213 B
2
2

DNS Request

120.210.230.37.in-addr.arpa

DNS Request

216.49.174.46.in-addr.arpa
8.8.8.8:53

142.49.174.46.in-addr.arpa

dns

288 B
433 B
4
4

DNS Request

142.49.174.46.in-addr.arpa

DNS Request

235.158.181.95.in-addr.arpa

DNS Request

88.49.174.46.in-addr.arpa

DNS Request

217.53.174.46.in-addr.arpa
8.8.8.8:53

252.54.174.46.in-addr.arpa

dns

286 B
422 B
4
4

DNS Request

252.54.174.46.in-addr.arpa

DNS Request

38.54.174.46.in-addr.arpa

DNS Request

38.55.174.46.in-addr.arpa

DNS Request

174.48.174.46.in-addr.arpa
8.8.8.8:53

227.205.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

227.205.136.45.in-addr.arpa
8.8.8.8:53

158.52.174.46.in-addr.arpa

dns

216 B
318 B
3
3

DNS Request

158.52.174.46.in-addr.arpa

DNS Request

105.50.174.46.in-addr.arpa

DNS Request

96.228.230.37.in-addr.arpa
8.8.8.8:53

116.2.93.194.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

116.2.93.194.in-addr.arpa
8.8.8.8:53

57.55.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

57.55.174.46.in-addr.arpa
8.8.8.8:53

230.54.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

230.54.174.46.in-addr.arpa
8.8.8.8:53

68.55.174.46.in-addr.arpa

dns

215 B
317 B
3
3

DNS Request

68.55.174.46.in-addr.arpa

DNS Request

155.52.174.46.in-addr.arpa

DNS Request

96.204.136.45.in-addr.arpa
62.122.213.190:27015

cs.exe

53 B
126 B
1
1
95.181.158.153:27050

cs.exe

53 B
146 B
1
1
46.174.50.105:27015

cs.exe

53 B
116 B
1
1
46.174.54.38:27015

cs.exe

53 B
105 B
1
1
46.174.52.147:27015

cs.exe

53 B
256 B
1
2
37.230.210.153:27015

cs.exe

53 B
297 B
1
2
46.174.49.216:27015

cs.exe

53 B
122 B
1
1
95.181.158.235:27015

cs.exe

53 B
301 B
1
2
46.174.55.79:27015

cs.exe

53 B
133 B
1
1
46.174.52.155:27015

cs.exe

53 B
318 B
1
2
62.122.215.51:27015

cs.exe

53 B
278 B
1
2
62.122.213.191:27015

cs.exe

53 B
182 B
1
1
37.230.162.242:27015

cs.exe

53 B
123 B
1
1
37.230.210.225:27015

cs.exe

53 B
253 B
1
2
46.174.51.228:27015

cs.exe

53 B
148 B
1
1
46.174.51.216:27015

cs.exe

53 B
230 B
1
2
45.136.204.173:27016

cs.exe

53 B
207 B
1
2
37.230.228.27:27015

cs.exe

53 B
318 B
1
2
62.122.213.238:27015

cs.exe

53 B
311 B
1
2
46.174.53.36:27015

cs.exe

53 B
215 B
1
2
46.174.54.211:27015

cs.exe

53 B
270 B
1
2
37.230.228.135:27015

cs.exe

53 B
249 B
1
2
194.93.2.129:27015

cs.exe

53 B
245 B
1
2
45.136.205.63:27015

cs.exe

53 B
290 B
1
2
46.174.52.22:27313

cs.exe

53 B
333 B
1
2
46.174.54.177:27015

cs.exe

53 B
133 B
1
1
62.122.215.190:27074

cs.exe

53 B
128 B
1
1
46.174.53.232:27015

cs.exe

53 B
254 B
1
2
194.93.2.151:27015

cs.exe

53 B
367 B
1
2
92.223.80.159:27016

cs.exe

53 B
274 B
1
2
45.136.205.56:27015

cs.exe

53 B
230 B
1
2
46.174.52.151:27015

cs.exe

53 B
152 B
1
1
46.174.52.241:27015

cs.exe

53 B
131 B
1
1
45.136.205.161:27015

cs.exe

53 B
225 B
1
2
45.136.204.142:27015

cs.exe

53 B
283 B
1
2
95.181.158.211:27015

cs.exe

53 B
249 B
1
2
45.136.204.85:27015

cs.exe

53 B
246 B
1
2
37.230.137.159:37059

cs.exe

53 B
132 B
1
1
37.230.210.6:27015

cs.exe

53 B
275 B
1
2
46.174.49.17:27015

cs.exe

53 B
253 B
1
2
95.181.158.151:27111

cs.exe

53 B
247 B
1
2
93.191.11.213:27052

cs.exe

53 B
343 B
1
2
62.122.213.252:27015

cs.exe

53 B
155 B
1
1
194.93.2.172:27015

cs.exe

53 B
112 B
1
1
37.230.162.209:27015

cs.exe

53 B
121 B
1
1
8.8.8.8:53

51.215.122.62.in-addr.arpa

dns

217 B
319 B
3
3

DNS Request

51.215.122.62.in-addr.arpa

DNS Request

129.215.122.62.in-addr.arpa

DNS Request

127.48.174.46.in-addr.arpa
8.8.8.8:53

191.213.122.62.in-addr.arpa

dns

146 B
202 B
2
2

DNS Request

191.213.122.62.in-addr.arpa

DNS Request

101.215.122.62.in-addr.arpa
8.8.8.8:53

242.162.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

242.162.230.37.in-addr.arpa
8.8.8.8:53

225.210.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

225.210.230.37.in-addr.arpa
8.8.8.8:53

228.51.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

228.51.174.46.in-addr.arpa
8.8.8.8:53

216.51.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

216.51.174.46.in-addr.arpa
8.8.8.8:53

173.204.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

173.204.136.45.in-addr.arpa
8.8.8.8:53

27.228.230.37.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

27.228.230.37.in-addr.arpa
8.8.8.8:53

238.213.122.62.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

238.213.122.62.in-addr.arpa
8.8.8.8:53

36.53.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

36.53.174.46.in-addr.arpa
8.8.8.8:53

211.54.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

211.54.174.46.in-addr.arpa
8.8.8.8:53

135.228.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

135.228.230.37.in-addr.arpa
8.8.8.8:53

129.2.93.194.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

129.2.93.194.in-addr.arpa
8.8.8.8:53

63.205.136.45.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

63.205.136.45.in-addr.arpa
8.8.8.8:53

22.52.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

22.52.174.46.in-addr.arpa
8.8.8.8:53

177.54.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

177.54.174.46.in-addr.arpa
8.8.8.8:53

190.215.122.62.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

190.215.122.62.in-addr.arpa
8.8.8.8:53

232.53.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

232.53.174.46.in-addr.arpa
8.8.8.8:53

151.2.93.194.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

151.2.93.194.in-addr.arpa
8.8.8.8:53

159.80.223.92.in-addr.arpa

dns

72 B
105 B
1
1

DNS Request

159.80.223.92.in-addr.arpa
8.8.8.8:53

56.205.136.45.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

56.205.136.45.in-addr.arpa
8.8.8.8:53

151.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

151.52.174.46.in-addr.arpa
8.8.8.8:53

241.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

241.52.174.46.in-addr.arpa
8.8.8.8:53

161.205.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

161.205.136.45.in-addr.arpa
8.8.8.8:53

142.204.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

142.204.136.45.in-addr.arpa
8.8.8.8:53

211.158.181.95.in-addr.arpa

dns

293 B
587 B
4
4

DNS Request

211.158.181.95.in-addr.arpa

DNS Request

211.11.191.93.in-addr.arpa

DNS Request

21.236.111.52.in-addr.arpa

DNS Request

self.events.data.microsoft.com

DNS Response

104.208.16.90
8.8.8.8:53

85.204.136.45.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

85.204.136.45.in-addr.arpa
8.8.8.8:53

159.137.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

159.137.230.37.in-addr.arpa
8.8.8.8:53

6.210.230.37.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

6.210.230.37.in-addr.arpa
8.8.8.8:53

17.49.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

17.49.174.46.in-addr.arpa
8.8.8.8:53

151.158.181.95.in-addr.arpa

dns

73 B
124 B
1
1

DNS Request

151.158.181.95.in-addr.arpa
8.8.8.8:53

213.11.191.93.in-addr.arpa

dns

72 B
108 B
1
1

DNS Request

213.11.191.93.in-addr.arpa
8.8.8.8:53

252.213.122.62.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

252.213.122.62.in-addr.arpa
8.8.8.8:53

172.2.93.194.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

172.2.93.194.in-addr.arpa
8.8.8.8:53

209.162.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

209.162.230.37.in-addr.arpa
46.174.49.88:27015

cs.exe

53 B
134 B
1
1
46.174.52.22:27265

cs.exe

53 B
297 B
1
2
93.191.11.211:27032

cs.exe

53 B
152 B
1
1
37.230.137.27:27015

cs.exe

53 B
146 B
1
1
46.174.55.38:27015

cs.exe

53 B
119 B
1
1
46.174.55.139:27015

cs.exe

53 B
115 B
1
1
37.230.228.96:27015

cs.exe

53 B
174 B
1
1
62.122.215.129:27015

cs.exe

53 B
247 B
1
2
62.122.215.101:27015

cs.exe

53 B
147 B
1
1
45.136.204.96:27015

cs.exe

53 B
362 B
1
2
46.174.50.245:27015

cs.exe

53 B
334 B
1
2
5.63.155.148:27015

cs.exe

53 B
134 B
1
1
45.136.204.194:27015

cs.exe

53 B
142 B
1
1
194.93.2.40:27015

cs.exe

53 B
123 B
1
1
45.136.204.188:27015

cs.exe

53 B
136 B
1
1
62.122.215.107:27015

cs.exe

53 B
271 B
1
2
62.122.213.227:27015

cs.exe

53 B
301 B
1
2
37.230.228.233:27015

cs.exe

53 B
299 B
1
2
46.174.54.254:27015

cs.exe

53 B
149 B
1
1
37.230.162.142:27015

cs.exe

53 B
117 B
1
1
62.122.215.226:27016

cs.exe

53 B
125 B
1
1
45.136.204.168:27015

cs.exe

53 B
114 B
1
1
62.122.215.174:27015

cs.exe

53 B
138 B
1
1
62.122.215.226:27015

cs.exe

53 B
127 B
1
1
46.174.51.172:27015

cs.exe

53 B
146 B
1
1
46.174.52.10:27255

cs.exe

53 B
249 B
1
2
46.174.52.115:27015

cs.exe

53 B
136 B
1
1
46.174.50.10:27239

cs.exe

53 B
287 B
1
2
46.174.53.144:27015

cs.exe

53 B
150 B
1
1
37.230.228.174:27015

cs.exe

53 B
129 B
1
1
185.158.113.60:27023

cs.exe

53 B
158 B
1
1
46.174.50.115:27015

cs.exe

53 B
288 B
1
2
46.174.48.28:27203

cs.exe

53 B
141 B
1
1
37.230.228.71:27015

cs.exe

53 B
282 B
1
2
37.230.137.184:27015

cs.exe

53 B
237 B
1
2
37.230.162.158:27015

cs.exe

53 B
172 B
1
1
46.174.49.174:27015

cs.exe

53 B
118 B
1
1
46.174.48.28:27211

cs.exe

53 B
283 B
1
2
46.174.52.231:27015

cs.exe

53 B
310 B
1
2
46.174.52.250:27015

cs.exe

53 B
296 B
1
2
46.174.52.199:27015

cs.exe

53 B
290 B
1
2
152.89.199.84:27070

cs.exe

53 B
194 B
1
1
95.181.158.142:27015

cs.exe

53 B
279 B
1
2
8.8.8.8:53

148.155.63.5.in-addr.arpa

dns

71 B
122 B
1
1

DNS Request

148.155.63.5.in-addr.arpa
8.8.8.8:53

194.204.136.45.in-addr.arpa

dns

145 B
213 B
2
2

DNS Request

194.204.136.45.in-addr.arpa

DNS Request

179.48.174.46.in-addr.arpa
8.8.8.8:53

40.2.93.194.in-addr.arpa

dns

70 B
104 B
1
1

DNS Request

40.2.93.194.in-addr.arpa
8.8.8.8:53

188.204.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

188.204.136.45.in-addr.arpa
8.8.8.8:53

107.215.122.62.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

107.215.122.62.in-addr.arpa
8.8.8.8:53

227.213.122.62.in-addr.arpa

dns

217 B
359 B
3
3

DNS Request

227.213.122.62.in-addr.arpa

DNS Request

64.213.122.62.in-addr.arpa

DNS Request

90.16.208.104.in-addr.arpa
8.8.8.8:53

233.228.230.37.in-addr.arpa

dns

145 B
213 B
2
2

DNS Request

233.228.230.37.in-addr.arpa

DNS Request

155.55.174.46.in-addr.arpa
8.8.8.8:53

254.54.174.46.in-addr.arpa

dns

212 B
448 B
3
3

DNS Request

254.54.174.46.in-addr.arpa

DNS Request

63.50.174.46.in-addr.arpa

DNS Request

ctldl.windowsupdate.com

DNS Response

199.232.210.172

199.232.214.172
8.8.8.8:53

142.162.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

142.162.230.37.in-addr.arpa
8.8.8.8:53

226.215.122.62.in-addr.arpa

dns

73 B
99 B
1
1

DNS Request

226.215.122.62.in-addr.arpa
8.8.8.8:53

168.204.136.45.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

168.204.136.45.in-addr.arpa
8.8.8.8:53

174.215.122.62.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

174.215.122.62.in-addr.arpa
8.8.8.8:53

172.51.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

172.51.174.46.in-addr.arpa
8.8.8.8:53

115.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

115.52.174.46.in-addr.arpa
8.8.8.8:53

10.50.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

10.50.174.46.in-addr.arpa
8.8.8.8:53

144.53.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

144.53.174.46.in-addr.arpa
8.8.8.8:53

174.228.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

174.228.230.37.in-addr.arpa
8.8.8.8:53

60.113.158.185.in-addr.arpa

dns

73 B
137 B
1
1

DNS Request

60.113.158.185.in-addr.arpa
8.8.8.8:53

115.50.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

115.50.174.46.in-addr.arpa
8.8.8.8:53

28.48.174.46.in-addr.arpa

dns

71 B
105 B
1
1

DNS Request

28.48.174.46.in-addr.arpa
8.8.8.8:53

71.228.230.37.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

71.228.230.37.in-addr.arpa
8.8.8.8:53

184.137.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

184.137.230.37.in-addr.arpa
8.8.8.8:53

158.162.230.37.in-addr.arpa

dns

73 B
107 B
1
1

DNS Request

158.162.230.37.in-addr.arpa
8.8.8.8:53

174.49.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

174.49.174.46.in-addr.arpa
8.8.8.8:53

231.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

231.52.174.46.in-addr.arpa
8.8.8.8:53

250.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

250.52.174.46.in-addr.arpa
8.8.8.8:53

199.52.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

199.52.174.46.in-addr.arpa
8.8.8.8:53

84.199.89.152.in-addr.arpa

dns

219 B
377 B
3
3

DNS Request

84.199.89.152.in-addr.arpa

DNS Request

211.228.230.37.in-addr.arpa

DNS Request

172.210.232.199.in-addr.arpa
8.8.8.8:53

142.158.181.95.in-addr.arpa

dns

146 B
224 B
2
2

DNS Request

142.158.181.95.in-addr.arpa

DNS Request

196.116.67.194.in-addr.arpa
37.230.228.211:27023

cs.exe

53 B
262 B
1
2
194.67.116.196:27016

cs.exe

53 B
223 B
1
2
46.174.48.174:27015

cs.exe

53 B
200 B
1
2
46.174.53.217:27015

cs.exe

53 B
135 B
1
1
46.174.50.63:27015

cs.exe

53 B
293 B
1
2
46.174.48.127:27015

cs.exe

53 B
158 B
1
1
46.174.55.155:27015

cs.exe

53 B
268 B
1
2
62.122.213.64:27015

cs.exe

53 B
154 B
1
1
93.191.11.211:27043

cs.exe

53 B
293 B
1
2
46.174.48.179:27015

cs.exe

53 B
141 B
1
1
46.174.48.137:27015

cs.exe

53 B
234 B
1
2
8.8.8.8:53

137.48.174.46.in-addr.arpa

dns

72 B
106 B
1
1

DNS Request

137.48.174.46.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Netsh Helper DLL

T1546.007

Defense Evasion

Impair Defenses

T1562

Disable or Modify System Firewall

T1562.004

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Games\Counter Strike 1.6\FileSystem_Proxy.dll

Filesize
364KB

MD5
0cbc49a2789a1da481f23628ca74af61

SHA1
b107a306f16bdca7354215790f40a10bdb35f321

SHA256
0c724825eea16941d52783c291153281d01c1e4330a751539daf3e6552af8627

SHA512
3cadd12e0bc1968556498a6a76454246f1e97a055223312863c663a880d4d5f1a2112aabc02c49f43b009a72ffc500c1c6efb28b21a879035be898247c1621dc

Download Submit
C:\Games\Counter Strike 1.6\SDL2.dll

Filesize
637KB

MD5
3b18fa46189823696366b2a9e2e05dbe

SHA1
89284a12cfd75966a4a247debf6fbf8ba93b13e7

SHA256
f1be4b46ac46bc9a26ae017c95711e5aedc11ed602908b62eface4e8d2b28aba

SHA512
dc3fdd8087c0bfede7ca64515df586156bcd3c901ea2b683d45c39bff90c00fafa42a06818c5fc1433e5e8d2d909236b3823bc12e493722d153d0896c7910c98

Download Submit
C:\Games\Counter Strike 1.6\crashes\074d1588-0703-434c-ea74-6a0659cfc857.run\__sentry-breadcrumb1

Filesize
1KB

MD5
7a03db5c17dfa0c28ce16bb2b9353d79

SHA1
8b8646ed9bf678dbb58380f68e8925a5fddfdec7

SHA256
bd7572681c873ca2513cbb5cc35f9cb6c1344c0fa81bd09e49585e397938110f

SHA512
ad9b40098662ce697b4ef535f4b56ec9277cfecb8de4ea9b43eebe38e8f924e55f3796e4af729369030e7fb138ac87337e5d075be2a35183149e1cd9cbe0d7d7

Download Submit
C:\Games\Counter Strike 1.6\crashes\074d1588-0703-434c-ea74-6a0659cfc857.run\__sentry-event

Filesize
440B

MD5
f1a9a9f519a1193603e7a741fa7134e5

SHA1
02603c8b5e04a7e33fc6adb14e33a2527a49e196

SHA256
79d8dc802dd54e985628bc7800b2e56902000a6c1d853e9c8195bc1e258cf97c

SHA512
32fd64ff32a54e698756ca0e4e06f2503b2a7a47fea17687be137108fb5e48755730c9fd2c44484ccbfe542061572c342e637c362aa20417b3c1feb69bbdbe1f

Download Submit
C:\Games\Counter Strike 1.6\crashes\settings.dat

Filesize
40B

MD5
bb9f01ecfc8b6f77645e6730ccab2d6d

SHA1
640874a8d082c2b4049fa59d66b67bb82c031236

SHA256
744fa7fe1fab538b30a7787de9214dff3a48ad413a46db2c8d6cf82d11d48147

SHA512
46543df3367c59b336ccec5857e71e6d5b14e0a0f19197f2da625975a78a98997a8bf98629c1698e65a1ba725259cc46f2120df0e5213696a6fb767c17af8cf9

Download Submit
C:\Games\Counter Strike 1.6\crashpad_handler.exe

Filesize
556KB

MD5
5cdf1093b0a9706988f9393ebabe340d

SHA1
79a42713b4cf324918c183c0761b94c66500b744

SHA256
14a88ce287c5b506a90ee989cae2cb6390b51af2f268bd0c0d58c925718993e0

SHA512
463dba2bf8e0bf274b921efe92c432680eaf6368e812c589389f8078856daead9dba42668665aba9261e9978c521eebe34945a9d6ed0098a190e143fdd3e6a81

Download Submit
C:\Games\Counter Strike 1.6\cs.exe

Filesize
3.5MB

MD5
8436ce2b6aa63057809cea7af03146e1

SHA1
3c2583a4a032cd2f3477cf03b9ab494d45ac7557

SHA256
ffc06923e73ec11708ececfc8723b6be211fd8888ea5296650a049db4ce6fdf7

SHA512
6bd3e6e07b70fa02d579a958ac7525af24a93ab810bd84c6dd7ad26dc06f990ff8b5630634de07f4a38c1eea4e8e3589c6b47a062ce369381a16d7b107047654

Download Submit
C:\Games\Counter Strike 1.6\cstrike\cl_dlls\GameUI.dll

Filesize
1.7MB

MD5
205473be5f454d6efadda7beb167230a

SHA1
f899a07a738e22ac59a94f7e27fc1f186e0f0cb5

SHA256
0b3fe70558686cf462a705c2722c1b6b8afbec141cb90a6c89130a0dc929718d

SHA512
6e7e15c91b6a4474a4b385bc31a5575bb6a05124e8cc5ce887d619c0a68ebb986a2b05e7fe90ff991632f2334797aba6798930f95707040122fe8d37bf326b8f

Download Submit
C:\Games\Counter Strike 1.6\cstrike\cl_dlls\client.dll

Filesize
1.0MB

MD5
0653c4cbbf16a4e02620db9bf48604f5

SHA1
6d48af8a81f4de75aad56c3af8eabaa6ecaee2e2

SHA256
ef7a0f40989cb79ba95d40f528534da36866892ee871147ca82e133b7a5edc3d

SHA512
0f9d178660765ef85962a8eb78650e366522d587a9dd75dd65507fb27ee48ed3d839542182cf416ab184e93099a40f91aaa0c83303560ec39a6ff56f95470541

Download Submit
C:\Games\Counter Strike 1.6\cstrike\cl_dlls\client_mini.dll

Filesize
285KB

MD5
f5334b699d08702934001a9a44396797

SHA1
88be6756cd2edec74ec597be463ea496135608a4

SHA256
283e83ebccca6d9f28ff127acf5501caf881258ebf7059e64c0a487aafccdff8

SHA512
f37c9d631757645103d0a7f857b611451406998b73f320ff755ebeb27190921a93c845a441b1e3480a88a5472f6ade4b70ae4ecf0004b60a192ff631f2afeb77

Download Submit
C:\Games\Counter Strike 1.6\cstrike\dlls\mp.dll

Filesize
1.6MB

MD5
3feb01cd9637868527d3085eaa80ede1

SHA1
388d1a73bec9b07c9ed7b0372b4c3a00b41061af

SHA256
5596780734fa40dd709537b26b9a0bf4cf970c150fcc03108ed5432b65e3c331

SHA512
e6401748c00c770d2b416d69c1c93fe2fb2a96cca3194bb3c838383810f12c895836bb48f3bb8c07262e53852a224cf618d3008bd5d4e20defafe86404d53bcb

Download Submit
C:\Games\Counter Strike 1.6\cstrike\events\is-DNLVB.tmp

Filesize
11B

MD5
e41aa21f57500b1b71802b76fcaaecd1

SHA1
554eaebf267f8aaceb4e9b18e28dfa5131168a09

SHA256
2092e6c9862b42fe817a552f0ecf05a58a2609b2424402404a796c325bdf2098

SHA512
4c2b2e183bb68c16b383532aa03d5dbaebebde35b843ff442b84f6c9dba655868e7e7ba76b5b92d003db1ac73ebdd2aed5933595b35d073c702b1e841d94269d

Download Submit
C:\Games\Counter Strike 1.6\cstrike\events\is-K60CB.tmp

Filesize
9B

MD5
d14f11b47b92d829b6ec4912ca7349e8

SHA1
86b8dd77a055a3d1d154022492ed7d7e4ca371a5

SHA256
89a0f0c5f04ea6da99b4a48fb642b968d32350aa3e6697da24d2736b7bb195d0

SHA512
f19f860c86297921b972338dd0ee73241b3b822d1b9d977cee39e45891f1d57bf144cd676eb2e7e35985969613dff0896473dd8e89ad07c66e79ac94510fb5d7

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\env\is-MGNCP.tmp

Filesize
192KB

MD5
9eda1bf021904ceaf1a8c50a76741eb5

SHA1
38f004101eb47ed0dffff757488263d9a2523bbf

SHA256
cdf4b2c96b5d1366fecdfa2aa764fcfc8d084bc5a682e2a10c41a03ed3ed3661

SHA512
aead546626ef7dc5a75348760b26f8e187a61b62c7a0a49bda16cf68b280749dfbc87974d05201dcefe6b4fd89401c3537b4f179f3ac5bda161066ae3ca0efbf

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\shell\kb_act.lst

Filesize
2KB

MD5
2f86bc708e58183501517717bbe74e42

SHA1
72a796888c722d658af0de3583bc96dfe6f31133

SHA256
00e511669138c658b1e4a5eae452163a585170888e7fd8f6c52c0e1c2a657b61

SHA512
701e655ce16141d3a0622836dcf43c8539f7f2abd8b93cf8ba06b76cb937daba352be4b410b0163557e57b279efdb9b453f648e5c2cb1bf18fee9c6859485875

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\shell\kb_def.lst

Filesize
1KB

MD5
c50eab5a02deca5de85f2a2b33760d6c

SHA1
4a8bd6756c452a424759ca0ad21016e2a25e81c1

SHA256
fb6ac56e2bf7058a05b8c8ead5287849634b9aad0c666dbede94b2a970e23b0f

SHA512
ac069447a2637510c7f0e2b7a63d9f47b2400fb20a4348f3c3b08baaa51fb01429df81ebc86c7cd4c9eac961748085180dab3d036fa095b9afdbefcc2613bcbb

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800corner1.tga

Filesize
300B

MD5
bfbf7639948b5d31128b60a303392fe4

SHA1
130b966097cd663cf986b295916db4219cadd9c2

SHA256
d37309b4647ec4158edb16839dfc5ec9200176511343776ffc1dbb8d1ba0fd60

SHA512
91b0b4c7400c6b6fbad300ef5d96d198038312c05d05e14213d90d770d3bd0225badc28b8b8adc6974be7236ddaf36090f6aaa38d9d49c5956e2239754b93ad9

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800corner2.tga

Filesize
274B

MD5
548b2c3f285bc4d5d974bb7bd3972480

SHA1
d6096aaf37b4c6385e906b1dc1239aa28f7c90a0

SHA256
9f31778118ba392fa28730bd5431f8e026a082bc15dc1e2e1232baecabf8a1e6

SHA512
94da6e65ef0fa2474ba02176b5ff016843806776726e1edd9682244b4e8f36e74cef939aa84acab345754bd7cf2bbe427896472d9c166eb4e72b179f78fe40ed

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800corner3.tga

Filesize
274B

MD5
9c727c93f0226a08231d95b917444dbd

SHA1
ebda93b631967c38f02a737c164d3c9d9a280786

SHA256
9c2c6f5f9c9f42275bfdc50b6d9de07b55a1dc2903cdf022c221465b34dce130

SHA512
32946a6d1eb9af111a0bd585203606fc0c1c088c52675370789fd044ce9b73f399d7dadfe5e53a1d3229a7c62e6d5f73e5613710f521c90ba8b976060213d778

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800corner4.tga

Filesize
274B

MD5
a59468e3385c2cadf6e5e5ad69b2d8ab

SHA1
f98418f226db0c11f9ccfbf97b3f220e5e2cf449

SHA256
3e8d903cfd7101a41dca523ee3fe3507473ee22d25fb319f0feee4a1bcc56955

SHA512
13c993766a48e60296974bc411fec3f63fcfe6c4a90e410a480fa3aa71193cad5ff00d0196c9c86cf08c9248679474d06eb6325961aab5f5feb7a53ba7202f69

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder1.tga

Filesize
300B

MD5
a1d152b0256dba27a1a92487c11f4048

SHA1
8338f92abe99815f667ce3f284a411b3999b39e9

SHA256
74199a4cc3847a127b44e23a38688cba53174238adb008b1026b389a7b24efc4

SHA512
e98bdeda478e6ee9c86b7728f4d54c2213201f52eaa59f7a2962195e40b92b32b1f7fb29b97532f9e10b260d0fc51e140200ebb95c5a6762826ffd821f1256cd

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder2.tga

Filesize
300B

MD5
4e5848a061ffbbd58ca2612ce9201cc8

SHA1
e74eb50d8aad6605b5f355e0f37dfd82a5a9cdff

SHA256
4bad83b300cb3bfcc5513d61d3f7baf63244bfac276bc30d88cb985e4c21120a

SHA512
53b767cc12636262d6529d958aa42eaa26d739515af0f4552f07cec219bff02aa5f007d6388177a63ddb467c142a584cc20cca119a0b245ac0aec056168e8948

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder3.tga

Filesize
300B

MD5
957f2bb2902e1c08a0be2ac901ba876c

SHA1
43df385cb7a2292dec6faacca0e05cee1e40201d

SHA256
3d856261e79adc4fd0fe85390a349d9601edbfc39447e816e92baab6ca82828e

SHA512
2482f1a785d374a0b5f869da05180efa04519efa1a74194fc7fc57a75439600c2603aa7ba3f9fe7fcac3cec83b93675570015f0d854b044c45198b515eb16b38

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder4.tga

Filesize
300B

MD5
209ce7e0561313134d0060ec33bd1ebe

SHA1
41ab6e2ddd7963d5068fc828b8a2394483664edd

SHA256
9563a26d056cb575c28ae922fdca747dc9e1dce8f9f1b294e500952c83eace21

SHA512
33f50c781dee8bd4f34047b09ee3fdebf0abc1728a0ec41214eda31652d2fdca65b20b79943309c2f2853451a9ebfb250cb94fe6546249d68794002711bc20ce

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder_half1.tga

Filesize
300B

MD5
2fe28d8dbf63db0ed04b4184d3efefb3

SHA1
c568e2e98c75db52011aac749d1ed10111b28358

SHA256
0d06761a57bb60b8046bc126fdf1dc38f42aca6607044b227031208c37888c1d

SHA512
19ab411aad1466eb8a4fa51f2ecea16abc9027caa609bb75bd5f73bb5846fab610db850510419cf34a86f8d1eb8ead17180d30a39de679c1a6e519c945b7a692

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder_half2.tga

Filesize
300B

MD5
2676a726e48ff0655b388ff6f2587272

SHA1
e5729104111d8ecf7f511bdb8311568c2189f0d3

SHA256
462daaef5a1e858a1890dc6d2f07e03f24ebbb90a8274faba6e848d8188298a0

SHA512
7b8ace51c718f02d995f098e54d0123f364ebfc10016f1f81df05688cf1d03514454f998b324410902c8e89e5c2481fa6a7ec8763700ced9aa7c7c05f0cf236e

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder_half3.tga

Filesize
300B

MD5
6d9b97ea1d050abbf0baa99aa04e20c9

SHA1
cc87a1bc20c27a2fea52eb206bcd064b3fe0b141

SHA256
156191fef40e925a0e618bd603e4068459bce1a01e2a398a8d10e720a043a0f5

SHA512
ac2f6087be6bda805b376179734ed4627a76d80094357b694c57831bb7a7d643f396b335a71c3c6156815b130c6cd6844312dfe62014487eace0bba2db50d70e

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui2\800cornerborder_half4.tga

Filesize
300B

MD5
dbb5479299d0623c5fcbefb6b02ec7d0

SHA1
851a5af1cf3a1360d145c66279531063b308fc7d

SHA256
8200381d6b5ccab783b7cba5fde84d6a40cbbd813e43fa5c2d7beb4588ede95e

SHA512
d737d423f9b78bb4403bd989f363762f6e0f2d5c5425bd7f5bb556b8cb5690a3f79c6c99787cc456a3c8f2a4705ef0233937ed03abc594de6e93754ef7728fe1

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui\is-14NBT.tmp

Filesize
128KB

MD5
1f10813901e2bd255a5ae21026de8b48

SHA1
03a1f78e07952f1876dd431ba4406b534435b920

SHA256
348584b23c63388045342dc0b79bdd37a8cff904a84215c386492e33273ab725

SHA512
b3fa7d1c675c4ae53ebc506d39234e166392bf6a0f6fa651b4c1a19240915f2423c9b150ccbe429159cebc0fa92135a9940cbfc8c79fa9fa3b353580f93342be

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui\is-BIVDK.tmp

Filesize
128KB

MD5
8c3ff438e747a73255ddb8c3ccbebbc2

SHA1
e81ddb67229feefece8cc5ff4d1b12c4b75cc103

SHA256
4a2460747b60d4b5843bf22a459f6c17f16a9664305b4b4bda182041a0fdebfa

SHA512
869270e4c6adbe4e914c07bc459a7858c50988ede0e75a02ce51a18080f9ba4bc4c483c4ee646e22fed948dafe388e7b908f58b09528b93eb1a87ef57a278b62

Download Submit
C:\Games\Counter Strike 1.6\cstrike\gfx\vgui\is-NUF5V.tmp

Filesize
128KB

MD5
13b3a5cf4af8f97cd8a8328ef9952b7f

SHA1
253105b008a8ce333a64f5a66e4b2da0e3a3cb52

SHA256
9d8e087dd823e63f7009907ff1761e620dc5ee64db6a527e2d0ec830d4152437

SHA512
77f76cb9bb4edadecce9bfcd05031e1def1f4b967b58d8078bb9e6c3b03e3db9917bd2a77314553fb8ee233981683e9b0bad5af30c094344350ad2a1dd034667

Download Submit
C:\Games\Counter Strike 1.6\cstrike\liblist.gam

Filesize
354B

MD5
1dadc43cb13c0e3faf12185034afeb9a

SHA1
c002f5226e5154562b35c11a80bee6c3c2c2a611

SHA256
484b76def921c7be9e2150449919f3826d23208582b3b9428c1ad581bffb9b5b

SHA512
0baf23d9e627be2d831d06e5de46ceb2b407b1920a0eeb6ec77998999de64061514917c80e5bcdfe6623c47bce24140ff68a76d7676bcbf53cfdb43ac1fde7e3

Download Submit
C:\Games\Counter Strike 1.6\cstrike\maps\is-FVMQ5.tmp

Filesize
4KB

MD5
321897fbf1cc3874b7a7b9fbe7ca3dcf

SHA1
946455e94d0b431e891053b2d3ee6a4084403033

SHA256
314705109ad1ed597e7f4abefcf36cf9b3ddca750b803763dddee6aa16edbbc8

SHA512
1f06978fce984e56cd375106584eb314901e6a645e184994c2c19bc22bf855e7ecf42c62cc205bb27c4dcee5c22df8142ab6af57d825c5580c71b202d73e28e9

Download Submit
C:\Games\Counter Strike 1.6\cstrike\maps\is-L01V6.tmp

Filesize
2KB

MD5
772598b8fb68ac62bf11bb4f75c5ee3b

SHA1
8bd490442c65f0a19fbcf895d530793934ce4fc4

SHA256
b3bfb1f8cbd6929ac454a750d95b245565068e1fc75b793c91ba9898668af213

SHA512
b6d7e910326280626410edd42ff745ad6bb02de135816f53df22e38add11431424b0d8418850a8caa7c4aaf7040d75401366e8b7494f5fb43461fe0709d670c9

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\MultiplayerAdvancedDialog.res

Filesize
7KB

MD5
41234b522bdd45f31cb315a87120249c

SHA1
8ef045e99baa7ff7c5d079fa10a9d1bb64451706

SHA256
4f70026b60272a3c5e911c5d5ec8e2762639fa1914b8a331e9c5473a0ba0928f

SHA512
d5d825768b8af330f4ff79e1e7c134b13b741d61bac0da2021b17b2fcc5230dc1aa111fd92f2fecde85055ab13583748d3e4aa2dc1acc76cf87dee604c2db0cb

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\OptionsSubMiscellaneous.res

Filesize
4KB

MD5
c94d74834945151911831130dfafe4a1

SHA1
51ba5452da4ddc8e4d977e9105cde69eccec55c1

SHA256
af86c9afe114d269d046f3dc95817a67f94e616131a0c5eb8462dce03ed2a857

SHA512
9b062bb28f26b03f744273a7c1e7da9b873fc18a775b52aa5d312a19f5f17ea321cb622e1714455e377d2e2aec362bc87fdfeb2a9d1405e40bd9e5e69e15cb2a

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\OptionsSubMultiplayer.res

Filesize
16KB

MD5
16d185363d8eca66349c32ffe0e6cd28

SHA1
b36d2e7f090631b828c0b01bab27cb7de8a49253

SHA256
f73c534c22e2a4587529789a42f8fd74e7f8e7c83f700dfaeab80a0ecec9d6cd

SHA512
53c0bfa0e2d4077f4594029f105f1d10a3c2e2f1c8613baedbf13156273cf5e24eb90d10aa321a31076bdee705b03b3d1c8ffcfb6a1113c93f8ad8b84441cecd

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\OptionsSubVideo.res

Filesize
9KB

MD5
b449d044eb8ff187e73b92621a73faa6

SHA1
56b5544620c321ccb46c4f9a3cda8ffe2ad1dcb3

SHA256
1eceb72d3fce8851846404e5e10362d15361ce0fbb43d16084e560447d30668e

SHA512
d408ca55d96f79800fd1a4f8be30464ec921f375005612486748f1757bfdd1c5a950cb8b2af5681dd9b49935922b5bc56a28bc5ac5e94f73ed26714fb71d2dd1

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\TrackerScheme.res

Filesize
18KB

MD5
b52d1d1a10f600c88d928ef0952e4753

SHA1
f126add4450718dd07396317d15f6b9b3622614b

SHA256
e2b420aed995b86da8ba8ec46382d0420d8f83203b95e24b7072d87ba6aab174

SHA512
2e010a61a3846a9f03311554e44afd4b1b75c4e9093b2ed6f7cc9c5de789eff3b36829cdfce33c5f41e2b44d4b7d6885351bff288c47a305f7ebd1a3f889dc3f

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\VideoAvancedDialog.res

Filesize
7KB

MD5
91fcef1b04a4142c3b0d68bb53488775

SHA1
706769e46bf26ba62e7747a6532a597a123a9ca1

SHA256
615bf754838f226391e4feb77b273ee799401ffcc82648a47f394ffa0097a06d

SHA512
b5de93521610980bc82dbf1f261ba580b1853cada989cbac814c1915911aae5ab5f0c8bd770ac38cb8100d3ab869bd42c064eeba65c8f479c299a86ff655471b

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\cstrike_english.txt

Filesize
175KB

MD5
3f2917785dfbf66ad7a321a51d178646

SHA1
c797882dde783bcd8cd8e68e06ab53e0313074aa

SHA256
95fff935c5e5d6f86657dada32118cbcce6603ebf42ad4d043af621197801a54

SHA512
a72065ada5706e567c38c3807c24f502a641f73e90a3adeae240e86b05048d09de779bdf4efc240de5a4bd88cb5a1c214bc878a0f7f2d964e0d83658964be3cd

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\cstrike_russian.txt

Filesize
185KB

MD5
6b3764b84d4110e5c9a000a330099971

SHA1
130231a7e193cfc5e729c7b3fdc987104aa91ee5

SHA256
6297663a0fd1c0556634d65d6e6c0a3c1454d1f0cb9077a096c493f4b8728623

SHA512
59c8c9e28812bea7d6cd3d0127e39e43e76f0c2047f7dada9fc946b1ee77d4670053f6508d6d37d6f9f0e717e05d72d2b8a9aa1ac9b2ab80b00e0b2b60c76ffe

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\schemes\TrackerScheme_ClassicPlus.res

Filesize
18KB

MD5
1e9a7e3c48777fee061e398b42d69b81

SHA1
43b8d3a40cde27857f48554ad6a66b496c00a856

SHA256
f0fc2a0d9bfa098bea725a1401176fd5717684b90136269878004f207a17f4da

SHA512
d6849e795ce125da7ce585d0f27052785f73fea0550bc11b135423826c91147a578bd3c5e496d0fdd2812637fe8597a6e7408672d7719e42f90838b30c18e26c

Download Submit
C:\Games\Counter Strike 1.6\cstrike\resource\schemes\TrackerScheme_Source.res

Filesize
18KB

MD5
8d31d7ba684b6fe0442ce8b5e5853bef

SHA1
e1efd37a3406b2a074d2bec9133586a9cb837356

SHA256
c33d9268ad5e34c06709dc68a1c81e1e6136d7b3c05d8a7f9d8bc88619bac1ca

SHA512
d36d7399456b79ba8308487176306f29f227a2d5439358154e9681c6dc97e475061fd64356c3c1eee69e8fce25151eb100b10b6e865d2f1e2dfa81d460f0e9b8

Download Submit
C:\Games\Counter Strike 1.6\cstrike\sound\weapons\is-GV37C.tmp

Filesize
14KB

MD5
2876bbba2adae9cf3456ea95a2c0b546

SHA1
737a3eff26b380e189ada33a028f63d75b8f0e8a

SHA256
2ebbea31183105b5d305027e960bb89dc2e2582b81ba712b01b1851501b6092d

SHA512
5423d77697905521a1718b2209a7e29fc34c94f481bf093f2ea45c3c43eb9dfce38fc8c87802c221a1813c582b626fd84446540178cba918d8e021d1b4b5dcfb

Download Submit
C:\Games\Counter Strike 1.6\cstrike\sound\weapons\is-Q2OM1.tmp

Filesize
7KB

MD5
3d352efef15d6f7019168991cff7cf32

SHA1
10030aa93a41d80b35d39e59dda86e4c164f1a5f

SHA256
616e07c58c0d3d332c3c7fe65c1b7e6ef49d5c26d09d8132d1e7c36c3899ea46

SHA512
bc51565450631d2954c0736c7899aa7111aa1584b0cd20ad239a765662d5935aec7fc7b33f3fcb2d43e5a69b1a9c9728a63a5a82134ee4dce7740cfa22e9480f

Download Submit
C:\Games\Counter Strike 1.6\cstrike\sound\weapons\is-UH0GS.tmp

Filesize
10KB

MD5
7e7c4656f8ef80a72ef0d1e41317f511

SHA1
775a6ec4f092b3e8bcb59c21787ef33e9237ae48

SHA256
ffdaf0a862ce1f47615dc1ac59af868010796eeef50de895414c40a04da3680e

SHA512
a257ce57532a8497f8df5860ae08729c78f90477f0b96264f2f98dc31ee034ec2679ace4ddf1ed4ad14ba08170354fa00e984e2dae4a17491fb5f8b7e009391b

Download Submit
C:\Games\Counter Strike 1.6\cstrike\sprites\is-5K453.tmp

Filesize
361KB

MD5
324aa00f639ff5f9cef8797a1f862ceb

SHA1
38d8564d31e700625ef0ce35cb681f5a6a34e070

SHA256
aae249f31605fdf3773d0753764dd4865873dca48a58108579923af755122fe5

SHA512
d37195b2033c064cf1396e02f9e01f63399196c4de290b0630cb252bc54f9685be98431d0df3ab3c8239b9a585373ae21c224d04d713e20e2b4d21b1720ef34b

Download Submit
C:\Games\Counter Strike 1.6\cstrike\sprites\kill_rarity.spr

Filesize
18KB

MD5
2eb849c27c65e187215f189700014a3d

SHA1
13eae803e06cb09fd6f5fe38705ee716a4a47763

SHA256
0f875edde646b93f6789e64dbeef95fc5f79f716e7b682f1ad10d860e9c28559

SHA512
80c276aaf38249721d6ad337caefca2d4ad7aa6ded1292c58b91aedd2f9b8dc9b10fa6844b6e2373d1513bd8658a649e01c43ea52359809a3efa4b7cb1a8b9dd

Download Submit
C:\Games\Counter Strike 1.6\cstrike_hd\gfx\vgui\buy_presets\is-UAJF1.tmp

Filesize
128KB

MD5
3a0ee184782f3bab5f604dd55f5b011f

SHA1
af87160bf8b136da3243b89f4c8197614d6824b1

SHA256
60fe19c7f1e2929356c9d26987e2ebd9878456c0797db579e3e56d4501c0b05c

SHA512
e183fe6279e05aa539a43ce63cb06988ea6cc647671bbefb37e4d3d7c7a5f3e438079f18a55148d450a22ebb880e80a619779ac45208d0c5e1ef6a42b2c17fdf

Download Submit
C:\Games\Counter Strike 1.6\cstrike_hd\gfx\vgui\is-5TI96.tmp

Filesize
64KB

MD5
ab95d42bb5bbabc27cfdb914dd354811

SHA1
19046a370c3abf6813b7473651134983eb135143

SHA256
c07530ca596e9a10496f5774fc6fe9253e392600c3cfe77a6567d355d3f54a0f

SHA512
74eebbbb1a2e6f1d22590596f42e5ade832453f1f72d5e0aaf38bec14692b257c424fad2ffd92748e336dddea63dc63b49a04b82f1db202a12fcf88072989332

Download Submit
C:\Games\Counter Strike 1.6\cstrike_hd\gfx\vgui\is-GFTAS.tmp

Filesize
128KB

MD5
4f8c877590d5d625b5fa252e6cd3101c

SHA1
2048a8b614270517a82aa826b557aaf32c18817f

SHA256
664264946b90b3ec23cf5e97c7096e60170e1a1c0a9b6bc4eb8c78633699af55

SHA512
4927aeb1098fa300dfc7a7237f5a8d3731e9b4356813d8ac1fb5e6c79b39232c6b68131088074742725283a5182b3fe8f285fdc59bddc673094c9246e1f0ab57

Download Submit
C:\Games\Counter Strike 1.6\libcef.dll

Filesize
19.4MB

MD5
60be2cec0d95bb135d4452f39aac6805

SHA1
e2de1c24e924d16d66d7d128bc63213f04500d9a

SHA256
391b7e66004d7845f5caa7d70f106dac7d0b49538954c55601ed7b5985c3d699

SHA512
d50579fe0176477da1c78aeeafb1c9fdaa8905646d9fd32edd4bd2ccdd0591b97721d9cef4a546fcc6816a0ab56f9c2c6c31ccdfc19e7ad998a6ebddb6a3921d

Download Submit
C:\Games\Counter Strike 1.6\next_engine_mini.dll

Filesize
952KB

MD5
42291287951999d2fef2d763cf708a06

SHA1
3f5dbaab6c515d2b8b1999c5ca3cc7b036054474

SHA256
3404d9ae9cbca42b1df7b19b818a34bcb712d640f88cb840aa9ace2e7cc82fdd

SHA512
f33420e75effcefaf407a9cb3e38e45c15648cce2ac972c13ddea802b22dddf12c247cb467940f58abe7cf4f96ec2b846c3314b5e2ea1607d5d6ea3ea5cd3e75

Download Submit
C:\Games\Counter Strike 1.6\next_lib.dll

Filesize
9.9MB

MD5
7205c91a3ef88a85de5ca33cac03b575

SHA1
f155f7ef7f25e2a91708a735a48c211f30b64b1a

SHA256
668ca8a033dce72cd2f92023042ebd2f8e5f563c02f474bd572706a847e00342

SHA512
cd720438a7f3852340f624e863726f88f12c0215e7aa36f5a35d2d512b3dddfedf156ed8b1c71a81868da13e17dbdb0e905e01cd35dae0043d6f0bacd7991699

Download Submit
C:\Games\Counter Strike 1.6\nitro_api2.dll

Filesize
2.2MB

MD5
1a38c6b9569a5da87cc5bd9a1b49d359

SHA1
79a60c1f55071a4b39b0957ff9ffb7cf5f614102

SHA256
fc11dbe331d8be554a5556e35797ac6f193923cec50ca166935a5c25145b58e4

SHA512
cc173188503e027a21ab7be57fdad074564072efd052c9745cebceacd46d91acfdae087ba306161107043025006a5b309471ce74baf5fb20b69f381864875208

Download Submit
C:\Games\Counter Strike 1.6\partner.id

Filesize
8B

MD5
58b9fedcba578a58db467440d09cca35

SHA1
2e783e8c3df1df48093f59b45368b84886aa312b

SHA256
78c930bb43b73d0aedef0a404621eb42ee506be2260a7b18779f31a436bcb37f

SHA512
26afd8916ecd5ac5268cf9ffad9520523d4b1b3c0f5b0f3d67973793982254066b49e263e0f5a523605b174d4affc7dc8ad0bd9f2f4bbea615117fb03a95ba12

Download Submit
C:\Games\Counter Strike 1.6\platform\steam\steam_api.dll

Filesize
101KB

MD5
cc3d1ca6401e2ab106733c7bd7489cad

SHA1
8bc0e66551efe9e6116b6bd21f57c500005686c3

SHA256
8c073e0d2ca39d1e986bec348f988303357be5c495ccf6e0415802b86eae3534

SHA512
d5eb4839ecff6e3d88610c285d02fdd05bff4f3ac9d4494bcf99a24c912545baa4f957171c48b6a5ee24c508ab4b29b870f6f87e8603ea81a3a811cd8ce06ec0

Download Submit
C:\Games\Counter Strike 1.6\steam_api.dll

Filesize
87KB

MD5
562d1a82e7ccd5da38efb9aa6e2bb8f7

SHA1
7c3ca4fd44ffcc4b94d16c2bde08d5f1c3eca262

SHA256
5934c91f273b1bee578e75553dcdea277a0ecf565aaf5117eaf90fcaa7cf5f0d

SHA512
b3c8900a8081479755379591da5036f3a6592781498749baf849959436241e442698d312cea270410b3e9e454d710e10e539f30a7bb5d7b8043262f83d0c256c

Download Submit
C:\Games\Counter Strike 1.6\tier0.dll

Filesize
331KB

MD5
fbfeb5dae01b4b2456cd1ebabbed4922

SHA1
1960f93db4f23c3012855e389e30005910592c61

SHA256
55e64559ba6acc4c0efc3bef92382714a6b9b8a4bd4696e8c920e709c803b250

SHA512
03148956ec8254a6d41ab970f9215e3bc3a302c8f578078b3441aa1b12ebc3b59e7dcc9c4dcb1e7335d7087acff1d8b09a824e96d07c7aa69db23b24fddae8dc

Download Submit
C:\Games\Counter Strike 1.6\user_game_config.ini

Filesize
80B

MD5
0fe43199b48c0500252596c9a413bbdc

SHA1
0063d2ee905ec6ece44904f9571b2497b65700c0

SHA256
1d43b23a6bec32c13d6ea6e4f5952546a358d7ca068caa9eada81a68d2c12218

SHA512
8776b6e618be5c28416374e6f81370eb48e89faa0b73cb9a03076c87fde31f1d27461f0301d02a90f6830e6e05e8c9a199c26bf77e1b5912f777ea67a3dcd4a7

Download Submit
C:\Games\Counter Strike 1.6\valve\events\is-NN85J.tmp

Filesize
1KB

MD5
8cfcc0a84d0b6b51995ce17bc9f194f2

SHA1
f86d5edad7e5a3e2d994517da5ebd7d748a8c666

SHA256
2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d

SHA512
5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-0VE5O.tmp

Filesize
40KB

MD5
910e7f920f59348e20f787d9240fe2a7

SHA1
9f85998b0a73efbf34b2e732942a0caada57925d

SHA256
93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d

SHA512
a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-ATDQ2.tmp

Filesize
33KB

MD5
bca82506d597eed9b5507ff7ba16567b

SHA1
55ad94cc92b95ce8e2adf62df94a6a8244980e8f

SHA256
4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd

SHA512
e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-DMMIC.tmp

Filesize
34KB

MD5
46f3cc3d5ca0f0e80d30ec38a3ed9702

SHA1
2b7902e73522c60bb4e5a6d7905f91967ec54b46

SHA256
824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56

SHA512
9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-GLL1F.tmp

Filesize
45KB

MD5
d3d6c70dd23590745a0f691c28f88848

SHA1
b46b4a8427c59e590f8adace2ab659da2f4f4e9d

SHA256
f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79

SHA512
06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-INKAI.tmp

Filesize
27KB

MD5
8148e0f0a6679ced3ca04fd6c258d478

SHA1
9afc1daad5e004bb9481147ec5fac15693897f2c

SHA256
60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0

SHA512
918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-LDBB2.tmp

Filesize
24KB

MD5
07306c3fa68e4b5bb4fd4da515adfdc1

SHA1
ae0203c50a3ef107992d61f4b135efd6fdc809ba

SHA256
fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac

SHA512
d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-MPRHI.tmp

Filesize
44KB

MD5
ec8766ea06b999dab276c2ed85397067

SHA1
d043859519210810ab69bc4172406511b0391728

SHA256
dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8

SHA512
5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\fonts\is-TD1A2.tmp

Filesize
24KB

MD5
ebc1b6a271bf99cdadc78dae5e9a29c4

SHA1
afddb10163d0cacf30f7a2e9f9e4f534c8425586

SHA256
3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d

SHA512
ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\is-DEQVN.tmp

Filesize
1KB

MD5
1926ecbcf1b403f0c4a30426ea74276c

SHA1
24d8e0d5f3477f85e76985a0fc579e392482c402

SHA256
99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2

SHA512
8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060

Download Submit
C:\Games\Counter Strike 1.6\valve\gfx\vgui\is-I6K4D.tmp

Filesize
2KB

MD5
6deae390d10e5faef07cb793138a4ea2

SHA1
0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e

SHA256
1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b

SHA512
70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a

Download Submit
C:\Games\Counter Strike 1.6\valve\models\is-AS1J6.tmp

Filesize
3KB

MD5
ab9f1bf1f7d14ca0032df954e1dd5212

SHA1
d51ab73cb33e1737b86ea0bf6db28aa895bb86ab

SHA256
748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70

SHA512
c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb

Download Submit
C:\Games\Counter Strike 1.6\valve\models\is-I5J85.tmp

Filesize
22KB

MD5
5f394d005ec12f63949d0c6a62c1b7b3

SHA1
957d1d0598c7bd0079db345db2006d8e4b755096

SHA256
47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0

SHA512
c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7

Download Submit
C:\Games\Counter Strike 1.6\valve\resource\OptionsSubVideo.res

Filesize
5KB

MD5
2474e973b74cc3df7f62b4c16331e11f

SHA1
599e5569a2896365d6fab7b071b2c74bc80a58e1

SHA256
2257e838a6f530d117cbac94e2e4794a64d478f478935ef0149b56322a93e951

SHA512
27e2ae453288dd854213772759e7aa80d628d0dbb1bf2126ae7581805c1bc116161c8f9006a3ef5bcd6ce32d274edbf50d930bf8d93210bdb376a5c3decec3e4

Download Submit
C:\Games\Counter Strike 1.6\valve\resource\OptionsSubVoice.res

Filesize
5KB

MD5
cb3940e48f705da363ecb0fc2a2a58ad

SHA1
737f354b42c9c76961288f4023ebbf0523128fdb

SHA256
407b4c9d8f63598d2442c7579e6bae00177426d23468a207af8ced0031ce2d20

SHA512
2aee768facdd15b43b035d69e8f4ad341ce7c5242baf90b044ceba78f07c645439aa7fe1eb53c682ed90f1f697f9c5f166334049bcf572dc1a7bced0785e686a

Download Submit
C:\Games\Counter Strike 1.6\valve\resource\gameui_english.txt

Filesize
25KB

MD5
da04d6e449180122c3180add498a3c5d

SHA1
ee4aa0dbe5dd5f8619ded9f0af2868a87f0f9241

SHA256
97168890a386c829a49f966eb702be8f75559bd4b532882a7bedde0b067404c1

SHA512
492f6f57b8f3878445e7fe3118c0ba19d8f050fca0e71765f0b93cb2c2d5f2a15f0af6794060737a96c7ebea8e90f669735e671cf485b01d976ed3c37633fa1b

Download Submit
C:\Games\Counter Strike 1.6\valve\resource\gameui_russian.txt

Filesize
55KB

MD5
c58dfb1f04f6155bbb353ded745a191a

SHA1
7d1a58a4562817644e2962b897159a36863409a0

SHA256
cbc20687795df041c392fb1a1e5d5036cd814c19e75bdedbccaa4d577728c71a

SHA512
c3bb6ebdaca4f545a2726cbcd5d515aa78f02619f385c3d61610d7571a6a4f4ee22556933390cad6309a3cf812676d55fb8c74a9de006b3612976fa5c98fa160

Download Submit
C:\Games\Counter Strike 1.6\valve\sound\fvox\is-49916.tmp

Filesize
2KB

MD5
299c3e28a49757ecab2e84ca9b220e62

SHA1
850cbc182e7000b6caa8b6af9986161a2554dbce

SHA256
0ffbcdb3466691fbc1043c69abe50434df646f997c52856a509de43cae501eee

SHA512
2caa0f84686df85905b355107ce2d50c1b8b6debadc50d49327330855e3ed2cea05768c1394cec746ddf90f7087a08ff98eda51272f89d7450923a5e41a13bf8

Download Submit
C:\Games\Counter Strike 1.6\valve\sound\plats\is-NSDOJ.tmp

Filesize
1KB

MD5
811989e09124f54cb27fe6154b0f1018

SHA1
90c22fc3b248588e2d9759e6ef395303a86b7b60

SHA256
5271b9aa2961809f47fadecb693be2eebde2dbed62fbc4f5f4889fcd8c4a65f8

SHA512
560d26fdbec34ab687e40b8be6144b0f586449bd3a0eaf286ab972ad60b1eb1fe002649daacad36039a298ad24aae96e3531404ac2d0d7b0b47e194b8169e18b

Download Submit
C:\Games\Counter Strike 1.6\valve\sprites\is-3N5VT.tmp

Filesize
4KB

MD5
30c0c19f5c5226225ac3959dfe1f1428

SHA1
5c7be5173586da26dd730a790a151b8a16611106

SHA256
5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760

SHA512
c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b

Download Submit
C:\Games\Counter Strike 1.6\vstdlib.dll

Filesize
323KB

MD5
866e49fc80c2b7500334a716b177afad

SHA1
f91bd97b93266c01f39e38f01284c8a322e4c6a9

SHA256
f8ce56ba4d4a0a8c1192d31736b4420efe0b8efcdb39805203e0344f290b3b04

SHA512
24ff98b716b975ece37d558f9228f2629b9e0532c47c84652922b92be06a0a206a2e2a43bbb3e9be40d39c774605bd68a71be59103770f9229794f57c8b938c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-4B31A.tmp\cs16_setup_rus.tmp

Filesize
1.1MB

MD5
1491064b1120cac816200a8e859ae5be

SHA1
ebe83eb17d9bc846fb60b8861946b8ff692ef1f1

SHA256
e21e45ffc97a95e8b90358f39fabceb6126c62b8d8f868e776958fcb1a9693ac

SHA512
54c57ee748f68b69f020a3e9a3477db964b5fbfa07c1f33949815830122bca1eec71f78e7f0ea17be1bc07f079f2afb158ec37b7cdb224b5b963205c5c8cf203

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-JRQBT.tmp\wmic_result.txt

Filesize
166B

MD5
8bb3b90b78c50256838122d3b95da0d8

SHA1
f0ecb6cf00e9d4996ddda21f884b694edad574c5

SHA256
05d44c64e8bf061b233de1a08e3cb421b21becf737725593eef5610e0b6940d7

SHA512
39a4bb0d9baa56d9f5dd54d1339c295ef5ca8793cb5ac615632387b30301e77ff1edde402ffa22e8727926d805ea45a77d1b15a9ac16e6e50afe411be78eaa60

Download Submit
memory/1964-428-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-3325-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-10358-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-10360-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-3023-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-7868-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/1964-6-0x0000000000400000-0x000000000052E000-memory.dmp

Filesize
1.2MB

Download
memory/3468-10522-0x0000000020B40000-0x0000000020B8C000-memory.dmp

Filesize
304KB

Download
memory/3468-10521-0x0000000020AF0000-0x0000000020B18000-memory.dmp

Filesize
160KB

Download
memory/3468-10445-0x00000000741A0000-0x0000000074B87000-memory.dmp

Filesize
9.9MB

Download
memory/3468-10466-0x0000000012FC0000-0x0000000012FD0000-memory.dmp

Filesize
64KB

Download
memory/3468-10462-0x0000000012EB0000-0x0000000012EC0000-memory.dmp

Filesize
64KB

Download
memory/3468-10461-0x0000000012C30000-0x0000000012C40000-memory.dmp

Filesize
64KB

Download
memory/3468-10460-0x0000000012610000-0x0000000012620000-memory.dmp

Filesize
64KB

Download
memory/3468-10459-0x0000000010D40000-0x0000000010D50000-memory.dmp

Filesize
64KB

Download
memory/3468-10454-0x0000000011320000-0x0000000012579000-memory.dmp

Filesize
18.3MB

Download
memory/3468-10456-0x0000000012C80000-0x0000000012DDF000-memory.dmp

Filesize
1.4MB

Download
memory/3468-10453-0x000000000FDC0000-0x000000000FDDF000-memory.dmp

Filesize
124KB

Download
memory/3468-10524-0x00000000112A0000-0x00000000112B0000-memory.dmp

Filesize
64KB

Download
memory/3468-10527-0x0000000011170000-0x0000000011180000-memory.dmp

Filesize
64KB

Download
memory/3468-10515-0x0000000013B80000-0x0000000013BBD000-memory.dmp

Filesize
244KB

Download
memory/3468-10514-0x0000000013B00000-0x0000000013B15000-memory.dmp

Filesize
84KB

Download
memory/3468-10531-0x0000000012720000-0x0000000012730000-memory.dmp

Filesize
64KB

Download
memory/3468-10537-0x0000000012820000-0x0000000012830000-memory.dmp

Filesize
64KB

Download
memory/3468-10539-0x0000000012B30000-0x0000000012B40000-memory.dmp

Filesize
64KB

Download
memory/3916-2-0x0000000000401000-0x0000000000412000-memory.dmp

Filesize
68KB

Download
memory/3916-1-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3916-343-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/3916-10361-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Response

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Request

DNS Response

DNS Request