Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Resubmissions
30/10/2024, 21:17 UTC
241030-z5g12s1fqh 1030/10/2024, 18:58 UTC
241030-xmnd1ayjfx 630/10/2024, 18:57 UTC
241030-xlx7tayjev 330/10/2024, 18:15 UTC
241030-wwdeqaygrk 823/10/2024, 22:30 UTC
241023-2e6mtssemd 823/10/2024, 13:57 UTC
241023-q9j7jatcra 819/10/2024, 02:00 UTC
241019-ceyvjssdnq 815/10/2024, 20:13 UTC
241015-yzwrksyfpl 715/10/2024, 19:35 UTC
241015-ya3htsshmb 615/10/2024, 19:12 UTC
241015-xwhvwa1hrh 6Analysis
-
max time kernel
2699s -
max time network
2701s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
15/10/2024, 20:13 UTC
Static task
static1
Behavioral task
behavioral1
Sample
AnyDesk.exe
Resource
win11-20241007-en
General
-
Target
AnyDesk.exe
-
Size
4.8MB
-
MD5
ecae8b9c820ce255108f6050c26c37a1
-
SHA1
42333349841ddcec2b5c073abc0cae651bb03e5f
-
SHA256
1a70f4eef11fbecb721b9bab1c9ff43a8c4cd7b2cafef08c033c77070c6fe069
-
SHA512
9dc317682d4a89351e876b47f57e7fd26176f054b7322433c2c02dd074aabf8bfb19e6d1137a4b3ee6cd3463eaf8c0de124385928c561bdfe38440f336035ed4
-
SSDEEP
49152:meqV5ZTNR7GCogeeQO+f2roC8b9vIT2jDKW4q8TrdzRplNOBLE7Rm1ebw4Tf/Eex:cX1T7bL0KrCqKDV4Jnd1ZOQ7R3rr/f6K
Malware Config
Signatures
-
Reads local data of messenger clients 2 TTPs
Infostealers often target stored data of messaging applications, which can include saved credentials and account information.
-
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\Software\Microsoft\Windows\CurrentVersion\Run\Discord = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\Update.exe\" --processStart Discord.exe" reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000\Software\Microsoft\Windows\CurrentVersion\Run\Discord = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\Update.exe\" --processStart Discord.exe" reg.exe -
Downloads MZ/PE file
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
flow ioc 23 discord.com 69 discord.com 86 discord.com 1 discord.com 22 discord.com -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Windows directory 14 IoCs
description ioc Process File created C:\Windows\SystemTemp\chrome_url_fetcher_1984_230062865\neifaoindggfcjicffkgpmnlppeffabd_1.0.2738.0_win64_kj4dp5kifwxbdodqls7e5nzhtm.crx3 Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\_platform_specific\win_x64\widevinecdm.dll.sig Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\manifest.json Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\manifest.fingerprint Discord.exe File opened for modification C:\Windows\SystemTemp Discord.exe File created C:\Windows\SystemTemp\chrome_url_fetcher_1984_784331377\oimompecagnajdejgnnjijobebaeigek_4.10.2830.0_win64_dldxogwi36sxwpr57ta4lg57z4.crx3 Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_1097799770\_metadata\verified_contents.json Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_1097799770\manifest.fingerprint Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\LICENSE Discord.exe File opened for modification C:\Windows\SystemTemp chrome.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_1097799770\Google.Widevine.CDM.dll Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\_platform_specific\win_x64\widevinecdm.dll Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_1097799770\manifest.json Discord.exe File created C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1984_602883294\_metadata\verified_contents.json Discord.exe -
Executes dropped EXE 22 IoCs
pid Process 3148 DiscordSetup.exe 3732 Update.exe 1612 Discord.exe 2468 Discord.exe 2416 Update.exe 5068 Discord.exe 3916 Discord.exe 1984 Discord.exe 4592 Discord.exe 1724 Discord.exe 2792 Discord.exe 4960 Discord.exe 1932 Discord.exe 2412 Discord.exe 5580 Discord.exe 5684 Discord.exe 5964 Discord.exe 5980 Discord.exe 5068 gpu_encoder_helper.exe 2416 gpu_encoder_helper.exe 3460 gpu_encoder_helper.exe 5576 Discord.exe -
Loads dropped DLL 43 IoCs
pid Process 1612 Discord.exe 2468 Discord.exe 5068 Discord.exe 3916 Discord.exe 3916 Discord.exe 3916 Discord.exe 3916 Discord.exe 3916 Discord.exe 3880 taskmgr.exe 1984 Discord.exe 4592 Discord.exe 1984 Discord.exe 1724 Discord.exe 2792 Discord.exe 1724 Discord.exe 1724 Discord.exe 1724 Discord.exe 1724 Discord.exe 4960 Discord.exe 1932 Discord.exe 2412 Discord.exe 5580 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5964 Discord.exe 5684 Discord.exe 5980 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5576 Discord.exe 5576 Discord.exe 5576 Discord.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\DiscordSetup.exe:Zone.Identifier chrome.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 6 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AnyDesk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AnyDesk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DiscordSetup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Update.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Update.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language AnyDesk.exe -
Checks SCSI registry key(s) 3 TTPs 39 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Discord.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\FriendlyName Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Discord.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Discord.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Discord.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\FriendlyName Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{8c7ed206-3f8a-4827-b3ab-ae9e1faefc6c}\0004 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{cf73bb51-3abf-44a2-85e0-9a3dc7a12132}\0006 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000002\Properties\{78c34fc8-104a-4aca-9ea4-524d52996e57}\005A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000 taskmgr.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{540b947e-8b40-45bc-a8a2-6a0b894cbda2}\0009 Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A Discord.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000001\FriendlyName Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{259abffc-50a7-47ce-af08-68c9a7d73366}\000C Discord.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\Properties\{51236583-0c4a-4fe8-b81f-166aec13f510}\007A Discord.exe -
Checks processor information in registry 2 TTPs 16 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString AnyDesk.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AnyDesk.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 Discord.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 Discord.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Discord.exe -
Enumerates system info in registry 2 TTPs 6 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133734968736185526" chrome.exe Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe -
Modifies registry class 61 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell chrome.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\ chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\ = "URL:Discord Protocol" reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\app-1.0.9166\\Discord.exe\" --url -- \"%1\"" reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\MuiCache BackgroundTransferHost.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\ chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257" chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell\open\command reg.exe Key created \Registry\User\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\NotificationData chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:" BackgroundTransferHost.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\app-1.0.9166\\Discord.exe\" --url -- \"%1\"" reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\URL Protocol reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\DefaultIcon reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord reg.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\ = "URL:Discord Protocol" reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\DefaultIcon reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell\open reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix BackgroundTransferHost.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000 chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\app-1.0.9166\\Discord.exe\",-1" reg.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1 chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02 chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295" chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\URL Protocol reg.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\DefaultIcon\ = "\"C:\\Users\\Admin\\AppData\\Local\\Discord\\app-1.0.9166\\Discord.exe\",-1" reg.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord\shell\open\command reg.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259} chrome.exe Set value (str) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:" BackgroundTransferHost.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings chrome.exe Set value (data) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000 chrome.exe Set value (int) \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1" chrome.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Discord reg.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2499603254-3415597248-1508446358-1000\{F3091F8F-985A-46E1-80AB-3DA2FB982D27} Discord.exe Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2499603254-3415597248-1508446358-1000\{AF9BE4D0-3589-49D5-9F00-D08DA36FF373} msedge.exe Key created \REGISTRY\USER\S-1-5-21-2499603254-3415597248-1508446358-1000_Classes\Local Settings\MuiCache MiniSearchHost.exe -
Modifies registry key 1 TTPs 11 IoCs
pid Process 2056 reg.exe 3320 reg.exe 1292 reg.exe 3144 reg.exe 5168 reg.exe 236 reg.exe 3596 reg.exe 1276 reg.exe 2916 reg.exe 1972 reg.exe 5828 reg.exe -
NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\DiscordSetup.exe:Zone.Identifier chrome.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3960 chrome.exe 3960 chrome.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 6088 chrome.exe 6088 chrome.exe 5892 msedge.exe 5892 msedge.exe 3492 msedge.exe 3492 msedge.exe 6088 chrome.exe 6088 chrome.exe 3180 msedge.exe 3180 msedge.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5576 Discord.exe 5576 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe 5684 Discord.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 5684 Discord.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
pid Process 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3492 msedge.exe 3492 msedge.exe 3492 msedge.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: 33 2728 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 2728 AUDIODG.EXE Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe Token: SeShutdownPrivilege 3960 chrome.exe Token: SeCreatePagefilePrivilege 3960 chrome.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe -
Suspicious use of SendNotifyMessage 64 IoCs
pid Process 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 4828 AnyDesk.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3960 chrome.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 1984 Discord.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe 3880 taskmgr.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 5376 chrome.exe 5092 MiniSearchHost.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4400 wrote to memory of 2320 4400 AnyDesk.exe 81 PID 4400 wrote to memory of 2320 4400 AnyDesk.exe 81 PID 4400 wrote to memory of 2320 4400 AnyDesk.exe 81 PID 4400 wrote to memory of 4828 4400 AnyDesk.exe 82 PID 4400 wrote to memory of 4828 4400 AnyDesk.exe 82 PID 4400 wrote to memory of 4828 4400 AnyDesk.exe 82 PID 3960 wrote to memory of 2820 3960 chrome.exe 87 PID 3960 wrote to memory of 2820 3960 chrome.exe 87 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 1988 3960 chrome.exe 88 PID 3960 wrote to memory of 4704 3960 chrome.exe 89 PID 3960 wrote to memory of 4704 3960 chrome.exe 89 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90 PID 3960 wrote to memory of 1936 3960 chrome.exe 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe"C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4400 -
C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe"C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe" --local-service2⤵
- System Location Discovery: System Language Discovery
PID:2320
-
-
C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe"C:\Users\Admin\AppData\Local\Temp\AnyDesk.exe" --local-control2⤵
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4828
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3960 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff857decc40,0x7ff857decc4c,0x7ff857decc582⤵PID:2820
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1876,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1872 /prefetch:22⤵PID:1988
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1812,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1912 /prefetch:32⤵PID:4704
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2176,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2196 /prefetch:82⤵PID:1936
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3088,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3244 /prefetch:12⤵PID:2636
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3204,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3272 /prefetch:12⤵PID:984
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3576,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3540 /prefetch:12⤵PID:736
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4592,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4596 /prefetch:82⤵PID:5104
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4616,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4536 /prefetch:82⤵PID:1356
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4708,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4884 /prefetch:82⤵PID:3624
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4888,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4884 /prefetch:82⤵PID:3804
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4320,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5080 /prefetch:12⤵PID:3020
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=3248,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3268 /prefetch:82⤵PID:2628
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5168,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5312 /prefetch:82⤵PID:3084
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5296,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5452 /prefetch:82⤵PID:2416
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5616,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5624 /prefetch:82⤵PID:3428
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=3464,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5752 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:900
-
-
C:\Users\Admin\Downloads\DiscordSetup.exe"C:\Users\Admin\Downloads\DiscordSetup.exe"2⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3148 -
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe"C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .3⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3732 -
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --squirrel-install 1.0.91664⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1612 -
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exeC:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9166 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=32.0.0 --initial-client-data=0x53c,0x548,0x54c,0x540,0x550,0x7ff668f9a538,0x7ff668f9a544,0x7ff668f9a5505⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2468
-
-
C:\Users\Admin\AppData\Local\Discord\Update.exeC:\Users\Admin\AppData\Local\Discord\Update.exe --createShortcut Discord.exe --setupIcon C:\Users\Admin\AppData\Local\Discord\app.ico5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2416
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2140,i,14818219628343884535,8539615133718233569,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2128 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3916
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --field-trial-handle=2364,i,14818219628343884535,8539615133718233569,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:115⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5068
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord /d "\"C:\Users\Admin\AppData\Local\Discord\Update.exe\" --processStart Discord.exe" /f5⤵
- Adds Run key to start application
- Modifies registry key
PID:2056
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f5⤵
- Modifies registry class
- Modifies registry key
PID:236
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f5⤵
- Modifies registry class
- Modifies registry key
PID:3596
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe\",-1" /f5⤵
- Modifies registry class
- Modifies registry key
PID:3320
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe\" --url -- \"%1\"" /f5⤵
- Modifies registry class
- Modifies registry key
PID:1276
-
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --squirrel-firstrun4⤵
- Drops file in Windows directory
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:1984 -
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exeC:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\discord /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\discord\Crashpad --url=https://f.a.k/e --annotation=_productName=discord --annotation=_version=1.0.9166 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=32.0.0 --initial-client-data=0x544,0x548,0x54c,0x53c,0x550,0x7ff668f9a538,0x7ff668f9a544,0x7ff668f9a5505⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4592
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1960,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1952 /prefetch:25⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1724
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=2236,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2232 /prefetch:115⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2792
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /ve /d "URL:Discord Protocol" /f5⤵
- Modifies registry class
- Modifies registry key
PID:1292
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2928,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2924 /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4960
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord /v "URL Protocol" /f5⤵
- Modifies registry class
- Modifies registry key
PID:3144
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\DefaultIcon /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe\",-1" /f5⤵
- Modifies registry class
- Modifies registry key
PID:2916
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Classes\Discord\shell\open\command /ve /d "\"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe\" --url -- \"%1\"" /f5⤵
- Modifies registry class
- Modifies registry key
PID:1972
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=4160,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4148 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1932
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=3232,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3220 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
PID:2412
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4432,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4428 --enable-node-leakage-in-renderers /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5580
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --app-user-model-id=com.squirrel.Discord.Discord --app-path="C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\resources\app.asar" --no-sandbox --no-zygote --autoplay-policy=no-user-gesture-required --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4344,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4376 --enable-node-leakage-in-renderers /prefetch:15⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:5684 -
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe"\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" nvidia6⤵
- Executes dropped EXE
PID:5068
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe"\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" amd6⤵
- Executes dropped EXE
PID:2416
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe"\\?\C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_voice-1\discord_voice\gpu_encoder_helper.exe" intel6⤵
- Executes dropped EXE
PID:3460
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c ""C:\Windows/System32/nvidia-smi.exe""6⤵PID:5428
-
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=4128,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4116 /prefetch:125⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5964
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --secure-schemes=disclip,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=disclip,sentry-ipc --field-trial-handle=3676,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:145⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies registry class
PID:5980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discordapp.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de97933065⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:3492 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ff83f033cb8,0x7ff83f033cc8,0x7ff83f033cd86⤵PID:3504
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1860 /prefetch:26⤵PID:5852
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:36⤵
- Suspicious behavior: EnumeratesProcesses
PID:5892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2580 /prefetch:86⤵PID:5224
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:16⤵PID:5488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:16⤵PID:5660
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:16⤵PID:5908
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4084 /prefetch:86⤵PID:2920
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1844,15962033680577249636,15954585859454509871,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4108 /prefetch:86⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:3180
-
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe query HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord5⤵
- Modifies registry key
PID:5168
-
-
C:\Windows\System32\reg.exeC:\Windows\System32\reg.exe add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Discord /d "\"C:\Users\Admin\AppData\Local\Discord\Update.exe\" --processStart Discord.exe" /f5⤵
- Adds Run key to start application
- Modifies registry key
PID:5828
-
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe"C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\Discord.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\discord" --gpu-preferences=UAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=4136,i,7401144085688010080,10452913120010405421,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,MediaSessionService,SpareRendererForSitePerProcess,UseEcoQoSForBackgroundProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4104 /prefetch:105⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:5576
-
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5868,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5428 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:6088
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5620,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3820 /prefetch:12⤵PID:5572
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=6216,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6224 /prefetch:12⤵PID:2436
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6364,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5788 /prefetch:82⤵PID:5732
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=6248,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6136 /prefetch:82⤵PID:572
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6460,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5012 /prefetch:82⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5376
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6440,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6488 /prefetch:82⤵PID:3392
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6412,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6180 /prefetch:82⤵PID:852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6380,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6444 /prefetch:12⤵PID:5280
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=5892,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6384 /prefetch:12⤵PID:3940
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=6172,i,11403792026090907864,8651708272920681082,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=6076 /prefetch:12⤵PID:4536
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:2728
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:3800
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E8 0x00000000000004E41⤵
- Suspicious use of AdjustPrivilegeToken
PID:2728
-
C:\Windows\system32\taskmgr.exe"C:\Windows\system32\taskmgr.exe" /01⤵
- Loads dropped DLL
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:3880
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5316
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5604
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5092
-
C:\Windows\system32\BackgroundTransferHost.exe"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.131⤵
- Modifies registry class
PID:5388
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\Desktop\.txt1⤵PID:2768
Network
-
Remote address:8.8.8.8:53Requestboot.net.anydesk.comIN AResponseboot.net.anydesk.comIN A57.128.101.78
-
Remote address:8.8.8.8:53Request8.8.8.8.in-addr.arpaIN PTRResponse8.8.8.8.in-addr.arpaIN PTRdnsgoogle
-
Remote address:8.8.8.8:53Requestrelay-2cf7befd.net.anydesk.comIN AResponserelay-2cf7befd.net.anydesk.comIN A195.181.165.139
-
Remote address:8.8.8.8:53Request78.101.128.57.in-addr.arpaIN PTRResponse78.101.128.57.in-addr.arpaIN PTRrelay-46094b16netanydeskcom
-
Remote address:8.8.8.8:53Requestwww.googleapis.comIN AResponsewww.googleapis.comIN A142.250.200.42www.googleapis.comIN A142.250.178.10www.googleapis.comIN A216.58.212.202www.googleapis.comIN A142.250.180.10www.googleapis.comIN A172.217.169.42www.googleapis.comIN A142.250.179.234www.googleapis.comIN A216.58.204.74www.googleapis.comIN A172.217.169.10www.googleapis.comIN A216.58.201.106www.googleapis.comIN A172.217.16.234www.googleapis.comIN A142.250.187.202www.googleapis.comIN A142.250.187.234www.googleapis.comIN A216.58.213.10www.googleapis.comIN A142.250.200.10
-
Remote address:8.8.8.8:53Request227.187.250.142.in-addr.arpaIN PTRResponse227.187.250.142.in-addr.arpaIN PTRlhr25s34-in-f31e100net
-
Remote address:8.8.8.8:53Requestogads-pa.googleapis.comIN AResponseogads-pa.googleapis.comIN A142.250.180.10ogads-pa.googleapis.comIN A142.250.187.202ogads-pa.googleapis.comIN A172.217.169.10ogads-pa.googleapis.comIN A172.217.16.234ogads-pa.googleapis.comIN A142.250.178.10ogads-pa.googleapis.comIN A142.250.187.234ogads-pa.googleapis.comIN A216.58.201.106ogads-pa.googleapis.comIN A216.58.212.234ogads-pa.googleapis.comIN A142.250.200.42ogads-pa.googleapis.comIN A216.58.204.74ogads-pa.googleapis.comIN A142.250.179.234ogads-pa.googleapis.comIN A142.250.200.10
-
Remote address:8.8.8.8:53Request36.200.250.142.in-addr.arpaIN PTRResponse36.200.250.142.in-addr.arpaIN PTRlhr48s30-in-f41e100net
-
Remote address:8.8.8.8:53Requestplay.google.comIN AResponseplay.google.comIN A216.58.212.206
-
Remote address:8.8.8.8:53Requestdiscord.comIN AResponsediscord.comIN A162.159.138.232discord.comIN A162.159.137.232discord.comIN A162.159.135.232discord.comIN A162.159.128.233discord.comIN A162.159.136.232
-
Remote address:8.8.8.8:53Requestajax.googleapis.comIN AResponseajax.googleapis.comIN A142.250.187.202
-
Remote address:8.8.8.8:53Request10.178.250.142.in-addr.arpaIN PTRResponse10.178.250.142.in-addr.arpaIN PTRlhr48s27-in-f101e100net
-
Remote address:8.8.8.8:53Requestwww.googletagmanager.comIN AResponsewww.googletagmanager.comIN A172.217.16.232
-
Remote address:8.8.8.8:53Request51.226.126.34.in-addr.arpaIN PTRResponse51.226.126.34.in-addr.arpaIN PTR5122612634bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request139.165.181.195.in-addr.arpaIN PTRResponse139.165.181.195.in-addr.arpaIN PTRrelay-2cf7befdnetanydeskcom
-
Remote address:8.8.8.8:53Requestclientservices.googleapis.comIN AResponseclientservices.googleapis.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.200.36
-
Remote address:8.8.8.8:53Requestwww.gstatic.comIN AResponsewww.gstatic.comIN A142.250.200.35
-
Remote address:8.8.8.8:53Requestapis.google.comIN AResponseapis.google.comIN CNAMEplus.l.google.complus.l.google.comIN A142.250.179.238
-
Remote address:8.8.8.8:53Request35.200.250.142.in-addr.arpaIN PTRResponse35.200.250.142.in-addr.arpaIN PTRlhr48s30-in-f31e100net
-
Remote address:8.8.8.8:53Request206.212.58.216.in-addr.arpaIN PTRResponse206.212.58.216.in-addr.arpaIN PTRams16s21-in-f141e100net206.212.58.216.in-addr.arpaIN PTRlhr25s27-in-f14�I206.212.58.216.in-addr.arpaIN PTRams16s21-in-f206�I
-
Remote address:8.8.8.8:53Requestfonts.googleapis.comIN AResponsefonts.googleapis.comIN A142.250.178.10
-
Remote address:8.8.8.8:53Requestcdn.discordapp.comIN AResponsecdn.discordapp.comIN A162.159.135.233cdn.discordapp.comIN A162.159.129.233cdn.discordapp.comIN A162.159.130.233cdn.discordapp.comIN A162.159.133.233cdn.discordapp.comIN A162.159.134.233
-
Remote address:8.8.8.8:53Request202.187.250.142.in-addr.arpaIN PTRResponse202.187.250.142.in-addr.arpaIN PTRlhr25s33-in-f101e100net
-
Remote address:8.8.8.8:53Request232.16.217.172.in-addr.arpaIN PTRResponse232.16.217.172.in-addr.arpaIN PTRmad08s04-in-f81e100net232.16.217.172.in-addr.arpaIN PTRlhr48s28-in-f8�H
-
Remote address:8.8.8.8:53Request133.190.18.2.in-addr.arpaIN PTRResponse133.190.18.2.in-addr.arpaIN PTRa2-18-190-133deploystaticakamaitechnologiescom
-
Remote address:142.250.200.36:443RequestGET /async/ddljson?async=ntp:2 HTTP/2.0
host: www.google.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:8.8.8.8:53Request238.179.250.142.in-addr.arpaIN PTRResponse238.179.250.142.in-addr.arpaIN PTRlhr25s31-in-f141e100net
-
Remote address:8.8.8.8:53Requestclients2.google.comIN AResponseclients2.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A172.217.169.78
-
Remote address:8.8.8.8:53Requestfonts.gstatic.comIN AResponsefonts.gstatic.comIN A216.58.204.67
-
Remote address:8.8.8.8:53Requestd3e54v103j8qbb.cloudfront.netIN AResponsed3e54v103j8qbb.cloudfront.netIN A108.156.61.211d3e54v103j8qbb.cloudfront.netIN A108.156.61.222d3e54v103j8qbb.cloudfront.netIN A108.156.61.158d3e54v103j8qbb.cloudfront.netIN A108.156.61.73
-
Remote address:8.8.8.8:53Request117.161.18.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request119.155.64.172.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestocsp.digicert.comIN AResponseocsp.digicert.comIN CNAMEocsp.edge.digicert.comocsp.edge.digicert.comIN CNAMEfp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.2be4.phicdn.netIN CNAMEfp2e7a.wpc.phicdn.netfp2e7a.wpc.phicdn.netIN A192.229.221.95
-
Remote address:8.8.8.8:53Request10.180.250.142.in-addr.arpaIN PTRResponse10.180.250.142.in-addr.arpaIN PTRlhr25s32-in-f101e100net
-
Remote address:8.8.8.8:53Request78.169.217.172.in-addr.arpaIN PTRResponse78.169.217.172.in-addr.arpaIN PTRlhr48s09-in-f141e100net
-
Remote address:8.8.8.8:53Requestcdn.prod.website-files.comIN AResponsecdn.prod.website-files.comIN A104.18.161.117cdn.prod.website-files.comIN A104.18.160.117
-
Remote address:8.8.8.8:53Request232.138.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwww.youtube.comIN AResponsewww.youtube.comIN CNAMEyoutube-ui.l.google.comyoutube-ui.l.google.comIN A172.217.16.238youtube-ui.l.google.comIN A142.250.200.14youtube-ui.l.google.comIN A216.58.212.238youtube-ui.l.google.comIN A172.217.169.78youtube-ui.l.google.comIN A142.250.180.14youtube-ui.l.google.comIN A142.250.200.46youtube-ui.l.google.comIN A142.250.187.206youtube-ui.l.google.comIN A216.58.201.110youtube-ui.l.google.comIN A216.58.204.78youtube-ui.l.google.comIN A142.250.179.238youtube-ui.l.google.comIN A142.250.178.14youtube-ui.l.google.comIN A172.217.169.14youtube-ui.l.google.comIN A142.250.187.238
-
Remote address:8.8.8.8:53Requestwww.youtube.comIN A
-
Remote address:8.8.8.8:53Requestwww.youtube.comIN A
-
Remote address:162.159.138.232:443RequestGET / HTTP/2.0
host: discord.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html
cf-ray: 8d327a04cab8955f-LHR
cf-cache-status: HIT
cache-control: no-cache
last-modified: Tue, 15 Oct 2024 20:00:10 GMT
set-cookie: __dcfduid=1af6c3e08b3211ef973be9ccdd365fae; Expires=Sun, 14 Oct 2029 20:14:38 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-MjI2LDE3OCwxODgsMTg2LDc0LDI1Myw5LDIyMA==' https://discord.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://*.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location https://script.crazyegg.com https://*.website-files.com https://uploads-ssl.webflow.com https://global.localizecdn.com https://cdn.localizeapi.com https://d3e54v103j8qbb.cloudfront.net https://gist.github.com https://unpkg.com/@splinetool/runtime/build/runtime.js https://*.twitter.com https://cdn.jsdelivr.net/npm/slick-carousel@1.8.1/slick/slick.min.js https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.js https://boards-api.greenhouse.io https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js https://ajax.googleapis.com/ajax/libs/jquery/3.6.0/jquery.min.js https://cdn.finsweet.com/files/fscalendar/calendar-invite-v1.0.min.js 'sha256-mjdgHR9aXy-6OwAGlNS_XgNcYG1Uhd2U4pl8vi7-XCY=' 'sha256-gqG2LEZaHDwOL3S_CXJTuk_f3LimTEyruhOc_U0_QUY=' 'sha256-y0oGiuXZdmX7xRABTnY5cbHkfghDqbfX6JoerXLgVJc=' 'sha256-gBzDBwsujjXjXk6GLgdSlLIrvt5h0s3F_qF7Qt8TYwY=' 'sha256-TrY3AqlyKfZdsI3LYsy6u8GAhckLEXeyLcFK2gOe18U=' 'sha256-lVOL-gH47X0Li5QriWNZ69Hcr-71DsXFvGmQxN9TpBw=' 'sha256-j11ZNhk91nmUjPCBAIRcvJeEgnkbdJ9qNqoEMekilec=' 'sha256-1sQ9sTbc6Lumd2Frwf7IBwGG02gPTreTI8QBBW5kibM=' 'sha256-uh1p-Vy3_Cn66Ugk4Hak-gGr2Udg7yiI_5u5E_BdCRM=' 'sha256-7JHgDILwD7i_kvnHwJFF5WsHHmIc98tkBqDqbv47iFE=' 'sha256-KvstP_RIj6GGaE25Mqo-kIO0_WVEls1n5tnNhm8zmPA=' 'sha256-6xIDOlx5P0LKHv8fkot5ULOnB8ySdhjJi5r_ZP5EDPY=' 'sha256-jY_7jWrddtNUb-Y4CFKWaH-R2lrqgm_LAX72E8SLqKw=' 'sha256-MdICB9cW7ILT3ZeSxhN2YlpFxEsn5WHr03Ix-WVpHsw=' 'sha256-fUfByJGhChEFu7PE5HJfFwiYKySnP1H0iXvAxkauLNU=' 'sha256-xjkCDxBOM2TlIn5DpGQM4aJldb4AiHMKlRjfW46l-x0=' 'sha256-VOPfGBY-XgTDMwhG41S5eZyMKlu3gN60suwCPDWZ8MY=' 'sha256-tVeTMYknRG_IAdCHRGlDd9S2bX2_rX0e4HpaP9lgKWY=' 'sha256-kprfDg8ElCpUCFQAX5shnAPf3i59vVTSy02AjZXV3k0=' 'sha256-llLws8TR-U3nNRCIvJNVc-SGscqwyeO1IPgpbnWuZdc=' 'sha256-h9lm4cvrD7egZu1GTAE1h2IDy1K4fXgD-q_O7aEosuw=' 'sha256-_cdQbTQzcfSt2_aCceUvkUmLh1WMdvlKbi1BBG7u8Jg=' 'sha256-U0jHWhsvIpjnwYKeJS_-2pe9ROsYnck5ZB2aXNyKWq8=' 'sha256-rB4G_-e_bAPU7rKI_9HC1lBZ0XEa_nHDH6hXFz4GIh4=' 'sha256-N02bP-slnHB-OYEN6imRqCHcHLN5DvBouRmyO2qcQYU=' 'sha256-QHiY6i8ql9SJTaFXzUhm08ZWuNz0QarKruf0Omd9-OQ=' 'sha256-s4OBHcHJnkGxjEyNJhU5BQt4qlt6MH07rG/j/hFOUnE=' 'sha256-s4OBHcHJnkGxjEyNJhU5BQt4qlt6MH07rG_j_hFOUnE=' 'sha256-mjdgHR9aXy+6OwAGlNS/XgNcYG1Uhd2U4pl8vi7+XCY=' 'sha256-jY/7jWrddtNUb+Y4CFKWaH+R2lrqgm/LAX72E8SLqKw=' 'sha256-lVOL+gH47X0Li5QriWNZ69Hcr+71DsXFvGmQxN9TpBw=' 'sha256-/cdQbTQzcfSt2/aCceUvkUmLh1WMdvlKbi1BBG7u8Jg=' 'sha256-N02bP+slnHB+OYEN6imRqCHcHLN5DvBouRmyO2qcQYU=' 'sha256-gqG2LEZaHDwOL3S/CXJTuk/f3LimTEyruhOc/U0/QUY=' 'sha256-llLws8TR+U3nNRCIvJNVc+SGscqwyeO1IPgpbnWuZdc=' 'sha256-gBzDBwsujjXjXk6GLgdSlLIrvt5h0s3F/qF7Qt8TYwY=' 'sha256-6xIDOlx5P0LKHv8fkot5ULOnB8ySdhjJi5r/ZP5EDPY=' 'sha256-7JHgDILwD7i/kvnHwJFF5WsHHmIc98tkBqDqbv47iFE=' 'sha256-VOPfGBY+XgTDMwhG41S5eZyMKlu3gN60suwCPDWZ8MY='; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://*.hcaptcha.com https://hcaptcha.com https://*.website-files.com https://uploads-ssl.webflow.com https://*.githubassets.com https://cdn.jsdelivr.net/npm/swiper@11/swiper-bundle.min.css; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com https://assets-global.website-files.com data: https://*.website-files.com https://uploads-ssl.webflow.com https://global.localizecdn.com https://cdn.localizeapi.com https://*.ytimg.com https://uploads-ssl.webflow.com; font-src 'self' https://fonts.gstatic.com https://fonts.gstatic.com https://*.website-files.com https://uploads-ssl.webflow.com; connect-src 'self' https://discordapp.com https://discord.com https://connect.facebook.net https://api.greenhouse.io https://api.github.com https://sentry.io https://www.google-analytics.com https://hackerone-api.discord.workers.dev https://*.hcaptcha.com https://hcaptcha.com https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location ws://127.0.0.1:* http://127.0.0.1:* https://global.localizecdn.com https://cdn.localizeapi.com https://*.website-files.com https://uploads-ssl.webflow.com https://webflow.com/api/ https://script.crazyegg.com https://assets-tracking.crazyegg.com https://pagestates-tracking.crazyegg.com https://tracking.crazyegg.com; media-src 'self' https://cdn.discordapp.com/assets/ https://cdn.discordapp.com/promotions/premium-marketing/ https://*.website-files.com https://uploads-ssl.webflow.com; frame-src https://discordapp.com/domain-migration https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://www.youtube.com/embed/ https://hackerone.com/631fba12-9388-43c3-8b48-348f11a883c0/ https://10851314.fls.doubleclick.net/ https://*.twitter.com https://*.vimeo.com;
permissions-policy: interest-cohort=()
surrogate-control: max-age=2147483647
surrogate-key: prod-wf1.discord.com 6257adef93867e50d84d30e2 pageId:6661f9f5d68f517d666be828
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VlipFcf2akdP0VKmwE2b%2Fm%2FRwHkLUniaLUWXPCgzp0UBHLQAzysUOwhWFam%2Bg6vsuy7YDnQHYmzkRJ4hxINf76rp6vQBS4q5h35i4GmcdI2zerCo5Kh1uHkcrLf5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __sdcfduid=1af6c3e18b3211ef973be9ccdd365faedc51691f2c996f38529e681bf2b2f960d2804008351e59103befccb473ec3af3; Expires=Sun, 14 Oct 2029 20:14:38 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
set-cookie: __cfruid=35613160b77ae67fc1d15f05d0cf53ba202f5676-1729023278; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=eKTiuDHkhCQOypIGpES3OyRBchbllnRQCopM5N61ANQ-1729023278891-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /webflow-scripts/head.js HTTP/2.0
host: discord.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: __dcfduid=1af6c3e08b3211ef973be9ccdd365fae
cookie: __sdcfduid=1af6c3e18b3211ef973be9ccdd365faedc51691f2c996f38529e681bf2b2f960d2804008351e59103befccb473ec3af3
cookie: __cfruid=35613160b77ae67fc1d15f05d0cf53ba202f5676-1729023278
cookie: _cfuvid=eKTiuDHkhCQOypIGpES3OyRBchbllnRQCopM5N61ANQ-1729023278891-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/css
cf-ray: 8d327a057b7b955f-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=60
etag: W/"f7a6ac84994d199fc960c0bf67e07eb2"
last-modified: Thu, 10 Oct 2024 20:10:22 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-build-id: 049ab5b31e290901bda109a642e64098fcf169cf
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hduUZfRHjvpTqIM%2BX2BphiGiiOtJVAkGvKr2W5961%2FQq3QFGUPZXxxyNYeErNJTcfx%2B4RbdAyAJ9ozBV4qUyTXX%2BE7p0jYcb76WP6FbqKb%2FQafXkFey2U0mVgJkO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /w/assets/049ab5b31e290901bda109a642e64098fcf169cf/styles.css HTTP/2.0
host: discord.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: __dcfduid=1af6c3e08b3211ef973be9ccdd365fae
cookie: __sdcfduid=1af6c3e18b3211ef973be9ccdd365faedc51691f2c996f38529e681bf2b2f960d2804008351e59103befccb473ec3af3
cookie: __cfruid=35613160b77ae67fc1d15f05d0cf53ba202f5676-1729023278
cookie: _cfuvid=eKTiuDHkhCQOypIGpES3OyRBchbllnRQCopM5N61ANQ-1729023278891-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/javascript
cf-ray: 8d327a057b7a955f-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=30
etag: W/"4ee877d2ad23ecc1d665e3dee60ef623"
last-modified: Tue, 01 Oct 2024 20:40:40 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BKIqsE2HuJSYS02z74SyEyEDm%2FEbr4EV1rXoU67%2Bj6lsUOmKf7ZRQRzogRHsIayhNANZ89iRBonkFqkjphgY8otx8ogmqf8mAUbfTkpkKwoRzr4YabStNJO%2FN5qq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:8.8.8.8:53Requestcdn.localizeapi.comIN AResponsecdn.localizeapi.comIN A104.22.20.64cdn.localizeapi.comIN A172.67.41.53cdn.localizeapi.comIN A104.22.21.64
-
Remote address:8.8.8.8:53Request67.204.58.216.in-addr.arpaIN PTRResponse67.204.58.216.in-addr.arpaIN PTRlhr25s13-in-f31e100net67.204.58.216.in-addr.arpaIN PTRlhr48s49-in-f3�G67.204.58.216.in-addr.arpaIN PTRlhr25s13-in-f67�G
-
Remote address:8.8.8.8:53Requestgeolocation.onetrust.comIN AResponsegeolocation.onetrust.comIN A172.64.155.119geolocation.onetrust.comIN A104.18.32.137
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.18.190.133a767.dspw65.akamai.netIN A2.18.190.134
-
GEThttps://cdn.prod.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.825d518ea.min.csschrome.exeRemote address:104.18.161.117:443RequestGET /6257adef93867e50d84d30e2/css/discord-2022.825d518ea.min.css HTTP/2.0
host: cdn.prod.website-files.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/webp
content-length: 6494
x-amz-id-2: 09TnaPWySCt5W0iSPyEZxpPP7QYPFgXYPYev3a1jflhmYkMmH9hvKla3o/nyyFcwMIQ0gPTjivMI3jDY89bK+A==
x-amz-request-id: D9WX05QH38PXBPEQ
last-modified: Mon, 22 Apr 2024 12:18:19 GMT
etag: "cc97f080d63d9290182234daaef507cd"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: qzj8h2RM.yqJTdbvy1lPByOmGDMHOpN4
cf-cache-status: HIT
age: 7119
accept-ranges: bytes
set-cookie: __cf_bm=ypZsctN7Ygkc7BeUaVEri6AKcug1uLicpGkMuM0ldI4-1729023279-1.0.1.1-qipDxPjxffGQN0O4ToJgHfU_tX4U3Hs9qtl7uXM_Bl1J.X4OLSnvjf1l_vfb23hRNmPjXu_5KoVdM7Ziv2OyQw; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.prod.website-files.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d327a06793463e8-LHR
alt-svc: h3=":443"; ma=86400
-
GEThttps://cdn.prod.website-files.com/6257adef93867e50d84d30e2/664daa37ea162cadf9603500_Art.webpchrome.exeRemote address:104.18.161.117:443RequestGET /6257adef93867e50d84d30e2/664daa37ea162cadf9603500_Art.webp HTTP/2.0
host: cdn.prod.website-files.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: image/webp
content-length: 47596
x-amz-id-2: PcB/FpyGgPrD3p0gKuh7zx4v+pWCjPYZDC9g/w2aTOCgI1ap98eDdPE9LSjUwhC+CayI2H9iQLk=
x-amz-request-id: D9WHCHG8T73X34MS
last-modified: Wed, 22 May 2024 08:20:55 GMT
etag: "f6e99fdf009c8c9aaa1e3ea2fba63a06"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: PU3.Oo2gdQ85y9L6ZgCuiiTUZHt75Laa
cf-cache-status: HIT
age: 30910
accept-ranges: bytes
set-cookie: __cf_bm=jlvFOONeT.LFIaxBmG41i81Fa8pzGkGq1oSjoNvvxUw-1729023279-1.0.1.1-7PyY6UcMNK3sFDs8poTiGmrtEP0TW9Vp0bl66Wp61GAE2ZIIW4theo3brA0ELDJ2bsWT.BRVOwYNc5fJbO74TA; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.prod.website-files.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d327a06793363e8-LHR
alt-svc: h3=":443"; ma=86400
-
GEThttps://cdn.prod.website-files.com/6257adef93867e50d84d30e2/662630272724e61320fb7ee2_WUMPUS.webpchrome.exeRemote address:104.18.161.117:443RequestGET /6257adef93867e50d84d30e2/662630272724e61320fb7ee2_WUMPUS.webp HTTP/2.0
host: cdn.prod.website-files.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/css
content-length: 267019
x-amz-id-2: NjKgaIxGJc7/g5rMvO+KV2lu6yUFEvbRerBmoMUJcvYRGg3nzZ4Jw3mJmx+7XvyAdPSrvisK+48=
x-amz-request-id: NRCBDMPQYGT3RY4D
last-modified: Tue, 15 Oct 2024 12:45:08 GMT
etag: "6ab5648153ca719945eecdb444737374"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=31536000, immutable
content-encoding: gzip
x-amz-version-id: jjSGDraQx_vgbuu0ZoJqAnywqhtKGEJB
cf-cache-status: HIT
age: 26875
accept-ranges: bytes
set-cookie: __cf_bm=UfisrV98Xat5s0c5ebXB5gAXC13y2xR5nhszzyqYEag-1729023279-1.0.1.1-C0ERJEQ9kvWLHSY3vchNmr6w7q1KfWIlo1rQ1u2rVWufEwIVFIUHqTiFTtLR1MsA8IHeVI1a_kBMxjKgW1uS7A; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.prod.website-files.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d327a06793263e8-LHR
alt-svc: h3=":443"; ma=86400
-
GEThttps://cdn.prod.website-files.com/6257adef93867e50d84d30e2/66263062e1fb458b0803dbe6_WUMPUS-pl.webpchrome.exeRemote address:104.18.161.117:443RequestGET /6257adef93867e50d84d30e2/66263062e1fb458b0803dbe6_WUMPUS-pl.webp HTTP/2.0
host: cdn.prod.website-files.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: __cf_bm=jlvFOONeT.LFIaxBmG41i81Fa8pzGkGq1oSjoNvvxUw-1729023279-1.0.1.1-7PyY6UcMNK3sFDs8poTiGmrtEP0TW9Vp0bl66Wp61GAE2ZIIW4theo3brA0ELDJ2bsWT.BRVOwYNc5fJbO74TA
ResponseHTTP/2.0 200
content-type: image/webp
content-length: 6738
x-amz-id-2: XOd5wBV9z1tf4r1sgDGhfIBNGrPUf6iPeZkP7FkcUNmrwSzQ1L0sfrjbPcgTByxX/hH8DzcbTAY=
x-amz-request-id: PV5TW9FYR270E6GE
last-modified: Thu, 23 May 2024 11:08:32 GMT
etag: "701a98fd075a859115cfa41662e98043"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: 7dbnSD_vhPp0lrLJ9hVK8lkRAzsDjkz8
cf-cache-status: HIT
age: 5155
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d327a06f9e563e8-LHR
alt-svc: h3=":443"; ma=86400
-
GEThttps://cdn.prod.website-files.com/6257adef93867e50d84d30e2/6641da5484ffb72b9ad73f01_Clyde.webpchrome.exeRemote address:104.18.161.117:443RequestGET /6257adef93867e50d84d30e2/6641da5484ffb72b9ad73f01_Clyde.webp HTTP/2.0
host: cdn.prod.website-files.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: __cf_bm=jlvFOONeT.LFIaxBmG41i81Fa8pzGkGq1oSjoNvvxUw-1729023279-1.0.1.1-7PyY6UcMNK3sFDs8poTiGmrtEP0TW9Vp0bl66Wp61GAE2ZIIW4theo3brA0ELDJ2bsWT.BRVOwYNc5fJbO74TA
ResponseHTTP/2.0 200
content-type: image/webp
content-length: 1154
x-amz-id-2: E53UqSK/tygwMljCXgxkNed4qLeLnOa8R+eyqlBz/eLlwxnl6ygg8rwx6u1B9n7QSYZTWTwLuaLaKqx3L4OjYqAtnEQzbs/ATWDW84cCOcQ=
x-amz-request-id: D9WQ1R29HHS2MQGY
last-modified: Mon, 22 Apr 2024 12:18:19 GMT
etag: "6cec18f1a7b02312f5e20ec024a2e9e1"
x-amz-server-side-encryption: AES256
cache-control: max-age=84600, must-revalidate
x-amz-version-id: XUwwVNQL_9kE53lxisW6JQ31qoRnHDa5
cf-cache-status: HIT
age: 6693
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
server: cloudflare
cf-ray: 8d327a06f9e263e8-LHR
alt-svc: h3=":443"; ma=86400
-
Remote address:104.22.20.64:443RequestGET /localize.js HTTP/2.0
host: cdn.localizeapi.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/javascript
last-modified: Tue, 17 Sep 2024 15:18:37 GMT
etag: W/"07e57a102110f44031e3c834694fd06c"
x-amz-server-side-encryption: AES256
cache-control: public, max-age=259200
x-amz-meta-x-amz-meta-v: 494
x-amz-version-id: .1ZaT984uo1AUmfKfOuH_slqXwVt2c.w
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 9d213bbde01ff71af70e3a8fd7017940.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P7
x-amz-cf-id: h4EmCttedl-rjRJiNCU29A0AKOaWTxsQWkD-PC7aFQ5uzMZJ1AzUoA==
age: 148870
cf-cache-status: HIT
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8d327a067d3194c3-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:142.250.187.202:443RequestGET /ajax/libs/webfont/1.6.26/webfont.js HTTP/2.0
host: ajax.googleapis.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
GEThttps://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2chrome.exeRemote address:108.156.61.211:443RequestGET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2 HTTP/2.0
host: d3e54v103j8qbb.cloudfront.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Mon, 20 Jul 2020 17:53:02 GMT
server: AmazonS3
content-encoding: br
date: Tue, 15 Oct 2024 03:29:47 GMT
cache-control: max-age=84600, must-revalidate
etag: W/"dc5e7f18c8d36ac1d3d4753a87c98d0a"
vary: Accept-Encoding
via: 1.1 3bdef981159de9c713020c64476ba0e4.cloudfront.net (CloudFront)
age: 60292
x-cache: Hit from cloudfront
x-amz-cf-pop: AMS1-P2
x-amz-cf-id: 3mS3iK5tB6soDGFgU1ZnOWoVlIymFDJwfJe44B_Qd0rdBKtgEKWLlw==
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/background-art__2__720.png HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 63151
content-range: bytes 0-63150/63151
cf-ray: 8d327a089a9152e7-LHR
cf-cache-status: HIT
age: 913981
cache-control: public, max-age=300
etag: "ad3238c3e3e19282de53a8ac0df375e9"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=g3lrEexaU1SP8P7xnOCBv4hvj_RVU6nENGuUYTT4aGA-1729023279-1.0.1.1-ng7seDwR9r3Tudni0mAQBUdjACQiygEpjqi6bRieTdeM4USWDNMvwGpmGsTNgvTs2JD1.lkPawfKqxFP7uLMhg; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zpeoyItYvEzoJsvjYOTnil02AVPj3t7wU%2F0RDDy%2FmXnrPpZcEjaemBzpVlIPJ0XIo1gCVfFxXxg0Z2xild3mWlJzzgv6hBZgzGoPe18t8hfyOMLaKhlGrQy79n7M%2BEHwTx%2B7ow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=smY17gyi1C2ztqMmE9PoH6Lx1ZrdHIQEW4CXAZ0EnAg-1729023279551-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/3.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 94071
content-range: bytes 0-94070/94071
cf-ray: 8d327a089a9a52e7-LHR
cf-cache-status: HIT
age: 143630
cache-control: public, max-age=300
etag: "ce992bbcb0a83993a1b4d742c7b1bae1"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=RGpTgOV2dK5co9gZFXQuAfZH7AXsGVPls5bzuksice4-1729023279-1.0.1.1-Ry7DpbyDLV8m1hqyCBZ_JXHsQoNonJs.FJdn7mGdhZRN2gJSacD8jEWEDxC9QEqkMWMM98wqSfnI1U_c2TPvUQ; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TBOcZobncmY8zsc3%2Fnmaxa6ZSorh000qR1vExRNxcL5M7nqF2yFbVOEi1OqTP9hEca4dUj428SxisubKV69TWOGfMqgjJg7gxXMokOQ7ueI81lDiMTWVy3a%2B096hvoefrtZyYw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=M005mGbXU5O1fUKVXUvQJGztpsKE0AlwFJ6wOgDO3_U-1729023279571-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/2.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 62340
content-range: bytes 0-62339/62340
cf-ray: 8d327a089a9952e7-LHR
cf-cache-status: HIT
age: 919015
cache-control: public, max-age=300
etag: "a5b0177f2e673bcf4d1f5f6eb81746cb"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=HlXX3jIek1ZRVKE8ORg0_8bVEgiPnM2LdrGU4brfToY-1729023279-1.0.1.1-SD9Vk1wY96zy1r_GmQ.W2VHjx28kvYhCzT9rjXEpxWhgk9KGql8DT1KSeOTDAbXjH9lEQEi8QyWw2W3aNQ0RdA; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=o9pC4qToESrG55HkDSt8b4P%2FZEloRq1n%2BEfRknv8JxRYM2Mlm%2FMdciB3gxgD4pnWRFi50Yo3eKUvQqmDUdgfRZWlI2%2FoucIVOEyNy%2FXq%2Fjqp%2Bky4qtAShj5c9L4Ug2rJj1GGrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=305cqEdbv8j58yG3Fry_0NU79HFUTy3sxF3F5sMPCE4-1729023279573-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/1.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 62365
content-range: bytes 0-62364/62365
cf-ray: 8d327a089a9452e7-LHR
cf-cache-status: HIT
age: 1929
cache-control: public, max-age=300
etag: "0cb532a23be107d2295ce227fb72c018"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=q02kmLK7huNPWK9Gm2OFfD0wjm0w0.QQP_CRV31VsmY-1729023279-1.0.1.1-EtkVtK4gAI8TArAf9yzg3WlWwJyMhd_7f5bc4w58eQDhkgm4I5KD3t99FjqpckBzQMuSENuHQmgmMh9W_KeKPA; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qYutL0agXl8VJqjrKPGrwTTWjnF0LHYK7k%2BF1BLse%2BhAPiwrvoIrXQ8R7D9XhALdh3ekuIZukDUAhlxJoRXZct%2FJ74Aw8X%2B3mx9yFP%2FRZx3cZD7c8DdO0iUgsi5qQAQWnvn85g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=gVcVz__5lC6qyOQr2c8.ff4_2TEkIg5NDjEyd5I7Oeo-1729023279574-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/5.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 62362
content-range: bytes 0-62361/62362
cf-ray: 8d327a089a9752e7-LHR
cf-cache-status: HIT
age: 3530788
cache-control: public, max-age=300
etag: "face4d9010c1721e2539d6b814076f18"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=muB8do4s42UCkcBrC11q2s5j2Ibuya.LdLgzHomV63U-1729023279-1.0.1.1-_4Lwkemlz2_jRDW_rYcF6TY4Z2dQ9AARJVzqD73JQ.cahdISWya2BoTMckZKbzlMkxPJ_mhZQRwpEIXVKNitoA; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qAz%2FpPl9Ar8hWeJ6iGVkO65En%2FdNRTtVdburbQPJviDrS8SGNC0tzGcwvn1X2N4NSYpoX0YRNMXXXdmY8dmNwINu2q6hg900fKN8z4LkCE%2BWQP%2F5sZzsnaZsvmhd%2BdMJpnVMJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=i47ZKfiOTPWYBfRxSLNiy6SSZjA3p8hjYP.xaNmMqX0-1729023279575-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/4.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 206
content-type: audio/mp4
content-length: 63023
content-range: bytes 0-63022/63023
cf-ray: 8d327a089a9552e7-LHR
cf-cache-status: HIT
age: 3530788
cache-control: public, max-age=300
etag: "bc007962a7ad391dc86aa0fdca161906"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=hYnRqTcIrKJX2xb9J5gtxp3CQgtj76X7rtpK2PqHGhU-1729023279-1.0.1.1-3tSV4OCK.bJW8HrEyGXujeBZA1vWj3bashm7R2EGMJHQ5HaPM3b6aZUtEGlCmNVd6IfiSsOLba6KDDIB2DDrEQ; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zedlImIck7mngvenRkLmU111b3z7Fb80sM4Jpt2hAyU2eF3hKUxyjNbfjBhc09jwbAQlmxYo5rMCMJRXD0ld5rHReWGXXYJtM8vYOytqToe5Kk7f5RsmGeBUFu%2BAYFV%2FCmYqSw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=rqUrWSZgjCP3vcYUVaG99EJ0BmCU.hS63QM9LFzj5zQ-1729023279579-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:162.159.135.233:443RequestGET /assets/homepage/6.m4a HTTP/2.0
host: cdn.discordapp.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: audio
referer: https://discord.com/
accept-language: en-US,en;q=0.9
range: bytes=0-
ResponseHTTP/2.0 200
content-type: image/png
content-length: 69847
cf-ray: 8d327a089a8f52e7-LHR
cf-cache-status: HIT
accept-ranges: bytes
age: 151006
cache-control: public, max-age=300
etag: "f1876fb0d085d65d3857d64155e7bc31"
last-modified: Thu, 29 Aug 2024 00:10:57 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
set-cookie: __cf_bm=I_uUrzw52tRXBn7NyVZQZkjG7vWuMPXe576o__ID17k-1729023279-1.0.1.1-tBqQ4MhemCe9OvdDVSG2d6xTigP9NftrPbpCl9xvSxpwQ5B4CkScANiQ3f5SWaBE.fVUYF1lw7_L7x80g4QPQg; path=/; expires=Tue, 15-Oct-24 20:44:39 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mPEnmYgKZmBuQ8awtcNG%2BnMnUoa8wgrxd0r%2FmHuRt4osaMcYq9rrVAmcdlCOkW%2BYZqsbgJTC9rutdlSykJmRqfNtwteZSG99Ia2AgXp6LcIoiayi9ybI0MzHErZaQ2S7MYFxVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: _cfuvid=p1rD1_Zpf.TjZpkBRsKdBF2ArfD.I45DMPyUBV31Wxs-1729023279603-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
-
Remote address:8.8.8.8:53Request211.61.156.108.in-addr.arpaIN PTRResponse211.61.156.108.in-addr.arpaIN PTRserver-108-156-61-211ams1r cloudfrontnet
-
Remote address:8.8.8.8:53Request1.80.190.35.in-addr.arpaIN PTRResponse1.80.190.35.in-addr.arpaIN PTR18019035bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request64.20.22.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requeststable.dl2.discordapp.netIN AResponsestable.dl2.discordapp.netIN A34.126.226.51
-
Remote address:8.8.8.8:53Request233.135.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requesta.nel.cloudflare.comIN AResponsea.nel.cloudflare.comIN A35.190.80.1
-
Remote address:8.8.8.8:53Requestnexusrules.officeapps.live.comIN AResponsenexusrules.officeapps.live.comIN CNAMEprod.nexusrules.live.com.akadns.netprod.nexusrules.live.com.akadns.netIN A52.111.236.23
-
Remote address:172.64.155.119:443RequestGET /cookieconsentpub/v1/geo/location HTTP/2.0
host: geolocation.onetrust.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
accept: application/json
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
origin: https://discord.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: application/json
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: GET, OPTIONS
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8d327a0f994abecd-LHR
content-encoding: gzip
-
OPTIONShttps://a.nel.cloudflare.com/report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2chrome.exeRemote address:35.190.80.1:443RequestOPTIONS /report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2 HTTP/2.0
host: a.nel.cloudflare.com
origin: https://discord.com
access-control-request-method: POST
access-control-request-headers: content-type
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
POSThttps://a.nel.cloudflare.com/report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2chrome.exeRemote address:35.190.80.1:443RequestPOST /report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2 HTTP/2.0
host: a.nel.cloudflare.com
content-length: 439
content-type: application/reports+json
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:172.217.16.238:443RequestGET /iframe_api HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:172.217.16.238:443RequestGET /s/player/815edc2a/www-widgetapi.vflset/www-widgetapi.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=57Pol8bJE1Q
cookie: VISITOR_INFO1_LIVE=z-8mef9PtKQ
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgOQ%3D%3D
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/DiscordSetup.exechrome.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/DiscordSetup.exe HTTP/2.0
host: stable.dl2.discordapp.net
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
referer: https://discord.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
date: Tue, 15 Oct 2024 19:21:05 GMT
x-goog-generation: 1727971964510876
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 119196032
content-type: application/x-msdownload
x-goog-hash: md5=I18qtfqodl9UJyQ3HzqvyA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: bfbaf4e9-82f3-46e4-ace3-73e55ea88cc6
x-xss-protection: 0
x-frame-options: SAMEORIGIN
age: 3223
x-content-type-options: nosniff
content-length: 119196032
etag: "235f2ab5faa8765f542724371f3aafc8"
x-cache-status: lhr-a40b88df; hit, lhr;uncacheable
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
Remote address:8.8.8.8:53Requestupdate.googleapis.comIN AResponseupdate.googleapis.comIN A216.58.201.99
-
Remote address:8.8.8.8:53Requestupdate.googleapis.comIN UnknownResponse
-
Remote address:8.8.8.8:53Requestupdates.discord.comIN AResponseupdates.discord.comIN A162.159.135.232updates.discord.comIN A162.159.138.232updates.discord.comIN A162.159.136.232updates.discord.comIN A162.159.128.233updates.discord.comIN A162.159.137.232
-
Remote address:8.8.8.8:53Requeststable.dl2.discordapp.netIN AResponsestable.dl2.discordapp.netIN A34.126.226.51
-
Remote address:8.8.8.8:53Requeststable.dl2.discordapp.netIN A
-
Remote address:8.8.8.8:53Requeststable.dl2.discordapp.netIN A
-
GEThttps://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000Discord.exeRemote address:162.159.135.232:443RequestGET /distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000 HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: updates.discord.com
ResponseHTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 8d327c2a8c78cd42-LHR
CF-Cache-Status: HIT
Age: 141
Cache-Control: public, max-age=14400
Expires: Wed, 16 Oct 2024 00:16:07 GMT
Last-Modified: Tue, 15 Oct 2024 20:13:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=msEYNXLO8hPhylmVsV%2FudtPYInN1zS8K1X9CANc%2FRL%2BK7Jyjb9nYYIYXxpc7FvFSVIgdJKLNZRIKMuKqTN1QsDkJ6AnR45PYTZQaYygb%2FJnl2sR%2BYOivdIGdSbjBJo%2FGwJ45P80%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: _cfuvid=if_ee69DMiiK7qlreKhH7fyWbMwOGsTvT.7rx8xv69w-1729023367025-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
-
GEThttps://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000Discord.exeRemote address:162.159.135.232:443RequestGET /distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000 HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: updates.discord.com
ResponseHTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 8d327c4ee9e3cd42-LHR
CF-Cache-Status: HIT
Age: 232
Cache-Control: public, max-age=14400
Expires: Wed, 16 Oct 2024 00:16:12 GMT
Last-Modified: Tue, 15 Oct 2024 20:12:20 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xXWPlnc75Gz7%2FscUJRJHUDJy%2B6KjlvuEr2%2Fo2zMzA3fyC5RYIOm0YtPEO4CBTMznqV62G%2BFPp6J1FO%2FmJe90jwCmFpZPe8Qb03l47Ip9CsMT7PldC57VcgXsT81OW%2FUGtmz4RA4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: _cfuvid=T7CeoNpj0GGs.Z69E8uptCXWgKHnjwC9CDsUApy0jBU-1729023372851-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
-
GEThttps://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000Discord.exeRemote address:162.159.135.232:443RequestGET /distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000 HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: updates.discord.com
ResponseHTTP/1.1 200 OK
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 8d327cb4e82ecd42-LHR
CF-Cache-Status: HIT
Age: 163
Cache-Control: public, max-age=14400
Expires: Wed, 16 Oct 2024 00:16:29 GMT
Last-Modified: Tue, 15 Oct 2024 20:13:46 GMT
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
X-Content-Type-Options: nosniff
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ty4f8VmVbutCMqFWJhFRtTD4SyCu2w61VECMN7RJB%2BSq6QR%2FfHeVt9%2B%2B4Xg2hH59UCztO3as69vhCaISRrLPl%2FjJ2NfoOUOM%2Bx9ZVvjtleBT74QFtcZuQab1ELWAIUmgz6k5Nnc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Set-Cookie: _cfuvid=BV_4wkK21dXfPWm_h4Np4yNK8bOFsCDZpLh3OpCOuh8-1729023389167-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
Server: cloudflare
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
-
Remote address:8.8.8.8:53Request99.201.58.216.in-addr.arpaIN PTRResponse99.201.58.216.in-addr.arpaIN PTRlhr48s48-in-f31e100net99.201.58.216.in-addr.arpaIN PTRprg03s02-in-f3�G99.201.58.216.in-addr.arpaIN PTRprg03s02-in-f99�G
-
Remote address:8.8.8.8:53Request233.134.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestctldl.windowsupdate.comIN AResponsectldl.windowsupdate.comIN CNAMEctldl.windowsupdate.com.delivery.microsoft.comctldl.windowsupdate.com.delivery.microsoft.comIN CNAMEwu-b-net.trafficmanager.netwu-b-net.trafficmanager.netIN CNAMEdownload.windowsupdate.com.edgesuite.netdownload.windowsupdate.com.edgesuite.netIN CNAMEa767.dspw65.akamai.neta767.dspw65.akamai.netIN A2.18.190.133a767.dspw65.akamai.netIN A2.18.190.134
-
Remote address:8.8.8.8:53Requestdiscordapp.comIN AResponsediscordapp.comIN A162.159.129.233discordapp.comIN A162.159.130.233discordapp.comIN A162.159.133.233discordapp.comIN A162.159.135.233discordapp.comIN A162.159.134.233
-
Remote address:8.8.8.8:53Request233.129.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request234.134.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request45.224.186.35.in-addr.arpaIN PTRResponse45.224.186.35.in-addr.arpaIN PTR4522418635bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request253.192.214.35.in-addr.arpaIN PTRResponse253.192.214.35.in-addr.arpaIN PTR25319221435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestplay.google.comIN AResponseplay.google.comIN A216.58.201.110
-
Remote address:8.8.8.8:53Request157.34.239.216.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requeststatic.doubleclick.netIN AResponsestatic.doubleclick.netIN A142.250.200.6
-
Remote address:8.8.8.8:53Requestfp.msedge.netIN AResponsefp.msedge.netIN CNAME1.perf.msedge.net1.perf.msedge.netIN CNAMEa-0019.a-msedge.neta-0019.a-msedge.netIN CNAMEa-0019.a.dns.azurefd.neta-0019.a.dns.azurefd.netIN CNAMEa-0019.standard.a-msedge.neta-0019.standard.a-msedge.netIN A204.79.197.222
-
Remote address:8.8.8.8:53Requesttse1.mm.bing.netIN AResponsetse1.mm.bing.netIN CNAMEmm-mm.bing.net.trafficmanager.netmm-mm.bing.net.trafficmanager.netIN CNAMEax-0001.ax-msedge.netax-0001.ax-msedge.netIN A150.171.27.10ax-0001.ax-msedge.netIN A150.171.28.10
-
Remote address:8.8.8.8:53Request232.135.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestdl.discordapp.netIN AResponsedl.discordapp.netIN A104.18.48.115dl.discordapp.netIN A104.18.52.172
-
Remote address:8.8.8.8:53Requestdiscordapp.comIN AResponsediscordapp.comIN A162.159.135.233discordapp.comIN A162.159.129.233discordapp.comIN A162.159.134.233discordapp.comIN A162.159.130.233discordapp.comIN A162.159.133.233
-
Remote address:8.8.8.8:53Requestlogin.live.comIN AResponselogin.live.comIN CNAMElogin.msa.msidentity.comlogin.msa.msidentity.comIN CNAMEwww.tm.lg.prod.aadmsa.trafficmanager.netwww.tm.lg.prod.aadmsa.trafficmanager.netIN CNAMEprdv4a.aadg.msidentity.comprdv4a.aadg.msidentity.comIN CNAMEwww.tm.v4.a.prd.aadg.trafficmanager.netwww.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.67www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.73www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.71www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.2www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.31.71www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.0www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.159.64
-
Remote address:8.8.8.8:53Request67.31.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request234.133.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request33.117.19.2.in-addr.arpaIN PTRResponse33.117.19.2.in-addr.arpaIN PTRa2-19-117-33deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request235.129.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.200.36
-
Remote address:8.8.8.8:53Request226.212.58.216.in-addr.arpaIN PTRResponse226.212.58.216.in-addr.arpaIN PTRlhr25s28-in-f21e100net226.212.58.216.in-addr.arpaIN PTRams16s22-in-f2�H226.212.58.216.in-addr.arpaIN PTRams16s22-in-f226�H
-
Remote address:8.8.8.8:53Requesti.ytimg.comIN AResponsei.ytimg.comIN A172.217.169.22i.ytimg.comIN A142.250.200.22i.ytimg.comIN A142.250.179.246i.ytimg.comIN A142.250.180.22i.ytimg.comIN A216.58.213.22i.ytimg.comIN A172.217.169.54i.ytimg.comIN A216.58.212.214i.ytimg.comIN A142.250.187.214i.ytimg.comIN A172.217.169.86i.ytimg.comIN A142.250.178.22i.ytimg.comIN A142.250.200.54i.ytimg.comIN A216.58.201.118i.ytimg.comIN A216.58.204.86i.ytimg.comIN A216.58.212.246i.ytimg.comIN A142.250.187.246i.ytimg.comIN A172.217.16.246
-
Remote address:8.8.8.8:53Requestr.bing.comIN AResponser.bing.comIN CNAMEp-static.bing.trafficmanager.netp-static.bing.trafficmanager.netIN CNAMEr.bing.com.edgekey.netr.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A2.18.66.59e86303.dscx.akamaiedge.netIN A2.18.66.64e86303.dscx.akamaiedge.netIN A2.18.66.43e86303.dscx.akamaiedge.netIN A2.18.66.48e86303.dscx.akamaiedge.netIN A104.86.110.115e86303.dscx.akamaiedge.netIN A104.86.110.129e86303.dscx.akamaiedge.netIN A2.18.66.67e86303.dscx.akamaiedge.netIN A104.86.110.123e86303.dscx.akamaiedge.netIN A2.18.66.42
-
Remote address:8.8.8.8:53Request88.156.103.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.comiris-de-prod-azsc-v2-neu-b.northeurope.cloudapp.azure.comIN A20.223.36.55
-
Remote address:8.8.8.8:53Request123.35.104.34.in-addr.arpaIN PTRResponse123.35.104.34.in-addr.arpaIN PTR1233510434bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request115.48.18.104.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestconfig.edge.skype.comIN AResponseconfig.edge.skype.comIN CNAMEconfig.edge.skype.com.trafficmanager.netconfig.edge.skype.com.trafficmanager.netIN CNAMEl-0007.config.skype.coml-0007.config.skype.comIN CNAMEconfig-edge-skype.l-0007.l-msedge.netconfig-edge-skype.l-0007.l-msedge.netIN CNAMEl-0007.l-msedge.netl-0007.l-msedge.netIN A13.107.42.16
-
Remote address:8.8.8.8:53Requestdiscord.comIN AResponsediscord.comIN A162.159.137.232discord.comIN A162.159.138.232discord.comIN A162.159.135.232discord.comIN A162.159.136.232discord.comIN A162.159.128.233
-
Remote address:8.8.8.8:53Requestbeacons.gcp.gvt2.comIN AResponsebeacons.gcp.gvt2.comIN CNAMEbeacons-handoff.gcp.gvt2.combeacons-handoff.gcp.gvt2.comIN A172.217.169.3
-
Remote address:8.8.8.8:53Request24.224.186.35.in-addr.arpaIN PTRResponse24.224.186.35.in-addr.arpaIN PTR2422418635bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request232.129.159.162.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request71.224.214.35.in-addr.arpaIN PTRResponse71.224.214.35.in-addr.arpaIN PTR7122421435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestfonts.gstatic.comIN AResponsefonts.gstatic.comIN A216.58.204.67
-
Remote address:8.8.8.8:53Requestconsent.google.comIN AResponseconsent.google.comIN A216.58.201.110
-
Remote address:8.8.8.8:53Requestconsent.google.comIN AResponseconsent.google.comIN A216.58.201.110
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_voice/1/full.distroDiscord.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_voice/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: stable.dl2.discordapp.net
ResponseHTTP/1.1 200 OK
date: Tue, 15 Oct 2024 19:31:12 GMT
x-goog-generation: 1727971904929080
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 9812837
content-type: application/octet-stream
x-goog-hash: md5=6rPzJj2TISrB2vOlVdSHRA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: 6e43c877-b1ae-4ab6-aa6e-3ae57a98d714
x-xss-protection: 0
x-frame-options: SAMEORIGIN
age: 2697
x-content-type-options: nosniff
content-length: 9812837
etag: "eab3f3263d93212ac1daf3a555d48744"
x-cache-status: lhr-a40b88df; hit, lhr;uncacheable
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_utils/1/full.distroDiscord.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_utils/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: stable.dl2.discordapp.net
ResponseHTTP/1.1 200 OK
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 544191
x-goog-hash: md5=sDSEdMeAkdMXFVXqRa+Q8A==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: 3b0a9067-74cf-42ab-b26f-df212fb63ecc
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 544191
date: Tue, 15 Oct 2024 19:27:07 GMT
age: 2942
last-modified: Thu, 03 Oct 2024 16:11:29 GMT
etag: "b0348474c78091d3171555ea45af90f0"
content-type: application/octet-stream
x-cache-status: lhr;hit
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_desktop_core/1/full.distroDiscord.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_desktop_core/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: stable.dl2.discordapp.net
ResponseHTTP/1.1 200 OK
date: Tue, 15 Oct 2024 19:28:03 GMT
x-goog-generation: 1727971796005447
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1529236
content-type: application/octet-stream
x-goog-hash: md5=P+4olPq6EeUWhkFMyvcMSg==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: aafc961e-3d8a-4655-9f0e-5c711160446f
x-xss-protection: 0
x-frame-options: SAMEORIGIN
age: 2886
x-content-type-options: nosniff
content-length: 1529236
etag: "3fee2894faba11e51686414ccaf70c4a"
x-cache-status: lhr-a40b88df; hit, lhr;uncacheable
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_erlpack/1/full.distroDiscord.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_erlpack/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: stable.dl2.discordapp.net
ResponseHTTP/1.1 200 OK
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 236138
x-goog-hash: md5=oNiTJJvAz/qtu3j5/fkzBQ==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: e8b8d0a5-b514-49a6-9ece-6bc68c3e8159
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-length: 236138
date: Tue, 15 Oct 2024 19:28:05 GMT
age: 2884
last-modified: Thu, 03 Oct 2024 16:10:11 GMT
etag: "a0d893249bc0cffaadbb78f9fdf93305"
content-type: application/octet-stream
x-cache-status: lhr;hit
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
GEThttps://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_spellcheck/1/full.distroDiscord.exeRemote address:34.126.226.51:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_spellcheck/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: stable.dl2.discordapp.net
ResponseHTTP/1.1 200 OK
date: Tue, 15 Oct 2024 19:28:09 GMT
x-goog-generation: 1727971881549695
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1656127
content-type: application/octet-stream
x-goog-hash: md5=ZsiIfHoZyRekRU7NP9IhfA==
x-goog-storage-class: STANDARD
accept-ranges: bytes
server: Google-Edge-Cache
x-request-id: 31679dea-5188-492b-ad42-8e0b7221d953
x-xss-protection: 0
x-frame-options: SAMEORIGIN
age: 2880
x-content-type-options: nosniff
content-length: 1656127
etag: "66c8887c7a19c917a4454ecd3fd2217c"
x-cache-status: lhr-a40b88df; hit, lhr;uncacheable
x-release-channel: stable
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=3600
-
Remote address:8.8.8.8:53Requestdiscordapp.comIN AResponsediscordapp.comIN A162.159.134.233discordapp.comIN A162.159.129.233discordapp.comIN A162.159.135.233discordapp.comIN A162.159.130.233discordapp.comIN A162.159.133.233
-
Remote address:8.8.8.8:53Requestdiscordapp.comIN UnknownResponsediscordapp.comIN Unknownh3h2���颟�颟�颟�颟��GE� A� ag�u� ���s�tg��|�y�m���B�cloudflare-ech.com
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_media/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_media/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 303941
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:22 GMT
last-modified: Thu, 03 Oct 2024 16:10:42 GMT
etag: "ba200d689e6496e1032c4f4b63c5e465"
x-goog-generation: 1727971842904604
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 303941
x-goog-hash: crc32c=qzDzxA==
x-goog-hash: md5=uiANaJ5kluEDLE9LY8XkZQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljutVuL0P1rA5iBd02ZA4eil1yTmkEGhk7A4lhm4iU3CnM_v62d_bTcV9mHAP7orJS4WiIa-oo2Z7Q
CF-Cache-Status: HIT
Age: 2934
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327c8b999371a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_zstd/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_zstd/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 395729
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:22 GMT
last-modified: Thu, 03 Oct 2024 16:11:52 GMT
etag: "bafb752579e230f712e213c6f4a5257d"
x-goog-generation: 1727971912613205
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 395729
x-goog-hash: crc32c=gqaoSg==
x-goog-hash: md5=uvt1JXniMPcS4hPG9KUlfQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljv5EQyIa-zGRdbeBxkFnhKfyVL6W9F4U42_pE1kSBceYzpv-MSngsnbkebyln8eLV4Oqag
CF-Cache-Status: HIT
Age: 3038
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327c8ede2371a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_game_utils/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_game_utils/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 416489
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:23 GMT
last-modified: Thu, 03 Oct 2024 16:10:19 GMT
etag: "af3b38b7a1b08877544d9c16d8bcb03e"
x-goog-generation: 1727971819119250
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 416489
x-goog-hash: crc32c=9tMjYw==
x-goog-hash: md5=rzs4t6GwiHdUTZwW2LywPg==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljvEEZQxXaRlegTxjTFZ5kWT8jIfr-0GLfme4plKbYI3kv2lQ0-rxGaHGZLbr96Rn_kI8ik
CF-Cache-Status: HIT
Age: 3130
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327c90b8a471a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_overlay2/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_overlay2/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 320220
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:23 GMT
last-modified: Thu, 03 Oct 2024 16:10:58 GMT
etag: "4df73f382f2d605162b0e3ea50d1ca9e"
x-goog-generation: 1727971858496407
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 320220
x-goog-hash: crc32c=hldwRA==
x-goog-hash: md5=Tfc/OC8tYFFisOPqUNHKng==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljtaoRS6rI3oohPzhxhBuoaWsLNJ6rLn1JNfn84Nx0INqiF02yvum1Zh99YnuogcNfU0vkA
CF-Cache-Status: HIT
Age: 1782
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327c91da4e71a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_krisp/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_krisp/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 17496617
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:23 GMT
last-modified: Thu, 03 Oct 2024 16:10:35 GMT
etag: "a7c99d4d6057ce15220db45b1eb3801d"
x-goog-generation: 1727971835117001
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 17496617
x-goog-hash: crc32c=HHLV+g==
x-goog-hash: md5=p8mdTWBXzhUiDbRbHrOAHQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljvgjzaSfqcQ2PB5QtSek-njqtkXsde37AN16Qd9Cl2xCPGmezUi9QxMSnXVC_ooNykZQNA
CF-Cache-Status: HIT
Age: 3312
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327c933c3871a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_cloudsync/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_cloudsync/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 1681369
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:28 GMT
last-modified: Thu, 03 Oct 2024 16:09:48 GMT
etag: "b0649a3527db4732e09180b472f2716d"
x-goog-generation: 1727971788288811
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 1681369
x-goog-hash: crc32c=4hveVg==
x-goog-hash: md5=sGSaNSfbRzLgkYC0cvJxbQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljv5BTdx9irTIjrCcBL-ya5Y2sBWr5hr5OYmTsExch2pqYFCDY7_Rl7rFAQ5T7Q1x6bdpYU
CF-Cache-Status: HIT
Age: 3319
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327cb1bd6971a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_rpc/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_rpc/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 31982
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:29 GMT
last-modified: Thu, 03 Oct 2024 16:11:06 GMT
etag: "adeff9cb6a1fff59350876bf3c84e651"
x-goog-generation: 1727971866111284
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 31982
x-goog-hash: crc32c=olmc9A==
x-goog-hash: md5=re/5y2of/1k1CHa/PITmUQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljvIjtS0DBrkmVKXzj46hm5T6w3vfjCg172o-6m5--Zdv_wDRsE1kBU7BcijE1Xi_neEA5Q
CF-Cache-Status: HIT
Age: 1441
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327cb9483571a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_modules/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_modules/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 2627274
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:54 GMT
last-modified: Thu, 03 Oct 2024 16:10:50 GMT
etag: "5725479b074ee67d37fd6d79ae5d3661"
x-goog-generation: 1727971850845238
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 2627274
x-goog-hash: crc32c=4AdKIw==
x-goog-hash: md5=VyVHmwdO5n03/W15rl02YQ==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8lju5k3WuNlqr2QNJ6nLD67_e4wKlGcRlHnDCoUsSpUxM2V7pFl418LDAyryw7k1eBkQxCVo
CF-Cache-Status: HIT
Age: 1649
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327d53d95171a5-LHR
-
GEThttps://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_dispatch/1/full.distroDiscord.exeRemote address:104.18.48.115:443RequestGET /distro/app/stable/win/x64/1.0.9166/discord_dispatch/1/full.distro HTTP/1.1
accept: */*
user-agent: Discord-Updater/1
accept-encoding: gzip
host: dl.discordapp.net
ResponseHTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 4022738
Connection: keep-alive
Cache-Control: public, max-age=3600
expires: Tue, 15 Oct 2024 21:16:55 GMT
last-modified: Thu, 03 Oct 2024 16:10:03 GMT
etag: "9d3bb3164875724ef373469436cce547"
x-goog-generation: 1727971803777996
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4022738
x-goog-hash: crc32c=Wibmng==
x-goog-hash: md5=nTuzFkh1ck7zc0aUNszlRw==
x-goog-storage-class: STANDARD
x-guploader-uploadid: AD-8ljsG5rGN_WFkqf72VurCuC3RO5SkYJphy6jbk8Hb8jwW2KOrfrX-lmKSDJdJmL2SwULE5Dk
CF-Cache-Status: HIT
Age: 559
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8d327d58d82e71a5-LHR
-
Remote address:162.159.129.233:443RequestGET /handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306 HTTP/2.0
host: discordapp.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 301
content-type: text/plain;charset=UTF-8
content-length: 0
location: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
strict-transport-security: max-age=31536000; includeSubDomains; preload
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
x-xss-protection: 1; mode=block
set-cookie: __cf_bm=PukSrQ86uiZjS_EwNTr0ru5nMCrqW28nmIOy1e9Nx58-1729023392-1.0.1.1-CpTVfPhVwIXabMcHtl6QfC0wXYfG84PLUlIVeSbegVSGnRX6G9daMaGsTQsSwJ5Qn7kPFWbycponWnyV3OU2SA; path=/; expires=Tue, 15-Oct-24 20:46:32 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0%2F67w3L2XaTk5dB5HoIGsqkJYlpBjwKuzdWRtgKXKz3HYxPMomw2MmSeMz9%2FHwFzIcqUSJ7nr10Xnl5W3xi1xnbZDgKHvk9Jo9523OeuZYtMqkDIpzX04JN8sOk7T49h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: _cfuvid=xq3r2gRkS7PKOPlcagL0pIUvy2Zk7tWirVawo7qo3vI-1729023392557-0.0.1.1-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 8d327ccb5db2bf0d-LHR
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306 HTTP/2.0
host: discord.com
dnt: 1
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
sec-ch-ua-mobile: ?0
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
ResponseHTTP/2.0 200
content-type: text/html
cf-ray: 8d327ccc8d92beb6-LHR
cf-cache-status: HIT
cache-control: private
last-modified: Tue, 15 Oct 2024 18:37:31 GMT
set-cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c; Expires=Sun, 14 Oct 2029 20:16:32 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-MTg3LDIyNyw0LDI0MCw5NCwyNTAsMTg3LDIzOA==' blob: https://cdn.discordapp.com/animations/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://checkout.paypal.com https://c.paypal.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; style-src 'self' 'unsafe-inline' https://cdn.discordapp.com https://*.hcaptcha.com https://hcaptcha.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; img-src 'self' blob: data: https://*.discordapp.net https://*.discordapp.com https://*.discord.com https://i.scdn.co https://i.ytimg.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com https://*.youtube.com https://*.giphy.com https://static-cdn.jtvnw.net https://pbs.twimg.com https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com https://*.stats.paypal.com https://api.cash.app; font-src 'self' https://fonts.gstatic.com https://cash-f.squarecdn.com https://static.discord.com https://static-edge.discord.com; connect-src 'self' https://status.discordapp.com https://status.discord.com https://support.discordapp.com https://support.discord.com https://discordapp.com https://discord.com https://discord-attachments-uploads-prd.storage.googleapis.com https://cdn.discordapp.com https://media.discordapp.net https://images-ext-1.discordapp.net https://images-ext-2.discordapp.net https://router.discordapp.net wss://*.discord.gg https://best.discord.media https://latency.discord.media wss://*.discord.media wss://dealer.spotify.com https://api.spotify.com https://music.amazon.com/embed/oembed https://*.sentry.io https://api.twitch.tv https://api.stripe.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.googleapis.com https://*.algolianet.com https://*.hcaptcha.com https://hcaptcha.com https://*.algolia.net ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' blob: disclip: https://*.discordapp.net https://*.discord.com https://*.discordapp.com https://*.youtube.com https://streamable.com https://vid.me https://twitter.com https://oddshot.akamaized.net https://*.giphy.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com; frame-src https://discordapp.com/domain-migration discord: https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://hooks.stripe.com https://checkout.paypal.com https://c.paypal.com https://assets.braintreegateway.com https://checkoutshopper-live.adyen.com https://kit.cash.app https://player.twitch.tv https://clips.twitch.tv/embed https://player.vimeo.com https://www.youtube.com/embed/ https://www.tiktok.com/player/ https://music.amazon.com/embed/ https://music.amazon.co.uk/embed/ https://music.amazon.de/embed/ https://music.amazon.co.jp/embed/ https://music.amazon.es/embed/ https://music.amazon.fr/embed/ https://music.amazon.it/embed/ https://music.amazon.com.au/embed/ https://music.amazon.in/embed/ https://music.amazon.ca/embed/ https://music.amazon.com.mx/embed/ https://music.amazon.com.br/embed/ https://www.youtube.com/s/player/ https://twitter.com/i/videos/ https://www.funimation.com/player/ https://www.redditmedia.com/mediaembed/ https://open.spotify.com/embed/ https://w.soundcloud.com/player/ https://audius.co/embed/ https://*.watchanimeattheoffice.com https://sessionshare.sp-int.playstation.com/ https://session-share.playstation.com/ https://localhost:* https://*.discordsays.com https://discordappcom.cloudflareaccess.com/; child-src 'self' blob: https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com; prefetch-src 'self' https://cdn.discordapp.com/assets/;
cross-origin-opener-policy: same-origin-allow-popups
permissions-policy: interest-cohort=()
x-build-id: 5f5f9beb8122a696ca66ad4bcca8855973fcecea
x-content-type-options: nosniff
x-frame-options: DENY
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDmH9qQIwll2w3CvU9DFZusr7cYBh5wxdsE50EGy84zcoOTjQDH9UO7b1J8bzoGCMWYBAwQiZZxwEuLLDzuV%2FScCvw8c25v4mj5LsjSNsm8Y5sAstdxTiW5hT2Yi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6; Expires=Sun, 14 Oct 2029 20:16:32 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax
set-cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
set-cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/12633.3ae024f1211a5090fa4a.css HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/css
cf-ray: 8d327ccd7e92beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"46783641ee38d2d60cb363722a178a31"
last-modified: Mon, 14 Oct 2024 17:20:53 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D%2BrYymw7Bkzxp4lONdYE2uxIZ5x%2FPnr5xhsZL7S%2FYYUb1Uhio%2Fkr3M6cp3IgYgs1ew2ZShgUQmXk1%2FLDNq4dSm%2Bqf7D9SrcQNje7N%2FNVu6ptANnq5uNwHXhy6DQK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/web.6d7443c1284c2ada8d90.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/javascript
cf-ray: 8d327ccd7e96beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"7f44a64d2219ae548bebb4d72011de00"
last-modified: Tue, 15 Oct 2024 18:37:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jrbYCxvqZQ5Do6IPkTSBgnxwQ5iIICA61aaVb1Bua6h%2FebHHHASf2FyzdLcRjmUK5SlpQHEIJMVQMBLga6L5dYy9y5PCza2P3ZwEfytR4JNy3DLNvkYRKWS8kTe4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/sentry.c32ac87cbc0d88b302d4.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/javascript
cf-ray: 8d327ccd7e9cbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"55ef37aa243936a57bf2b4d7953a23b4"
last-modified: Tue, 15 Oct 2024 18:37:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JkL0E9KJ3u6l0yYtkpV5RJBOXncfrVl0N4RFFrMLEOpW4Qq68MX4BofxmQrQNpbu9RWSamlvOPtwR7063VCYWUbaVDq5oZFHfuBAEFANsUm27ARFZrhGmDZwdOwt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 302
content-length: 0
location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js?
cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public
access-control-allow-origin: *
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNw87Cz6jrfVPR%2BBx8uykAPAABsWnR6hjkf1QBIqSnl9FeElQ0bm36xoY4%2BSVEGHEJF0YLyGm6JzTO2A%2BDcMy9coKhxKWTiEHGZk0RFG59y1jKgTr1ybeMNCkndl"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 8d327cd9eb5dbeb6-LHR
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/ac625b77a0bab0ee72df.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: same-origin
sec-fetch-dest: worker
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript
cf-ray: 8d327cd9fb7fbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"be6064ff8c1d480afb80fe48762a06c1"
last-modified: Fri, 28 Jun 2024 00:43:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dUv4oRhjNW1K16sNr8ewG8kRi3XK%2Ft2l9NYepK%2FNWCOgB4Ok0Uo5MOXPVDpQPoB2kq9JDQ38bqnqt8aB8P%2BQyJEFkdMk0sYgM1NAvZgaS3cK%2FvpEzvAKKJlZMa2%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/29a63f12209c956d9204.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: same-origin
sec-fetch-dest: worker
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript
cf-ray: 8d327cd9fb91beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"390a7ab1f964aa8cb1b87dd13732c3bc"
last-modified: Tue, 30 Jul 2024 22:07:30 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BntaO59elQTTeypZ16iablXt%2BavOyUIWXuLChoEfQAyTvr59InLatUUBwquHAY8qXEg9KSp5d72flrq4z0bDw4RRCyLn%2F067ZhLywZ9WYedg2i2I7RVTTxqYDhK4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/3a61f2ace66bc5a08999.css HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/javascript
cf-ray: 8d327cda3bfebeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"453f9e372778c9fa39e477d762a7b07f"
last-modified: Wed, 25 Sep 2024 03:17:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rs%2BX%2FUToFTvgnvSwp8%2FQLJtQ3ZHx0VEKFYlhTVkuwW0%2FO8hEUCRRT6yll2Ax3JUhisFlxNwW2YoC02J4EW17MYfvJYucJU4cKzhWpnQa1auGDoG8Ts22jvFrjumo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/5bea9214aec58f9e42cd.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/css
cf-ray: 8d327cda4c05beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"20ddaa519e404695d0657d3868d2701f"
last-modified: Tue, 25 Jun 2024 20:41:32 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tTlpN77yhzXu2BXza0aXkvxXEnaYUYcobzV2om2gzIhDzoyGiueJYCFgs6ssLejnv%2Fmdx7WttoamVW1dr3fL0AIXZrrFLUpVRFdTv6KlG02MA3vouDrNAJ2TJT8c"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/2917679ca8a08c390036.css HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: text/css,*/*;q=0.1
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/javascript
cf-ray: 8d327cda4c08beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"f75b4bd80e29df3f25dbd1119ccd02b1"
last-modified: Tue, 01 Oct 2024 18:02:36 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5jqrH7xrmiiPChp1JnSlk%2BIL58EHd8LcoJlOpgwQT9BDX9A0WzWulW0U2yi7kAv6tKG8NoohAj%2Bi7pZdDQrEswu2tSISvW1sdH1S0ypJSp8XipDercOguq1x0fRr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/48ef1aad3427d3af5bed.js HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: text/css
cf-ray: 8d327cda3bfbbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"7faeb597d008e018f9ca02bbb3b7d171"
last-modified: Wed, 07 Aug 2024 00:10:13 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VA4SR7IUfNY8HkWfWmhunu4oZ%2FmvjW1HkLu6rZzocE%2BxjOME2JONpNRJkeZohKz3Yi7qXuUa1Kn5dMHX%2BWuK30VnxosIXNCD5AZTbR6QXfil2VPvb%2FCoy3Q4mk%2BS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/2597d11c1e039607373e.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda6c38beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"81084ff5a27b6e6ff487e479c37d1660"
last-modified: Sun, 02 Oct 2022 01:17:42 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2j3mPD6iOjRgHo7jE3imv3SwrzeIL43R0abvvVm1wS1IAR6Zea0%2FEr3KMtBBFAO%2BBJA1VYMJ3OuBjKC0%2B6KP4I4cGmr%2BQ323Uu%2BPXggX123nG4lo8Fb8mbpZb6ZT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/a5ec2b74d0cc337d4481.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda5c2abeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"e1349377226366f95f85ab9eac4586d3"
last-modified: Wed, 05 Jun 2024 19:27:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MMFQYmiX%2B0SKwwRXl01biUZOSGdnO9eZDKyAnE5KkDrJQF%2BVeGxknGMiPdoui51tsvMyd%2B1kIyueByH4U%2BvqqtwwfO6Vvq8OUuu%2BAcJgBvzR%2Bt2UTDJxxQ4eTAA2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/5430e9964fe8364e084d.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda5c2bbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"b1d4c5e276e3aaa8ec41e6014dd572b2"
last-modified: Sun, 02 Oct 2022 01:17:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFogMgn9Ic%2B9dUY%2Fj3NtkSL%2B50sWWhpCDYcRSf8xKgFG57JGUxoTr7JFrMKQGK9hmp7%2Bv2LM%2BkB9VmpKs9HbuvlDSUXXipvEuAJx1aZNnEG93X%2FxSB1HMoOg71Jc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/ab03f7053698d417194c.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda6c30beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"e843c51c0eec3801b70cae5c45ad343f"
last-modified: Sun, 02 Oct 2022 01:17:45 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Dx9nhcDsRYbTycbeIc2HrOigJFxgHf6ePQiPmiSSFRZCMMJclRKpW1IDJd8fhqXLGB1JX9slkO%2BKInChDfnDIUPKBXzoXYzbAyPE6qPTTk%2BK1WmxaD2rO5qU7Opi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/410a2166a48c9e482e2a.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda6c34beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"c6ce0010471b65c0faeda6c53ab297bd"
last-modified: Sun, 02 Oct 2022 01:17:48 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D54CInBrEevnI2MCMyp%2BA2Wg4xSeWVmCBDlrkMYOH2aGaf2q%2FBFg%2BkBPw8rseBw3uKQn4%2BDeSEXBtTMPdn4y9%2Bpr4mo%2Fzm%2BiuJyCOzQr%2FTMylmBoZM%2FvKndXZP8Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/9017b7062734e72bb476.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda6c35beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"70275fe3104cf1d3388586ad8ffd478e"
last-modified: Sun, 02 Oct 2022 01:17:52 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U0hxEVAk7XK4W00fS%2FHn2ygQbHWUgytTOoD%2BwKhkzxs46M4z2hJWowBDzrZm0cYa%2FPeF%2Bl8FL7rySC%2BcVfqIyI5y6GB%2FBtYQ1HuLmdJTRWJzAvFmR%2F5xAdEwFC9Z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/af5116b1db004acbdb8b.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda5c28beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"72a8b168ad2c7eea7b2559b5690c7695"
last-modified: Wed, 05 Jun 2024 19:27:56 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mQdFjS3pA6VpyiOSQ6FONVaIELaQ%2BY3LJKFhqEXgsgz7tfvG3KOQ4FDlYFxeWQg2JwTEUr1cYxh%2FQlrpgApR2Dj1yGTigN%2FYLGMXWNkZEMnflVGAqnrq%2F4gRpdg0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/ba88bbd1342d3f000e33.svg HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/svg+xml
cf-ray: 8d327cda6c2dbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"7d883ba72b5dbc0229f5d1980205ee34"
last-modified: Sun, 02 Oct 2022 01:17:54 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5MHckaLShK5sItwaSS9XPZ2FMWd4GvmrlhIXNyKTf1bm6Q1uzu%2B8ZWN4ZA9ZPhgPO%2BgFvVDCKBwnIc%2FNowhAbev27%2BMysAT4ZyKe%2BAfMxm9KaQc78LH%2BOCENhqlJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js? HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript; charset=UTF-8
cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFrWWmpTaFUdMlD8L1Y%2FiRIKDBGGVJGLzKDZV4Q2lsFkj9My4X34JUN5MIFl4KTIRgdR8XCF4DTVnz1MF%2FMWew5kFxiO9HDapCjm7KW6xMmfgts6aT6SvnxYb1WC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 8d327cdabca2beb6-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/c1b53be672aac192a996.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/assets/12633.3ae024f1211a5090fa4a.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 43364
cf-ray: 8d327cdadcddbeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "281bba49537cf936d1a0df10fb719f63"
last-modified: Wed, 05 Jun 2024 19:27:59 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0IyzteTbgfvV2JxfzX7kFCzn2mqCNaDjAYRm%2BLfM4bxNHHic7uGL80NwhTzSlzDlClwce8o%2Bo4DN53pbEJUjVLRTTUzxrEmaFwZL2mArjNfhu%2BR69JEif9l%2FtVO1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/8234e0a75aa9afb205bd.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript
cf-ray: 8d327cdaecf0beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"d0c788b157ff96a2dd902c97bfc889f6"
last-modified: Fri, 28 Jun 2024 00:43:12 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fTDM5kqaJran2TNCIimcj5lumhTSDZUVQrTTCmHWE1LnyGxdqTHWyLpTmAc0HsSdTJXn7VZE3EUpn3dOqjQSZS2NG9PozTsoAR0jadP2B0%2Bm%2F6noM4EK3Cwie4Pa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/b21c5111a12372139409.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 139388
cf-ray: 8d327cdadce2beb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "db985aaa3c64f10506d96d876e350d47"
last-modified: Fri, 06 Jan 2023 01:15:23 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JfDbAHxDVW%2FJ4y39%2FuVnVtaM56DXVSyCykylSLuyPfxVhbUcLdafSS1gwS759IcWI2FezueFtfCZ50YwBgMjlAjEC1LYymGYVn6nk1PD%2FScDHmFUBqz7flb%2Fk6MG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/8bd8143eff37936894aa.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/vnd.microsoft.icon
cf-ray: 8d327cdadce6beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"ec2c34cadd4b5f4594415127380a85e6"
last-modified: Thu, 31 Mar 2022 22:18:39 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Osvj%2FEQtpcfcvJjM%2BZaKVSg%2FvBJOND8PicjxkMok6bhaRnWFhkFcDdwpVQ8SC70tJJfJM2iRogfOGkmzEO9dgY2zxsqQkUzBj8D5oEEkymyaJF7xaQx4%2B7e9uiA8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/452d7be36bf4b23241bd.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 137140
cf-ray: 8d327cdadce5beb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "f9bf0f65660d23c6f359d22720fc55ae"
last-modified: Fri, 06 Jan 2023 01:15:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=H38Y0E%2F1WKtFezBWgEy9DkUik%2BOstnQcaSnlG%2B8C6jagR4U9fJr5bbImFSUzDHSw7kR69hX1ayRxIKUITyMAd%2BR8cnKbN%2BdoBjTrJR96hcD7ynJGST1wMD%2BHXVsU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/48a594e29497835802fe.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 39724
cf-ray: 8d327cdadcdebeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "ff5eccde83f118cea0224ebbb9dc3179"
last-modified: Wed, 05 Jun 2024 19:27:57 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eqUKRUBe2JB13vpEmT52l1FfGtSuBe43IODWlUscMUKzKSc88%2FmW5CVqg146zbYx68mPBKOS%2B%2BIyc7FW0EMhw9ZPh78VhLmrp15e3f54FiRkF1IYwedXVt6Wb2JT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/f5b8aa3411dfc24ff2e6.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 45868
cf-ray: 8d327cdadce0beb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "d295c40af6fca08f8e0eb5425351f431"
last-modified: Wed, 05 Jun 2024 19:27:55 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9hwQhLHsHotw%2F%2BM%2BdRGQG6PsWmkqjGJ%2BjCDCNfnjEN3EB6PtLshcChze6PNi6UFTVbdCSIHTJ1Oo0K7nDaTOYkuPFPGBwnKa%2B7hYiznAVlZUFf%2B78dBfE5D7HmCU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/favicon.ico HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 179380
cf-ray: 8d327cdadce3beb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "7cf1be7696bf689b97230262eade8ad8"
last-modified: Fri, 06 Jan 2023 01:15:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CN%2FmJBxq24THs7I1c5mXqVW8NVNoNUMByXHopDM6tJFe6vZawHgqi4BINpJoUzTLfKemAF0eeJ4xllm9EhuDWpbs1RUPHWfDLzp3ZrUHrblZr4Nm93EbpwtHIFv4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/5067a2ec1b24a6de868c.js HTTP/2.0
host: discord.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/assets/ac625b77a0bab0ee72df.js
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 38156
cf-ray: 8d327cdaccbebeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "3d6549bf2f38372c054eafb93fa358a9"
last-modified: Wed, 05 Jun 2024 19:27:58 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VW43CO%2BRbdV7bLkza7i0gYyXQEUntdl3v1mEy2NEVNTDzhZOiKNwhSz9TRVlwgOagl1uqxLUN0%2BNv0Azd17cdcragXR5TY%2FuYSZ54sRPzAwaBEhoJM9COAaBypqf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/fb70c6325a7d728cb6d0.png HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/png
content-length: 2406
cf-ray: 8d327cdb5dbabeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "dff87c953f43b561d71fbcfe8a93a79a"
last-modified: Sun, 02 Oct 2022 01:17:46 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Li9b5JVMsVpVb%2BhNv5PJq4d5iT4HiX00Ut09nFJmNzLgKCvG2ptXFeF81lGKaLrPR6HhLE%2FNc97JMR7MrMIdgHU0QcX3dKwYM56igr%2FMjZ2C0PDibz0Fd8l%2FIRUb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/d7c3c29c10588b7767ee.png HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://discord.com/assets/3a61f2ace66bc5a08999.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: image/png
content-length: 16225
cf-ray: 8d327cdb5dbfbeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "8eba753f8b6d02be1013c5e659b0fc2f"
last-modified: Wed, 14 Sep 2022 00:44:20 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYb50SZe7dQpWe3hdbY89nSffQcxZ%2BvMPMub%2F%2FOX5QtAWS7Vc0pL%2FekA6L5CUKmvh8fZfcWWOH9ffJDr7PRJ%2B%2FLwD8D1aptMltMB8vsAYCkNBECxOvOC5SRER1Dd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/a6f6204cd40c3c5f5c14.js HTTP/2.0
host: discord.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/assets/ac625b77a0bab0ee72df.js
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript
cf-ray: 8d327cdb9e6ebeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"0fbb77d1b69f18df0fdcf836de1c4106"
last-modified: Fri, 28 Jun 2024 00:43:11 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VuNUYd5UXzEZUmVVZaxSi1acclE9yXe2APnTOllfSpQiZ%2BmijPx4jSPLqrTs%2FbPNp%2BHJHqfSdxhoYppcMrpr4K2Y5J8rsRNaWF9C%2BtLLFUYNBhm18jjn0spBc77m"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/48ad19e80083bee682d2.webm HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
accept-encoding: identity;q=1, *;q=0
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: video
referer: https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
range: bytes=0-
ResponseHTTP/2.0 206
content-type: video/webm
content-length: 160381
content-range: bytes 0-160380/160381
cf-ray: 8d327cdc4fb8beb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "3b0d96ed8113994f3d139088726cfecd"
last-modified: Wed, 14 Sep 2022 00:44:22 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZfWLsxW%2BzRZJNDft0QbTRm58MsC7A3uhBB4jzXJNQBiJvTyvU1sJnwmddEdMPo8y4AK8gX05ClIuy7K8w5Fl6jARu7D2bW2LBsZBdVX75C4SW7GRgnsh86BBsoGs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/1bab9b095996b8d024ce.js HTTP/2.0
host: discord.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://discord.com/assets/ac625b77a0bab0ee72df.js
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: application/javascript
cf-ray: 8d327cdc782fbeb6-LHR
cf-cache-status: HIT
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: W/"45a3ee5ff96bdb2dd7fbb2846b5ea494"
last-modified: Tue, 18 Jun 2024 19:13:27 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BbloJ5EA6vrm1cYJ8X%2BXo4fDuDjgoplwOMsZ3lu2ODxUQxBcR%2FQQmG0ik1g7iWeZDtqO%2Bf8hvsscA3Myp0RaISAgGIAKElZKjx38YAHc1n%2BJV1hJE57s3gHFIbdC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestGET /assets/1222195a37d6dd10994e.woff2 HTTP/2.0
host: discord.com
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
origin: https://discord.com
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
dnt: 1
accept: */*
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://discord.com/assets/12633.3ae024f1211a5090fa4a.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
ResponseHTTP/2.0 200
content-type: font/woff2
content-length: 39764
cf-ray: 8d327cdc986abeb6-LHR
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: https://discord.com
cache-control: public, max-age=2592000
etag: "71d3e9dc2bcb8e91225ba9fab588c8f2"
last-modified: Wed, 05 Jun 2024 19:28:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Origin, Accept-Encoding
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
x-frame-options: DENY
x-xss-protection: 1; mode=block
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fLSI8dpk6Zre%2FhkI9qHCJDgBf2hT5V1Oq7EfXRCHsuR0uUpwF2lVWLb%2FSetY9L2zsLq2qHgce8yJeMSkCmgB%2B7cqRYWAhmrvWqLP1ylVo2Avl4DDMYWl1naJloO1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
alt-svc: h3=":443"; ma=86400
-
Remote address:162.159.138.232:443RequestPOST /cdn-cgi/challenge-platform/h/b/jsd/r/8d327ccc8d92beb6 HTTP/2.0
host: discord.com
content-length: 14108
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="90", "Microsoft Edge";v="90"
dnt: 1
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36 Edg/90.0.818.66
content-type: application/json
accept: */*
origin: https://discord.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: __dcfduid=5ed927108b3211ef80e861abc441e34c
cookie: __sdcfduid=5ed927118b3211ef80e861abc441e34cc25147a183e4dbd621229eb9e3cf511e362d6ceeac2b8490fdda10296a498fc6
cookie: __cfruid=b8a4880ef3ce1f2a5643e4ce2324ba73e19e97b4-1729023392
cookie: _cfuvid=ZfaJPYldRVDqeUI7Nh0X7xlV7C3HeJyLj213SZhO5RE-1729023392777-0.0.1.1-604800000
-
Remote address:8.8.8.8:53Requestremote-auth-gateway.discord.ggIN AResponseremote-auth-gateway.discord.ggIN A162.159.134.234remote-auth-gateway.discord.ggIN A162.159.130.234remote-auth-gateway.discord.ggIN A162.159.136.234remote-auth-gateway.discord.ggIN A162.159.133.234remote-auth-gateway.discord.ggIN A162.159.135.234
-
Remote address:8.8.8.8:53Requestremote-auth-gateway.discord.ggIN UnknownResponseremote-auth-gateway.discord.ggIN Unknownh2���ꢟ�ꢟ�ꢟ�ꢟ��
-
Remote address:172.217.169.3:443RequestPOST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 279
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:172.217.169.3:443RequestPOST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 336
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:8.8.8.8:53Requestgateway.discord.ggIN AResponsegateway.discord.ggIN A162.159.133.234gateway.discord.ggIN A162.159.136.234gateway.discord.ggIN A162.159.135.234gateway.discord.ggIN A162.159.130.234gateway.discord.ggIN A162.159.134.234
-
Remote address:8.8.8.8:53Requestgateway.discord.ggIN UnknownResponsegateway.discord.ggIN Unknownh2���ꢟ�ꢟ�ꢟ�ꢟ��
-
Remote address:8.8.8.8:53Requestapi.spotify.comIN AResponseapi.spotify.comIN CNAMEedge-web.dual-gslb.spotify.comedge-web.dual-gslb.spotify.comIN A35.186.224.24
-
Remote address:8.8.8.8:53Requestapi.spotify.comIN UnknownResponseapi.spotify.comIN CNAMEedge-web.dual-gslb.spotify.com
-
Remote address:8.8.8.8:53Requeststatus.discord.comIN AResponsestatus.discord.comIN A162.159.138.232status.discord.comIN A162.159.136.232status.discord.comIN A162.159.128.233status.discord.comIN A162.159.135.232status.discord.comIN A162.159.137.232
-
Remote address:8.8.8.8:53Requeststatus.discord.comIN UnknownResponsestatus.discord.comIN Unknownh3h2���颟�袟�袟�袟��
-
Remote address:8.8.8.8:53Requestcdn.discordapp.comIN AResponsecdn.discordapp.comIN A162.159.134.233cdn.discordapp.comIN A162.159.133.233cdn.discordapp.comIN A162.159.130.233cdn.discordapp.comIN A162.159.129.233cdn.discordapp.comIN A162.159.135.233
-
Remote address:8.8.8.8:53Requestcdn.discordapp.comIN UnknownResponsecdn.discordapp.comIN Unknownh3h2���颟�颟�颟�颟��GE� A� ag�u� ���s�tg��|�y�m���B�cloudflare-ech.com
-
Remote address:8.8.8.8:53Requestdealer.spotify.comIN AResponsedealer.spotify.comIN CNAMEglobal-dealer-ssl.spotify.comglobal-dealer-ssl.spotify.comIN A35.186.224.45
-
Remote address:8.8.8.8:53Requestdealer.spotify.comIN UnknownResponsedealer.spotify.comIN CNAMEglobal-dealer-ssl.spotify.com
-
Remote address:8.8.8.8:53Requesti.scdn.coIN AResponsei.scdn.coIN CNAMEimage-scdn.cdn-gslb.spotify.comimage-scdn.cdn-gslb.spotify.comIN CNAMEcommon-eipb-ak.spotifycdn.com.edgesuite.netcommon-eipb-ak.spotifycdn.com.edgesuite.netIN CNAMEsquadcdn.scdn.co.splitter-eip.akadns.netsquadcdn.scdn.co.splitter-eip.akadns.netIN CNAMEi.scdn.co-noeip.akamaized.neti.scdn.co-noeip.akamaized.netIN CNAMEa1520.dscc.akamai.neta1520.dscc.akamai.netIN A2.19.117.33a1520.dscc.akamai.netIN A2.19.117.43
-
Remote address:8.8.8.8:53Requesti.scdn.coIN UnknownResponsei.scdn.coIN CNAMEimage-scdn.cdn-gslb.spotify.comimage-scdn.cdn-gslb.spotify.comIN CNAMEcommon-eipb-ak.spotifycdn.com.edgesuite.netcommon-eipb-ak.spotifycdn.com.edgesuite.netIN CNAMEsquadcdn.scdn.co.splitter-eip.akadns.netsquadcdn.scdn.co.splitter-eip.akadns.netIN CNAMEi.scdn.co-noeip.akamaized.neti.scdn.co-noeip.akamaized.netIN CNAMEa1520.dscc.akamai.net
-
Remote address:8.8.8.8:53Requestmedia.discordapp.netIN AResponsemedia.discordapp.netIN A162.159.129.232media.discordapp.netIN A162.159.130.232media.discordapp.netIN A162.159.133.232media.discordapp.netIN A162.159.128.232media.discordapp.netIN A162.159.134.232
-
Remote address:8.8.8.8:53Requestmedia.discordapp.netIN UnknownResponsemedia.discordapp.netIN Unknownh3h2���袟�袟�袟�袟��
-
Remote address:8.8.8.8:53Requestlatency.discord.mediaIN AResponselatency.discord.mediaIN A162.159.129.235latency.discord.mediaIN A162.159.138.234latency.discord.mediaIN A162.159.137.234latency.discord.mediaIN A162.159.130.235latency.discord.mediaIN A162.159.128.235
-
Remote address:8.8.8.8:53Requestlatency.discord.mediaIN UnknownResponselatency.discord.mediaIN Unknownh2���뢟�뢟�뢟�ꢟ��P&G����&G����&G����&G����&G����
-
Remote address:8.8.8.8:53Request189.132.214.35.in-addr.arpaIN PTRResponse189.132.214.35.in-addr.arpaIN PTR18913221435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request21.243.214.35.in-addr.arpaIN PTRResponse21.243.214.35.in-addr.arpaIN PTR2124321435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestchrome.google.comIN AResponsechrome.google.comIN CNAMEwww3.l.google.comwww3.l.google.comIN A172.217.169.78
-
Remote address:8.8.8.8:53Request234.16.217.172.in-addr.arpaIN PTRResponse234.16.217.172.in-addr.arpaIN PTRlhr48s28-in-f101e100net234.16.217.172.in-addr.arpaIN PTRmad08s04-in-f10�I
-
Remote address:8.8.8.8:53Request238.212.58.216.in-addr.arpaIN PTRResponse238.212.58.216.in-addr.arpaIN PTRlhr25s28-in-f141e100net238.212.58.216.in-addr.arpaIN PTRams16s22-in-f14�I238.212.58.216.in-addr.arpaIN PTRams16s22-in-f238�I
-
Remote address:8.8.8.8:53Request222.197.79.204.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestris.api.iris.microsoft.comIN AResponseris.api.iris.microsoft.comIN CNAMEris-prod.trafficmanager.netris-prod.trafficmanager.netIN CNAMEasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comIN A20.234.120.54
-
Remote address:8.8.8.8:53Request15.243.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestwww.googleadservices.comIN AResponsewww.googleadservices.comIN A216.58.212.226
-
Remote address:8.8.8.8:53Requestself.events.data.microsoft.comIN AResponseself.events.data.microsoft.comIN CNAMEself-events-data.trafficmanager.netself-events-data.trafficmanager.netIN CNAMEonedscolprdcus12.centralus.cloudapp.azure.comonedscolprdcus12.centralus.cloudapp.azure.comIN A13.89.179.10
-
Remote address:8.8.8.8:53Request6.200.250.142.in-addr.arpaIN PTRResponse6.200.250.142.in-addr.arpaIN PTRlhr48s29-in-f61e100net
-
Remote address:8.8.8.8:53Request89.66.18.2.in-addr.arpaIN PTRResponse89.66.18.2.in-addr.arpaIN PTRa2-18-66-89deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Request57.169.31.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request163.208.214.35.in-addr.arpaIN PTRResponse163.208.214.35.in-addr.arpaIN PTR16320821435bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestwww.gstatic.comIN AResponsewww.gstatic.comIN A142.250.178.3
-
Remote address:8.8.8.8:53Request10.179.89.13.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request194.212.58.216.in-addr.arpaIN PTRResponse194.212.58.216.in-addr.arpaIN PTRams16s21-in-f21e100net194.212.58.216.in-addr.arpaIN PTRams16s21-in-f194�H194.212.58.216.in-addr.arpaIN PTRlhr25s27-in-f2�H
-
Remote address:8.8.8.8:53Request134.32.126.40.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestris.api.iris.microsoft.comIN AResponseris.api.iris.microsoft.comIN CNAMEris-prod.trafficmanager.netris-prod.trafficmanager.netIN CNAMEasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comasf-ris-prod-neu-azsc.northeurope.cloudapp.azure.comIN A20.234.120.54
-
Remote address:8.8.8.8:53Request44.243.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request160.243.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requestogads-pa.googleapis.comIN AResponseogads-pa.googleapis.comIN A142.250.178.10ogads-pa.googleapis.comIN A142.250.187.202ogads-pa.googleapis.comIN A216.58.201.106ogads-pa.googleapis.comIN A172.217.169.10ogads-pa.googleapis.comIN A142.250.179.234ogads-pa.googleapis.comIN A216.58.204.74ogads-pa.googleapis.comIN A172.217.169.42ogads-pa.googleapis.comIN A142.250.200.10ogads-pa.googleapis.comIN A142.250.200.42ogads-pa.googleapis.comIN A172.217.16.234ogads-pa.googleapis.comIN A142.250.187.234ogads-pa.googleapis.comIN A142.250.180.10ogads-pa.googleapis.comIN A216.58.213.10
-
Remote address:8.8.8.8:53Request3.178.250.142.in-addr.arpaIN PTRResponse3.178.250.142.in-addr.arpaIN PTRlhr48s27-in-f31e100net
-
Remote address:8.8.8.8:53Requestgoogleads.g.doubleclick.netIN AResponsegoogleads.g.doubleclick.netIN A216.58.212.194
-
Remote address:8.8.8.8:53Request59.66.18.2.in-addr.arpaIN PTRResponse59.66.18.2.in-addr.arpaIN PTRa2-18-66-59deploystaticakamaitechnologiescom
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-weu-b.westeurope.cloudapp.azure.comiris-de-prod-azsc-v2-weu-b.westeurope.cloudapp.azure.comIN A20.31.169.57
-
Remote address:8.8.8.8:53Request55.36.223.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request50.243.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Requesttunnel.googlezip.netIN AResponsetunnel.googlezip.netIN A216.239.34.157
-
Remote address:8.8.8.8:53Requestimg.youtube.comIN AResponseimg.youtube.comIN CNAMEytimg.l.google.comytimg.l.google.comIN A142.250.200.14ytimg.l.google.comIN A142.250.200.46ytimg.l.google.comIN A216.58.204.78ytimg.l.google.comIN A142.250.178.14ytimg.l.google.comIN A142.250.187.238ytimg.l.google.comIN A142.250.187.206ytimg.l.google.comIN A216.58.212.238ytimg.l.google.comIN A172.217.169.14ytimg.l.google.comIN A216.58.213.14ytimg.l.google.comIN A142.250.180.14ytimg.l.google.comIN A172.217.16.238ytimg.l.google.comIN A216.58.212.206ytimg.l.google.comIN A172.217.169.78ytimg.l.google.comIN A216.58.201.110ytimg.l.google.comIN A142.250.179.238
-
Remote address:8.8.8.8:53Request22.169.217.172.in-addr.arpaIN PTRResponse22.169.217.172.in-addr.arpaIN PTRlhr25s26-in-f221e100net
-
Remote address:8.8.8.8:53Requestarc.msn.comIN AResponsearc.msn.comIN CNAMEarc.trafficmanager.netarc.trafficmanager.netIN CNAMEiris-de-prod-azsc-v2-weu.westeurope.cloudapp.azure.comiris-de-prod-azsc-v2-weu.westeurope.cloudapp.azure.comIN A20.103.156.88
-
Remote address:8.8.8.8:53Request10.27.171.150.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request31.243.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request51.230.219.35.in-addr.arpaIN PTRResponse51.230.219.35.in-addr.arpaIN PTR5123021935bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Requestdns-tunnel-check.googlezip.netIN AResponsedns-tunnel-check.googlezip.netIN A216.239.34.159
-
Remote address:8.8.8.8:53Requestwww.youtube.comIN AResponsewww.youtube.comIN CNAMEyoutube-ui.l.google.comyoutube-ui.l.google.comIN A216.58.212.238youtube-ui.l.google.comIN A142.250.179.238youtube-ui.l.google.comIN A142.250.200.14youtube-ui.l.google.comIN A216.58.201.110youtube-ui.l.google.comIN A142.250.200.46youtube-ui.l.google.comIN A216.58.204.78youtube-ui.l.google.comIN A142.250.180.14youtube-ui.l.google.comIN A142.250.187.238youtube-ui.l.google.comIN A172.217.169.78youtube-ui.l.google.comIN A142.250.178.14youtube-ui.l.google.comIN A172.217.169.14youtube-ui.l.google.comIN A172.217.16.238youtube-ui.l.google.comIN A142.250.187.206
-
Remote address:8.8.8.8:53Request234.179.250.142.in-addr.arpaIN PTRResponse234.179.250.142.in-addr.arpaIN PTRlhr25s31-in-f101e100net
-
Remote address:8.8.8.8:53Requestlogin.live.comIN AResponselogin.live.comIN CNAMElogin.msa.msidentity.comlogin.msa.msidentity.comIN CNAMEwww.tm.lg.prod.aadmsa.trafficmanager.netwww.tm.lg.prod.aadmsa.trafficmanager.netIN CNAMEprdv4a.aadg.msidentity.comprdv4a.aadg.msidentity.comIN CNAMEwww.tm.v4.a.prd.aadg.trafficmanager.netwww.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.134www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.68www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.17www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.14www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.140www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.76www.tm.v4.a.prd.aadg.trafficmanager.netIN A40.126.32.133www.tm.v4.a.prd.aadg.trafficmanager.netIN A20.190.160.22
-
Remote address:8.8.8.8:53Request54.120.234.20.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request126.249.219.35.in-addr.arpaIN PTRResponse126.249.219.35.in-addr.arpaIN PTR12624921935bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request247.231.219.35.in-addr.arpaIN PTRResponse247.231.219.35.in-addr.arpaIN PTR24723121935bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request35.238.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request56.245.219.35.in-addr.arpaIN PTRResponse56.245.219.35.in-addr.arpaIN PTR5624521935bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request92.209.0.34.in-addr.arpaIN PTRResponse92.209.0.34.in-addr.arpaIN PTR92209034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request172.205.0.34.in-addr.arpaIN PTRResponse172.205.0.34.in-addr.arpaIN PTR172205034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request172.205.0.34.in-addr.arpaIN PTRResponse172.205.0.34.in-addr.arpaIN PTR172205034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request158.199.0.34.in-addr.arpaIN PTRResponse158.199.0.34.in-addr.arpaIN PTR158199034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request158.199.0.34.in-addr.arpaIN PTRResponse158.199.0.34.in-addr.arpaIN PTR158199034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request141.209.0.34.in-addr.arpaIN PTRResponse141.209.0.34.in-addr.arpaIN PTR141209034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request81.197.0.34.in-addr.arpaIN PTRResponse81.197.0.34.in-addr.arpaIN PTR81197034bcgoogleusercontentcom
-
Remote address:8.8.8.8:53Request145.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request110.201.58.216.in-addr.arpaIN PTRResponse110.201.58.216.in-addr.arpaIN PTRlhr48s48-in-f141e100net110.201.58.216.in-addr.arpaIN PTRprg03s02-in-f110�I110.201.58.216.in-addr.arpaIN PTRprg03s02-in-f14�I
-
Remote address:8.8.8.8:53Requestogads-pa.googleapis.comIN AResponseogads-pa.googleapis.comIN A172.217.16.234ogads-pa.googleapis.comIN A142.250.200.42ogads-pa.googleapis.comIN A142.250.179.234ogads-pa.googleapis.comIN A142.250.187.202ogads-pa.googleapis.comIN A172.217.169.42ogads-pa.googleapis.comIN A216.58.204.74ogads-pa.googleapis.comIN A142.250.178.10ogads-pa.googleapis.comIN A142.250.180.10ogads-pa.googleapis.comIN A216.58.201.106ogads-pa.googleapis.comIN A142.250.187.234ogads-pa.googleapis.comIN A216.58.212.234ogads-pa.googleapis.comIN A172.217.169.74ogads-pa.googleapis.comIN A142.250.200.10
-
Remote address:8.8.8.8:53Requestjnn-pa.googleapis.comIN AResponsejnn-pa.googleapis.comIN A142.250.179.234jnn-pa.googleapis.comIN A172.217.169.42jnn-pa.googleapis.comIN A216.58.204.74jnn-pa.googleapis.comIN A216.58.213.10jnn-pa.googleapis.comIN A142.250.187.234jnn-pa.googleapis.comIN A216.58.201.106jnn-pa.googleapis.comIN A142.250.200.10jnn-pa.googleapis.comIN A142.250.180.10jnn-pa.googleapis.comIN A142.250.187.202jnn-pa.googleapis.comIN A216.58.212.202jnn-pa.googleapis.comIN A142.250.200.42jnn-pa.googleapis.comIN A172.217.16.234jnn-pa.googleapis.comIN A172.217.169.74jnn-pa.googleapis.comIN A142.250.178.10jnn-pa.googleapis.comIN A216.58.212.234
-
Remote address:8.8.8.8:53Requestwww.bing.comIN AResponsewww.bing.comIN CNAMEwww-www.bing.com.trafficmanager.netwww-www.bing.com.trafficmanager.netIN CNAMEwww.bing.com.edgekey.netwww.bing.com.edgekey.netIN CNAMEe86303.dscx.akamaiedge.nete86303.dscx.akamaiedge.netIN A2.18.66.89e86303.dscx.akamaiedge.netIN A2.18.66.184e86303.dscx.akamaiedge.netIN A2.18.66.163e86303.dscx.akamaiedge.netIN A2.18.66.171e86303.dscx.akamaiedge.netIN A104.86.110.96e86303.dscx.akamaiedge.netIN A2.18.66.162e86303.dscx.akamaiedge.netIN A2.18.66.177e86303.dscx.akamaiedge.netIN A104.86.110.91e86303.dscx.akamaiedge.netIN A2.18.66.169
-
Remote address:8.8.8.8:53Requestwww.bing.comIN A
-
Remote address:8.8.8.8:53Request40.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request158.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request133.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request151.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:8.8.8.8:53Request151.237.22.66.in-addr.arpaIN PTRResponse
-
Remote address:216.239.34.157:443RequestCONNECT HTTP/2.0
host: helpx.adobe.com:443
chrome-tunnel: key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
ResponseHTTP/2.0 200
date: Tue, 15 Oct 2024 20:19:34 GMT
-
Remote address:216.239.34.157:443RequestCONNECT HTTP/2.0
host: en.wikipedia.org:443
chrome-tunnel: key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
ResponseHTTP/2.0 503
retry-after: 0
date: Tue, 15 Oct 2024 20:19:34 GMT
-
Remote address:216.58.201.110:443RequestPOST /log?format=json&hasfast=true HTTP/2.0
host: play.google.com
content-length: 926
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
content-type: application/x-www-form-urlencoded;charset=UTF-8
accept: */*
origin: https://www.google.com
x-client-data: CPmCywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: AEC=AVYB7coFpWK_brHRRkGIcyHd7SAr62p6CiYmBP-8ZmFsQrtVBAaR862nEw
cookie: __Secure-ENID=23.SE=fJ9PyZ1ARDlHzpvyioxv4x9zs9mCSgn7WJWqTu4jJvsCa8n0FqqOwEJ9yXCU8RHVeCVZSspfRm113VRdVuJr_WwiFdp68oMmgWbMdHu9-7_qBTZ_7swuLi-v9OsOEAbqArss7zMM8pov5ertfqicQ_SxOTAn0Z4sxS9JDkkgFFtX-cHOhPDmLLwb7I2kArSD3qG_YMqIt7oealVLjecrsRIW0spaBxm2-A
-
Remote address:216.58.201.110:443RequestPOST /log?format=json&hasfast=true HTTP/2.0
host: play.google.com
content-length: 932
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-platform: "Windows"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
content-type: application/x-www-form-urlencoded;charset=UTF-8
accept: */*
origin: https://www.google.com
x-client-data: CPmCywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: AEC=AVYB7coFpWK_brHRRkGIcyHd7SAr62p6CiYmBP-8ZmFsQrtVBAaR862nEw
cookie: __Secure-ENID=23.SE=fJ9PyZ1ARDlHzpvyioxv4x9zs9mCSgn7WJWqTu4jJvsCa8n0FqqOwEJ9yXCU8RHVeCVZSspfRm113VRdVuJr_WwiFdp68oMmgWbMdHu9-7_qBTZ_7swuLi-v9OsOEAbqArss7zMM8pov5ertfqicQ_SxOTAn0Z4sxS9JDkkgFFtX-cHOhPDmLLwb7I2kArSD3qG_YMqIt7oealVLjecrsRIW0spaBxm2-A
-
POSThttps://consent.google.com/save?continue=https://www.google.com/search?q%3DxD%26oq%3DxD%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBBzQxMWowajSoAgCwAgE%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20241010-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=truechrome.exeRemote address:216.58.201.110:443RequestPOST /save?continue=https://www.google.com/search?q%3DxD%26oq%3DxD%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBBzQxMWowajSoAgCwAgE%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20241010-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=true HTTP/2.0
host: consent.google.com
content-length: 0
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.google.com
x-client-data: CPmCywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: AEC=AVYB7coFpWK_brHRRkGIcyHd7SAr62p6CiYmBP-8ZmFsQrtVBAaR862nEw
cookie: __Secure-ENID=23.SE=fJ9PyZ1ARDlHzpvyioxv4x9zs9mCSgn7WJWqTu4jJvsCa8n0FqqOwEJ9yXCU8RHVeCVZSspfRm113VRdVuJr_WwiFdp68oMmgWbMdHu9-7_qBTZ_7swuLi-v9OsOEAbqArss7zMM8pov5ertfqicQ_SxOTAn0Z4sxS9JDkkgFFtX-cHOhPDmLLwb7I2kArSD3qG_YMqIt7oealVLjecrsRIW0spaBxm2-A
cookie: SOCS=CAISHAgCEhJnd3NfMjAyNDEwMTAtMF9SQzIaAmVuIAEaBgiA4ba4Bg
-
Remote address:216.58.201.110:443RequestGET /vi/zQ8xMzjrS1c/hqdefault.jpg HTTP/2.0
host: img.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:216.58.201.110:443RequestGET /iframe_api?version=3 HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
OPTIONShttps://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncDatachrome.exeRemote address:172.217.16.234:443RequestOPTIONS /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/2.0
host: ogads-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-goog-api-key,x-user-agent
origin: https://www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
POSThttps://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncDatachrome.exeRemote address:172.217.16.234:443RequestPOST /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/2.0
host: ogads-pa.googleapis.com
content-length: 65
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
x-user-agent: grpc-web-javascript/0.1
x-goog-api-key: AIzaSyCbsbvGCe7C9mCtdaTycZB2eUFuzsYKG_E
content-type: application/json+protobuf
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.google.com
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
GEThttps://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1chrome.exeRemote address:216.58.212.238:443RequestGET /embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Windows"
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: iframe
referer: https://www.google.com/search?q=xD&oq=xD&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBBzQxMWowajSoAgCwAgE&sourceid=chrome&ie=UTF-8
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=GpM0xwHki0c
cookie: VISITOR_INFO1_LIVE=VDykSYJKUuE
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgDw%3D%3D
-
Remote address:216.58.212.238:443RequestGET /s/player/815edc2a/www-player.css HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: text/css,*/*;q=0.1
x-client-data: CPmCywE=
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=GpM0xwHki0c
cookie: VISITOR_INFO1_LIVE=VDykSYJKUuE
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgDw%3D%3D
-
Remote address:216.58.212.238:443RequestGET /s/player/815edc2a/player_ias.vflset/en_US/embed.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=GpM0xwHki0c
cookie: VISITOR_INFO1_LIVE=VDykSYJKUuE
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgDw%3D%3D
-
GEThttps://www.youtube.com/s/player/815edc2a/www-embed-player.vflset/www-embed-player.jschrome.exeRemote address:216.58.212.238:443RequestGET /s/player/815edc2a/www-embed-player.vflset/www-embed-player.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=GpM0xwHki0c
cookie: VISITOR_INFO1_LIVE=VDykSYJKUuE
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgDw%3D%3D
-
Remote address:216.58.212.238:443RequestGET /s/player/815edc2a/player_ias.vflset/en_US/base.js HTTP/2.0
host: www.youtube.com
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
cookie: YSC=GpM0xwHki0c
cookie: VISITOR_INFO1_LIVE=VDykSYJKUuE
cookie: VISITOR_PRIVACY_METADATA=CgJHQhIEGgAgDw%3D%3D
-
Remote address:216.58.212.194:443RequestGET /pagead/id HTTP/2.0
host: googleads.g.doubleclick.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.youtube.com
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:216.58.212.194:443RequestGET /pagead/id?slf_rd=1 HTTP/2.0
host: googleads.g.doubleclick.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.youtube.com
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:142.250.200.6:443RequestGET /instream/ad_status.js HTTP/2.0
host: static.doubleclick.net
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:142.250.179.234:443RequestOPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/2.0
host: jnn-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-goog-api-key,x-user-agent
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:142.250.179.234:443RequestPOST /$rpc/google.internal.waa.v1.Waa/Create HTTP/2.0
host: jnn-pa.googleapis.com
content-length: 24
sec-ch-ua: "Google Chrome";v="123", "Not:A-Brand";v="8", "Chromium";v="123"
x-user-agent: grpc-web-javascript/0.1
x-goog-api-key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
content-type: application/json+protobuf
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-ch-ua-platform: "Windows"
accept: */*
origin: https://www.youtube.com
x-client-data: CPmCywE=
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:216.58.201.110:443RequestOPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
Remote address:216.58.201.110:443RequestOPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br, zstd
accept-language: en-US,en;q=0.9
-
1.8kB 2.0kB 9 8
-
33.2kB 432.0kB 592 695
-
1.4kB 627 B 7 6
-
1.9kB 7.0kB 19 21
HTTP Request
GET https://www.google.com/async/ddljson?async=ntp:2 -
1.2kB 6.1kB 12 11
-
1.2kB 7.7kB 11 11
-
1.1kB 8.2kB 11 11
-
1.1kB 3.3kB 10 8
-
162.159.138.232:443https://discord.com/w/assets/049ab5b31e290901bda109a642e64098fcf169cf/styles.csstls, http2chrome.exe4.3kB 76.7kB 59 94
HTTP Request
GET https://discord.com/HTTP Response
200HTTP Request
GET https://discord.com/webflow-scripts/head.jsHTTP Request
GET https://discord.com/w/assets/049ab5b31e290901bda109a642e64098fcf169cf/styles.cssHTTP Response
200HTTP Response
200 -
900 B 2.6kB 7 5
-
104.18.161.117:443https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/6641da5484ffb72b9ad73f01_Clyde.webptls, http2chrome.exe14.0kB 347.7kB 267 280
HTTP Request
GET https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/css/discord-2022.825d518ea.min.cssHTTP Request
GET https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/664daa37ea162cadf9603500_Art.webpHTTP Request
GET https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/662630272724e61320fb7ee2_WUMPUS.webpHTTP Response
200HTTP Response
200HTTP Request
GET https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/66263062e1fb458b0803dbe6_WUMPUS-pl.webpHTTP Request
GET https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/6641da5484ffb72b9ad73f01_Clyde.webpHTTP Response
200HTTP Response
200HTTP Response
200 -
899 B 2.6kB 7 5
-
2.8kB 29.2kB 38 36
HTTP Request
GET https://cdn.localizeapi.com/localize.jsHTTP Response
200 -
142.250.187.202:443https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.jstls, http2chrome.exe2.1kB 13.0kB 21 23
HTTP Request
GET https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js -
108.156.61.211:443https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2tls, http2chrome.exe2.7kB 39.1kB 35 44
HTTP Request
GET https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6257adef93867e50d84d30e2HTTP Response
200 -
964 B 3.2kB 8 6
-
964 B 3.2kB 8 6
-
943 B 3.2kB 8 6
-
11.7kB 503.6kB 219 390
HTTP Request
GET https://cdn.discordapp.com/assets/homepage/background-art__2__720.pngHTTP Request
GET https://cdn.discordapp.com/assets/homepage/3.m4aHTTP Request
GET https://cdn.discordapp.com/assets/homepage/2.m4aHTTP Request
GET https://cdn.discordapp.com/assets/homepage/1.m4aHTTP Request
GET https://cdn.discordapp.com/assets/homepage/5.m4aHTTP Request
GET https://cdn.discordapp.com/assets/homepage/4.m4aHTTP Request
GET https://cdn.discordapp.com/assets/homepage/6.m4aHTTP Response
206HTTP Response
206HTTP Response
206HTTP Response
206HTTP Response
206HTTP Response
206HTTP Response
200 -
964 B 3.2kB 8 6
-
1.0kB 3.2kB 8 6
-
172.64.155.119:443https://geolocation.onetrust.com/cookieconsentpub/v1/geo/locationtls, http2chrome.exe2.0kB 4.1kB 20 19
HTTP Request
GET https://geolocation.onetrust.com/cookieconsentpub/v1/geo/locationHTTP Response
200 -
35.190.80.1:443https://a.nel.cloudflare.com/report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2tls, http2chrome.exe3.0kB 5.1kB 24 24
HTTP Request
OPTIONS https://a.nel.cloudflare.com/report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2HTTP Request
POST https://a.nel.cloudflare.com/report/v4?s=Wp%2Bld3omKIEXR9Itv1j%2Fe%2BQ03cMIHLLgjyhIvdiclt93W0CpkDhMIO3bZqVSnRCh%2Fa68lHnwKhwZ8ROF8%2BaBGXgqDgkV5Lg%2F1qzqJsVIwqg30ut0sLuEc6vB4xP2 -
172.217.16.238:443https://www.youtube.com/s/player/815edc2a/www-widgetapi.vflset/www-widgetapi.jstls, http2chrome.exe2.3kB 22.4kB 22 34
HTTP Request
GET https://www.youtube.com/iframe_apiHTTP Request
GET https://www.youtube.com/s/player/815edc2a/www-widgetapi.vflset/www-widgetapi.js -
34.126.226.51:443https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/DiscordSetup.exetls, http2chrome.exe4.7MB 125.4MB 75795 89876
HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/DiscordSetup.exeHTTP Response
200 -
5.7kB 10.6kB 31 32
-
999 B 6.0kB 9 8
-
162.159.135.232:443https://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000tls, httpDiscord.exe2.2kB 15.5kB 22 30
HTTP Request
GET https://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000HTTP Response
200HTTP Request
GET https://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000HTTP Response
200HTTP Request
GET https://updates.discord.com/distributions/app/manifests/latest?install_id=76276c7f-cbf3-428b-978e-5845f7f75f21&channel=stable&platform=win&arch=x64&platform_version=10.0.22000HTTP Response
200 -
34.126.226.51:443https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_voice/1/full.distrotls, httpDiscord.exe328.9kB 10.2MB 5464 7300
HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_voice/1/full.distroHTTP Response
200 -
34.126.226.51:443https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_utils/1/full.distrotls, httpDiscord.exe15.0kB 567.4kB 265 416
HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_utils/1/full.distroHTTP Response
200 -
34.126.226.51:443https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_desktop_core/1/full.distrotls, httpDiscord.exe56.5kB 1.6MB 890 1151
HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_desktop_core/1/full.distroHTTP Response
200 -
34.126.226.51:443https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_spellcheck/1/full.distrotls, httpDiscord.exe67.4kB 2.0MB 1138 1429
HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_erlpack/1/full.distroHTTP Response
200HTTP Request
GET https://stable.dl2.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_spellcheck/1/full.distroHTTP Response
200 -
1.4kB 3.6kB 17 16
-
104.18.48.115:443https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_dispatch/1/full.distrotls, httpDiscord.exe842.3kB 28.9MB 13944 20734
HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_media/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_zstd/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_game_utils/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_overlay2/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_krisp/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_cloudsync/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_rpc/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_modules/1/full.distroHTTP Response
200HTTP Request
GET https://dl.discordapp.net/distro/app/stable/win/x64/1.0.9166/discord_dispatch/1/full.distroHTTP Response
200 -
162.159.129.233:443https://discordapp.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306tls, http2msedge.exe1.7kB 4.2kB 11 9
HTTP Request
GET https://discordapp.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306HTTP Response
301 -
162.159.138.232:443https://discord.com/cdn-cgi/challenge-platform/h/b/jsd/r/8d327ccc8d92beb6tls, http2msedge.exe90.8kB 5.2MB 1409 4051
HTTP Request
GET https://discord.com/handoff?rpc=6463&key=9a3046e7-7555-4594-9c17-de0de9793306HTTP Response
200HTTP Request
GET https://discord.com/assets/12633.3ae024f1211a5090fa4a.cssHTTP Request
GET https://discord.com/assets/web.6d7443c1284c2ada8d90.jsHTTP Request
GET https://discord.com/assets/sentry.c32ac87cbc0d88b302d4.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/cdn-cgi/challenge-platform/scripts/jsd/main.jsHTTP Request
GET https://discord.com/assets/ac625b77a0bab0ee72df.jsHTTP Request
GET https://discord.com/assets/29a63f12209c956d9204.jsHTTP Request
GET https://discord.com/assets/3a61f2ace66bc5a08999.cssHTTP Request
GET https://discord.com/assets/5bea9214aec58f9e42cd.jsHTTP Response
302HTTP Request
GET https://discord.com/assets/2917679ca8a08c390036.cssHTTP Request
GET https://discord.com/assets/48ef1aad3427d3af5bed.jsHTTP Request
GET https://discord.com/assets/2597d11c1e039607373e.svgHTTP Request
GET https://discord.com/assets/a5ec2b74d0cc337d4481.svgHTTP Request
GET https://discord.com/assets/5430e9964fe8364e084d.svgHTTP Request
GET https://discord.com/assets/ab03f7053698d417194c.svgHTTP Request
GET https://discord.com/assets/410a2166a48c9e482e2a.svgHTTP Request
GET https://discord.com/assets/9017b7062734e72bb476.svgHTTP Request
GET https://discord.com/assets/af5116b1db004acbdb8b.svgHTTP Request
GET https://discord.com/assets/ba88bbd1342d3f000e33.svgHTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/cdn-cgi/challenge-platform/h/b/scripts/jsd/62ec4f065604/main.js?HTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/assets/c1b53be672aac192a996.woff2HTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/assets/8234e0a75aa9afb205bd.woff2HTTP Request
GET https://discord.com/assets/b21c5111a12372139409.woff2HTTP Request
GET https://discord.com/assets/8bd8143eff37936894aa.woff2HTTP Request
GET https://discord.com/assets/452d7be36bf4b23241bd.woff2HTTP Request
GET https://discord.com/assets/48a594e29497835802fe.woff2HTTP Request
GET https://discord.com/assets/f5b8aa3411dfc24ff2e6.woff2HTTP Request
GET https://discord.com/assets/favicon.icoHTTP Request
GET https://discord.com/assets/5067a2ec1b24a6de868c.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/assets/fb70c6325a7d728cb6d0.pngHTTP Response
200HTTP Request
GET https://discord.com/assets/d7c3c29c10588b7767ee.pngHTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/assets/a6f6204cd40c3c5f5c14.jsHTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Response
200HTTP Request
GET https://discord.com/assets/48ad19e80083bee682d2.webmHTTP Response
200HTTP Request
GET https://discord.com/assets/1bab9b095996b8d024ce.jsHTTP Request
GET https://discord.com/assets/1222195a37d6dd10994e.woff2HTTP Response
206HTTP Response
200HTTP Response
200HTTP Request
POST https://discord.com/cdn-cgi/challenge-platform/h/b/jsd/r/8d327ccc8d92beb6 -
2.6kB 5.0kB 14 18
-
885 B 3.4kB 8 6
-
3.2kB 7.3kB 29 28
HTTP Request
POST https://beacons.gcp.gvt2.com/domainreliability/uploadHTTP Request
POST https://beacons.gcp.gvt2.com/domainreliability/upload -
-
-
540.4kB 3.9MB 11558 16123
-
2.9kB 6.2kB 29 30
-
13.1kB 15.4kB 183 180
-
3.5kB 110.8kB 49 92
-
2.1kB 5.3kB 20 23
-
1.0kB 8.1kB 10 10
-
4.2kB 37.0kB 41 44
HTTP Request
CONNECTHTTP Response
200 -
1.7kB 6.4kB 15 13
HTTP Request
CONNECTHTTP Response
503 -
5.9kB 24.3kB 39 48
HTTP Request
POST https://play.google.com/log?format=json&hasfast=trueHTTP Request
POST https://play.google.com/log?format=json&hasfast=trueHTTP Request
POST https://consent.google.com/save?continue=https://www.google.com/search?q%3DxD%26oq%3DxD%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBBzQxMWowajSoAgCwAgE%26sourceid%3Dchrome%26ie%3DUTF-8&gl=UK&m=0&pc=srp&x=5&src=2&hl=en&bl=gws_20241010-0_RC2&uxe=none&cm=2&set_eom=false&set_aps=true&set_sc=trueHTTP Request
GET https://img.youtube.com/vi/zQ8xMzjrS1c/hqdefault.jpgHTTP Request
GET https://www.youtube.com/iframe_api?version=3 -
172.217.16.234:443https://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncDatatls, http2chrome.exe2.5kB 7.6kB 19 22
HTTP Request
OPTIONS https://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncDataHTTP Request
POST https://ogads-pa.googleapis.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData -
216.58.212.238:443https://www.youtube.com/s/player/815edc2a/player_ias.vflset/en_US/base.jstls, http2chrome.exe18.8kB 860.6kB 364 626
HTTP Request
GET https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1HTTP Request
GET https://www.youtube.com/s/player/815edc2a/www-player.cssHTTP Request
GET https://www.youtube.com/s/player/815edc2a/player_ias.vflset/en_US/embed.jsHTTP Request
GET https://www.youtube.com/s/player/815edc2a/www-embed-player.vflset/www-embed-player.jsHTTP Request
GET https://www.youtube.com/s/player/815edc2a/player_ias.vflset/en_US/base.js -
1.1kB 6.0kB 9 8
-
2.1kB 7.4kB 18 21
HTTP Request
GET https://googleads.g.doubleclick.net/pagead/idHTTP Request
GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 -
1.9kB 6.6kB 14 12
HTTP Request
GET https://static.doubleclick.net/instream/ad_status.js -
142.250.179.234:443https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Createtls, http2chrome.exe3.1kB 52.9kB 34 52
HTTP Request
OPTIONS https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/CreateHTTP Request
POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create -
216.58.201.110:443https://play.google.com/log?format=json&hasfast=true&authuser=0tls, http2chrome.exe2.0kB 8.5kB 17 18
HTTP Request
OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0HTTP Request
OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0 -
977 B 6.9kB 10 8
-
5.0kB 76.2kB 72 69
-
1.1kB 5.2kB 15 13
-
1.1kB 5.2kB 15 13
-
1.1kB 5.2kB 15 13
-
1.1kB 5.2kB 14 13
-
30.6kB 802.6kB 613 597
-
1.1kB 5.2kB 15 13
-
21.1kB 593.0kB 438 434
-
1.6kB 7.3kB 17 15
-
97.7kB 2.7MB 1938 1934
-
1.6kB 7.3kB 17 15
-
1.6kB 7.3kB 17 15
-
1.6kB 7.3kB 17 15
-
958 B 1.8kB 14 14
DNS Request
boot.net.anydesk.com
DNS Response
57.128.101.78
DNS Request
8.8.8.8.in-addr.arpa
DNS Request
relay-2cf7befd.net.anydesk.com
DNS Response
195.181.165.139
DNS Request
78.101.128.57.in-addr.arpa
DNS Request
www.googleapis.com
DNS Response
142.250.200.42142.250.178.10216.58.212.202142.250.180.10172.217.169.42142.250.179.234216.58.204.74172.217.169.10216.58.201.106172.217.16.234142.250.187.202142.250.187.234216.58.213.10142.250.200.10
DNS Request
227.187.250.142.in-addr.arpa
DNS Request
ogads-pa.googleapis.com
DNS Response
142.250.180.10142.250.187.202172.217.169.10172.217.16.234142.250.178.10142.250.187.234216.58.201.106216.58.212.234142.250.200.42216.58.204.74142.250.179.234142.250.200.10
DNS Request
36.200.250.142.in-addr.arpa
DNS Request
play.google.com
DNS Response
216.58.212.206
DNS Request
discord.com
DNS Response
162.159.138.232162.159.137.232162.159.135.232162.159.128.233162.159.136.232
DNS Request
ajax.googleapis.com
DNS Response
142.250.187.202
DNS Request
10.178.250.142.in-addr.arpa
DNS Request
www.googletagmanager.com
DNS Response
172.217.16.232
DNS Request
51.226.126.34.in-addr.arpa
-
825 B 1.4kB 12 12
DNS Request
139.165.181.195.in-addr.arpa
DNS Request
clientservices.googleapis.com
DNS Response
142.250.187.227
DNS Request
www.google.com
DNS Response
142.250.200.36
DNS Request
www.gstatic.com
DNS Response
142.250.200.35
DNS Request
apis.google.com
DNS Response
142.250.179.238
DNS Request
35.200.250.142.in-addr.arpa
DNS Request
206.212.58.216.in-addr.arpa
DNS Request
fonts.googleapis.com
DNS Response
142.250.178.10
DNS Request
cdn.discordapp.com
DNS Response
162.159.135.233162.159.129.233162.159.130.233162.159.133.233162.159.134.233
DNS Request
202.187.250.142.in-addr.arpa
DNS Request
232.16.217.172.in-addr.arpa
DNS Request
133.190.18.2.in-addr.arpa
-
3.4kB 47.1kB 29 44
-
2.7kB 7.3kB 11 14
-
3.5kB 52.3kB 26 44
-
486 B 874 B 7 7
DNS Request
238.179.250.142.in-addr.arpa
DNS Request
clients2.google.com
DNS Response
172.217.169.78
DNS Request
fonts.gstatic.com
DNS Response
216.58.204.67
DNS Request
d3e54v103j8qbb.cloudfront.net
DNS Response
108.156.61.211108.156.61.222108.156.61.158108.156.61.73
DNS Request
117.161.18.104.in-addr.arpa
DNS Request
119.155.64.172.in-addr.arpa
DNS Request
ocsp.digicert.com
DNS Response
192.229.221.95
-
475 B 767 B 7 5
DNS Request
10.180.250.142.in-addr.arpa
DNS Request
78.169.217.172.in-addr.arpa
DNS Request
cdn.prod.website-files.com
DNS Response
104.18.161.117104.18.160.117
DNS Request
232.138.159.162.in-addr.arpa
DNS Request
www.youtube.com
DNS Request
www.youtube.com
DNS Request
www.youtube.com
DNS Response
172.217.16.238142.250.200.14216.58.212.238172.217.169.78142.250.180.14142.250.200.46142.250.187.206216.58.201.110216.58.204.78142.250.179.238142.250.178.14172.217.169.14142.250.187.238
-
5.3kB 7.5kB 11 11
-
3.9kB 8.1kB 10 12
-
204 B 3
-
276 B 667 B 4 4
DNS Request
cdn.localizeapi.com
DNS Response
104.22.20.64172.67.41.53104.22.21.64
DNS Request
67.204.58.216.in-addr.arpa
DNS Request
geolocation.onetrust.com
DNS Response
172.64.155.119104.18.32.137
DNS Request
ctldl.windowsupdate.com
DNS Response
2.18.190.1332.18.190.134
-
49.5kB 721.4kB 168 646
-
68.7kB 4.7MB 564 4001
-
9.9kB 194.0kB 65 173
-
143 B 250 B 2 2
DNS Request
211.61.156.108.in-addr.arpa
DNS Request
1.80.190.35.in-addr.arpa
-
142 B 220 B 2 2
DNS Request
64.20.22.104.in-addr.arpa
DNS Request
stable.dl2.discordapp.net
DNS Response
34.126.226.51
-
216 B 359 B 3 3
DNS Request
233.135.159.162.in-addr.arpa
DNS Request
a.nel.cloudflare.com
DNS Response
35.190.80.1
DNS Request
nexusrules.officeapps.live.com
DNS Response
52.111.236.23
-
1.6kB 3.9kB 4 6
-
2.9kB 7.1kB 5 8
-
67 B 83 B 1 1
DNS Request
update.googleapis.com
DNS Response
216.58.201.99
-
67 B 124 B 1 1
DNS Request
update.googleapis.com
-
278 B 232 B 4 2
DNS Request
updates.discord.com
DNS Response
162.159.135.232162.159.138.232162.159.136.232162.159.128.233162.159.137.232
DNS Request
stable.dl2.discordapp.net
DNS Request
stable.dl2.discordapp.net
DNS Request
stable.dl2.discordapp.net
DNS Response
34.126.226.51
-
3.5kB 7.5kB 8 13
-
891 B 1.9kB 13 13
DNS Request
99.201.58.216.in-addr.arpa
DNS Request
233.134.159.162.in-addr.arpa
DNS Request
ctldl.windowsupdate.com
DNS Response
2.18.190.1332.18.190.134
DNS Request
discordapp.com
DNS Response
162.159.129.233162.159.130.233162.159.133.233162.159.135.233162.159.134.233
DNS Request
233.129.159.162.in-addr.arpa
DNS Request
234.134.159.162.in-addr.arpa
DNS Request
45.224.186.35.in-addr.arpa
DNS Request
253.192.214.35.in-addr.arpa
DNS Request
play.google.com
DNS Response
216.58.201.110
DNS Request
157.34.239.216.in-addr.arpa
DNS Request
static.doubleclick.net
DNS Response
142.250.200.6
DNS Request
fp.msedge.net
DNS Response
204.79.197.222
DNS Request
tse1.mm.bing.net
DNS Response
150.171.27.10150.171.28.10
-
921 B 2.5kB 14 14
DNS Request
232.135.159.162.in-addr.arpa
DNS Request
dl.discordapp.net
DNS Response
104.18.48.115104.18.52.172
DNS Request
discordapp.com
DNS Response
162.159.135.233162.159.129.233162.159.134.233162.159.130.233162.159.133.233
DNS Request
login.live.com
DNS Response
40.126.31.6740.126.31.7320.190.159.7320.190.159.7120.190.159.240.126.31.7120.190.159.020.190.159.64
DNS Request
67.31.126.40.in-addr.arpa
DNS Request
234.133.159.162.in-addr.arpa
DNS Request
33.117.19.2.in-addr.arpa
DNS Request
235.129.159.162.in-addr.arpa
DNS Request
www.google.com
DNS Response
142.250.200.36
DNS Request
226.212.58.216.in-addr.arpa
DNS Request
i.ytimg.com
DNS Response
172.217.169.22142.250.200.22142.250.179.246142.250.180.22216.58.213.22172.217.169.54216.58.212.214142.250.187.214172.217.169.86142.250.178.22142.250.200.54216.58.201.118216.58.204.86216.58.212.246142.250.187.246172.217.16.246
DNS Request
r.bing.com
DNS Response
2.18.66.592.18.66.642.18.66.432.18.66.48104.86.110.115104.86.110.1292.18.66.67104.86.110.1232.18.66.42
DNS Request
88.156.103.20.in-addr.arpa
DNS Request
arc.msn.com
DNS Response
20.223.36.55
-
743 B 1.4kB 11 11
DNS Request
123.35.104.34.in-addr.arpa
DNS Request
115.48.18.104.in-addr.arpa
DNS Request
config.edge.skype.com
DNS Response
13.107.42.16
DNS Request
discord.com
DNS Response
162.159.137.232162.159.138.232162.159.135.232162.159.136.232162.159.128.233
DNS Request
beacons.gcp.gvt2.com
DNS Response
172.217.169.3
DNS Request
24.224.186.35.in-addr.arpa
DNS Request
232.129.159.162.in-addr.arpa
DNS Request
71.224.214.35.in-addr.arpa
DNS Request
fonts.gstatic.com
DNS Response
216.58.204.67
DNS Request
consent.google.com
DNS Request
consent.google.com
DNS Response
216.58.201.110
DNS Response
216.58.201.110
-
60 B 140 B 1 1
DNS Request
discordapp.com
DNS Response
162.159.134.233162.159.129.233162.159.135.233162.159.130.233162.159.133.233
-
60 B 184 B 1 1
DNS Request
discordapp.com
-
659.1kB 13.5MB 2289 11763
-
76 B 156 B 1 1
DNS Request
remote-auth-gateway.discord.gg
DNS Response
162.159.134.234162.159.130.234162.159.136.234162.159.133.234162.159.135.234
-
76 B 122 B 1 1
DNS Request
remote-auth-gateway.discord.gg
-
64 B 144 B 1 1
DNS Request
gateway.discord.gg
DNS Response
162.159.133.234162.159.136.234162.159.135.234162.159.130.234162.159.134.234
-
64 B 110 B 1 1
DNS Request
gateway.discord.gg
-
61 B 110 B 1 1
DNS Request
api.spotify.com
DNS Response
35.186.224.24
-
61 B 159 B 1 1
DNS Request
api.spotify.com
-
64 B 144 B 1 1
DNS Request
status.discord.com
DNS Response
162.159.138.232162.159.136.232162.159.128.233162.159.135.232162.159.137.232
-
64 B 113 B 1 1
DNS Request
status.discord.com
-
2.3kB 6.9kB 9 11
-
3.4kB 6.2kB 16 20
-
64 B 144 B 1 1
DNS Request
cdn.discordapp.com
DNS Response
162.159.134.233162.159.133.233162.159.130.233162.159.129.233162.159.135.233
-
64 B 188 B 1 1
DNS Request
cdn.discordapp.com
-
64 B 112 B 1 1
DNS Request
dealer.spotify.com
DNS Response
35.186.224.45
-
64 B 186 B 1 1
DNS Request
dealer.spotify.com
-
55 B 312 B 1 1
DNS Request
i.scdn.co
DNS Response
2.19.117.332.19.117.43
-
55 B 341 B 1 1
DNS Request
i.scdn.co
-
66 B 146 B 1 1
DNS Request
media.discordapp.net
DNS Response
162.159.129.232162.159.130.232162.159.133.232162.159.128.232162.159.134.232
-
66 B 115 B 1 1
DNS Request
media.discordapp.net
-
14.6kB 909.4kB 140 760
-
15.5kB 1.4MB 176 1202
-
67 B 147 B 1 1
DNS Request
latency.discord.media
DNS Response
162.159.129.235162.159.138.234162.159.137.234162.159.130.235162.159.128.235
-
67 B 197 B 1 1
DNS Request
latency.discord.media
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
46 B 36 B 1 1
-
73 B 126 B 1 1
DNS Request
189.132.214.35.in-addr.arpa
-
426 B 874 B 6 6
DNS Request
21.243.214.35.in-addr.arpa
DNS Request
chrome.google.com
DNS Response
172.217.169.78
DNS Request
234.16.217.172.in-addr.arpa
DNS Request
238.212.58.216.in-addr.arpa
DNS Request
222.197.79.204.in-addr.arpa
DNS Request
ris.api.iris.microsoft.com
DNS Response
20.234.120.54
-
429 B 817 B 6 6
DNS Request
15.243.22.66.in-addr.arpa
DNS Request
www.googleadservices.com
DNS Response
216.58.212.226
DNS Request
self.events.data.microsoft.com
DNS Response
13.89.179.10
DNS Request
6.200.250.142.in-addr.arpa
DNS Request
89.66.18.2.in-addr.arpa
DNS Request
57.169.31.20.in-addr.arpa
-
422 B 869 B 6 6
DNS Request
163.208.214.35.in-addr.arpa
DNS Request
www.gstatic.com
DNS Response
142.250.178.3
DNS Request
10.179.89.13.in-addr.arpa
DNS Request
194.212.58.216.in-addr.arpa
DNS Request
134.32.126.40.in-addr.arpa
DNS Request
ris.api.iris.microsoft.com
DNS Response
20.234.120.54
-
71 B 136 B 1 1
DNS Request
44.243.22.66.in-addr.arpa
-
483 B 1.1kB 7 7
DNS Request
160.243.22.66.in-addr.arpa
DNS Request
ogads-pa.googleapis.com
DNS Response
142.250.178.10142.250.187.202216.58.201.106172.217.169.10142.250.179.234216.58.204.74172.217.169.42142.250.200.10142.250.200.42172.217.16.234142.250.187.234142.250.180.10216.58.213.10
DNS Request
3.178.250.142.in-addr.arpa
DNS Request
googleads.g.doubleclick.net
DNS Response
216.58.212.194
DNS Request
59.66.18.2.in-addr.arpa
DNS Request
arc.msn.com
DNS Response
20.31.169.57
DNS Request
55.36.223.20.in-addr.arpa
-
400 B 992 B 6 6
DNS Request
50.243.22.66.in-addr.arpa
DNS Request
tunnel.googlezip.net
DNS Response
216.239.34.157
DNS Request
img.youtube.com
DNS Response
142.250.200.14142.250.200.46216.58.204.78142.250.178.14142.250.187.238142.250.187.206216.58.212.238172.217.169.14216.58.213.14142.250.180.14172.217.16.238216.58.212.206172.217.169.78216.58.201.110142.250.179.238
DNS Request
22.169.217.172.in-addr.arpa
DNS Request
arc.msn.com
DNS Response
20.103.156.88
DNS Request
10.27.171.150.in-addr.arpa
-
71 B 136 B 1 1
DNS Request
31.243.22.66.in-addr.arpa
-
415 B 1.1kB 6 6
DNS Request
51.230.219.35.in-addr.arpa
DNS Request
dns-tunnel-check.googlezip.net
DNS Response
216.239.34.159
DNS Request
www.youtube.com
DNS Response
216.58.212.238142.250.179.238142.250.200.14216.58.201.110142.250.200.46216.58.204.78142.250.180.14142.250.187.238172.217.169.78142.250.178.14172.217.169.14172.217.16.238142.250.187.206
DNS Request
234.179.250.142.in-addr.arpa
DNS Request
login.live.com
DNS Response
40.126.32.13440.126.32.6820.190.160.1720.190.160.1440.126.32.14040.126.32.7640.126.32.13320.190.160.22
DNS Request
54.120.234.20.in-addr.arpa
-
73 B 126 B 1 1
DNS Request
126.249.219.35.in-addr.arpa
-
73 B 126 B 1 1
DNS Request
247.231.219.35.in-addr.arpa
-
72 B 124 B 1 1
DNS Request
56.245.219.35.in-addr.arpa
-
71 B 136 B 1 1
DNS Request
35.238.22.66.in-addr.arpa
-
70 B 120 B 1 1
DNS Request
92.209.0.34.in-addr.arpa
-
142 B 244 B 2 2
DNS Request
172.205.0.34.in-addr.arpa
DNS Request
172.205.0.34.in-addr.arpa
-
142 B 244 B 2 2
DNS Request
158.199.0.34.in-addr.arpa
DNS Request
158.199.0.34.in-addr.arpa
-
71 B 122 B 1 1
DNS Request
141.209.0.34.in-addr.arpa
-
70 B 120 B 1 1
DNS Request
81.197.0.34.in-addr.arpa
-
397 B 1.2kB 6 5
DNS Request
145.237.22.66.in-addr.arpa
DNS Request
110.201.58.216.in-addr.arpa
DNS Request
ogads-pa.googleapis.com
DNS Response
172.217.16.234142.250.200.42142.250.179.234142.250.187.202172.217.169.42216.58.204.74142.250.178.10142.250.180.10216.58.201.106142.250.187.234216.58.212.234172.217.169.74142.250.200.10
DNS Request
jnn-pa.googleapis.com
DNS Response
142.250.179.234172.217.169.42216.58.204.74216.58.213.10142.250.187.234216.58.201.106142.250.200.10142.250.180.10142.250.187.202216.58.212.202142.250.200.42172.217.16.234172.217.169.74142.250.178.10216.58.212.234
DNS Request
www.bing.com
DNS Request
www.bing.com
DNS Response
2.18.66.892.18.66.1842.18.66.1632.18.66.171104.86.110.962.18.66.1622.18.66.177104.86.110.912.18.66.169
-
71 B 136 B 1 1
DNS Request
40.237.22.66.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
158.237.22.66.in-addr.arpa
-
72 B 137 B 1 1
DNS Request
133.237.22.66.in-addr.arpa
-
144 B 274 B 2 2
DNS Request
151.237.22.66.in-addr.arpa
DNS Request
151.237.22.66.in-addr.arpa
-
4.9kB 4.0kB 10 11
-
101.3kB 2.5MB 376 2185
-
3.4kB 42.8kB 28 45
-
1.7kB 6.3kB 5 7
-
3.9kB 3.1kB 8 8
-
4.8kB 2.2kB 11 8
-
1.8kB 1.5kB 7 6
-
57.6kB 1.1MB 289 1007
-
2.9kB 6.5kB 5 8
-
3.7kB 18.0kB 11 18
-
15.1kB 43.6kB 35 48
-
2.9kB 6.5kB 5 8
-
5.0kB 7.4kB 11 14
-
5.7kB 7.6kB 11 13
-
4.3kB 5.6kB 9 10
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1SIP and Trust Provider Hijacking
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5b5ad5caaaee00cb8cf445427975ae66c
SHA1dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA51292f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f
-
Filesize
4B
MD5f49655f856acb8884cc0ace29216f511
SHA1cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA2567852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
-
Filesize
1008B
MD5d222b77a61527f2c177b0869e7babc24
SHA13f23acb984307a4aeba41ebbb70439c97ad1f268
SHA25680dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff
-
Filesize
4.2MB
MD5ef372b115f9981eb9d017674e0f1de5f
SHA14ed23b696283f476fa90c85dce81d920ad4541a5
SHA256cff87670c233fde0e08752800c1c1da45c95ecbaf52bf6954670b031bd3ef4fa
SHA512c31fc67ce88a559eccd0626c2f92d6a158b9c8d36149a18120f3d678f6c85c3b22095a99c0ad0d11719d23467741da6e703d2ff00b9cc100ca1476e76df140f6
-
Filesize
10.0MB
MD5ffd67c1e24cb35dc109a24024b1ba7ec
SHA199f545bc396878c7a53e98a79017d9531af7c1f5
SHA2569ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
SHA512e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
-
C:\Users\Admin\AppData\Local\Discord\app-1.0.9166\modules\discord_dispatch-1\discord_dispatch\dispatch.log
Filesize660B
MD5f886d0910b7659486f94ed48179205f6
SHA17c8e96bb449d82f796a025804ba3dcb76f3867ce
SHA256167f3b71a73f3a1d06d86706d5f9abf1a74125bace1c25afc69780f81384a096
SHA5123c4518e3958ee595f57be28662e8813a327b1492f01fc7205c9524152a2fdc53263d8d11012d0d8973e76964e5f025b4f62dbe329664f208e052e70c1374854a
-
Filesize
7.6MB
MD571d24156438bd4b604b11fbf6756ae1b
SHA1f3b5c3754b33e6b2ce1ff275ae670c569861b21b
SHA2561f4d221aa85ede684634bdeb572c96b09d078042222a1b418bcd55db6a21ee98
SHA51225e2c382046578e3652915c38e39dba242b9ea149cbf27b3a2889d154c3677f4bd87a4d5974c836314b4a323e83a14807dfd020d5aa472db3f4cbabbf263ef67
-
Filesize
650KB
MD53eef488e8b9d35f710634c4d404c7e1a
SHA1971c730ccfba2db0fee379683f4e310df5c9f1df
SHA2563a189b50da4b31b5af6cdfdb6398fa039ccac9e13898e4851b27c4d91f4dff6c
SHA512f787b7633edf75905674c467f7c291a2b3791a8475b11e1d4fb1769ebe872c6b70d778124c22a55b96efe2ac443c82750371421ac9fe8f2cc8bb47ce0e3648d6
-
Filesize
278KB
MD5084f9bc0136f779f82bea88b5c38a358
SHA164f210b7888e5474c3aabcb602d895d58929b451
SHA256dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43
SHA51265bccb3e1d4849b61c68716831578300b20dcaf1cbc155512edbc6d73dccbaf6e5495d4f95d089ee496f8e080057b7097a628cc104fa8eaad8da866891d9e3eb
-
C:\Users\Admin\AppData\Local\Discord\download\112930081962a89b2c0f15371b43fc5149fd874830dc15abc4dcbd054fbde28b
Filesize406KB
MD5af3b38b7a1b08877544d9c16d8bcb03e
SHA1b970622808405e1f27a1899d2fd4c14bd522bbbf
SHA256112930081962a89b2c0f15371b43fc5149fd874830dc15abc4dcbd054fbde28b
SHA512917bd43a4d15ee1e0e9be99d7c1940d9e71e524b3ffaf15640e6ea394351f82d28bb3a99d9067bc5479af20344aa9c3521d1a89d3a5c6dc865f13695578d31a2
-
C:\Users\Admin\AppData\Local\Discord\download\13c3954791077b09a4e3cd9cddd1d64e94be60663b2dddaf942bc3bc29a5d57d
Filesize296KB
MD5ba200d689e6496e1032c4f4b63c5e465
SHA19af117825f04e08c1862588ac3801385b9d885e8
SHA25613c3954791077b09a4e3cd9cddd1d64e94be60663b2dddaf942bc3bc29a5d57d
SHA512ab1bbc334d7564b992d343e56009669fa6c47da5ebe3a347eb17c82cf4cb6fe477c51791b86496a1fab42796036871c1e1dfc85ce6672e6fccd6312b5a92f90a
-
C:\Users\Admin\AppData\Local\Discord\download\23f2e8f7a9373002bd0b8621a3979d5408d91162c9774b9c1033e24067ef3092
Filesize31KB
MD5adeff9cb6a1fff59350876bf3c84e651
SHA15980af5d5736320fee53685a301c5bec07e04ae4
SHA25623f2e8f7a9373002bd0b8621a3979d5408d91162c9774b9c1033e24067ef3092
SHA512cb0e0b165e632fa81ac69f2f8f5b5ed45703832f55828ae6302bc9fe8274c3a6d3c3f164af9d64ebe1d54bbe391fce86a3f643a8bedafc646eaa4423c9c06ab6
-
C:\Users\Admin\AppData\Local\Discord\download\3157c9c8408eb5871a8464f0a8c04f5f0eb7d0b37556975b9c246b08fb59fb43
Filesize230KB
MD5a0d893249bc0cffaadbb78f9fdf93305
SHA18ed54a664750385a126921a88a5616172acad92e
SHA2563157c9c8408eb5871a8464f0a8c04f5f0eb7d0b37556975b9c246b08fb59fb43
SHA5121a9aa7f7a7981816a92dc0049ddfb847128aa4db85eda093d9afb76d6e7b8a874ba2639d00e6dd4a52320bd00372d6d0bcb6471654389fbf8acf7da5d63cdcb5
-
C:\Users\Admin\AppData\Local\Discord\download\35f86dc865f6ebaf72f1562f8a7ca41e00220e7ea3aa47b30db303add0072363
Filesize1.6MB
MD5b0649a3527db4732e09180b472f2716d
SHA1edb60e151184e4eb0cb8ad3109c31c95f8acbc2e
SHA25635f86dc865f6ebaf72f1562f8a7ca41e00220e7ea3aa47b30db303add0072363
SHA512c59923e15760fcd9741b017aab2ae79411d2fe732d7e0e39da7e51fac7cabedb4f61ae85e0fffbab7dd11cab567fa0e8cd211e0797b2661ef6e01f7222ecd244
-
C:\Users\Admin\AppData\Local\Discord\download\3a8d840b663d0cbc067e9a8e85f43320532b0bf8523cccf89f93c933ac713810
Filesize312KB
MD54df73f382f2d605162b0e3ea50d1ca9e
SHA12f68c7c989be3e74d7c35266153640b01279ef0e
SHA2563a8d840b663d0cbc067e9a8e85f43320532b0bf8523cccf89f93c933ac713810
SHA512952e60c6643925945c9f3e8274c98d3766b9252b8b828e3594ad4f71e5484cfa39b13059d98d01db0acf69ac29ce5064e10b50a10ee23f171d5ebccaf04d20a6
-
C:\Users\Admin\AppData\Local\Discord\download\3cdbbf1759b65755f8ac073b3cb404bde337194f9297e8a924c4afdbe291661c
Filesize9.4MB
MD5eab3f3263d93212ac1daf3a555d48744
SHA1401a57ba03cc5c7e546c1fd078ac44e9b9f6e94f
SHA2563cdbbf1759b65755f8ac073b3cb404bde337194f9297e8a924c4afdbe291661c
SHA5129e33a01b9f786f4a9588d5842e320e376add348f045ac2531d89c0ac8e5bce8b078aa904e3e8d59ab41a928d1d796cfdf9f1a958a81a1e79847dc9daaea4e3c2
-
C:\Users\Admin\AppData\Local\Discord\download\48945d4ac2384baf3338af88863bbde771d5beab12581f90eb39136e44ac3106
Filesize1.6MB
MD566c8887c7a19c917a4454ecd3fd2217c
SHA177a3bb4660353e20b97aa2c2297f275e7012a482
SHA25648945d4ac2384baf3338af88863bbde771d5beab12581f90eb39136e44ac3106
SHA512b5c3c95c1cdfed5754525483395463c786412f60d60df59ea493d2c14313007fa6d97c5481911b38eeeaa9e898742b1471676c58cfd61a446977f99e392de80e
-
C:\Users\Admin\AppData\Local\Discord\download\688aef76bf95ebf33739cc36c9840128f085dbe8645a9d635b513f2a373d1957
Filesize531KB
MD5b0348474c78091d3171555ea45af90f0
SHA193751e45d922b5fae7fa8c465bb97856ad3a9da9
SHA256688aef76bf95ebf33739cc36c9840128f085dbe8645a9d635b513f2a373d1957
SHA512de46819848ea7fb6d9b07415f22f1065e25cc8a57a1b8b05cd222f86994e2d7b6fb314d95c51bb3f985da11cc37ed624ad5bee7fc71ca3463d1f962e6b9240ce
-
C:\Users\Admin\AppData\Local\Discord\download\8535d45a1e9c176b49c4ea9bfe293026070624f45cf7c704b4b401bb9fbd177d
Filesize1.5MB
MD53fee2894faba11e51686414ccaf70c4a
SHA1792f9848d5d785618f95b4018e72b9695d0abfea
SHA2568535d45a1e9c176b49c4ea9bfe293026070624f45cf7c704b4b401bb9fbd177d
SHA512a87ecdc4a901f60836adf240e9e477e109a8a6ca8dcd140976e72fe1db526a7b553ad6e4fa8603adedaf993d27aaa00c033f68c34aba8d56a0df98ab2ca7e445
-
C:\Users\Admin\AppData\Local\Discord\download\890c2358693e3f98798c25d44b4ebde0c8617f0dc63160c56127f2587b9a6980
Filesize3.8MB
MD59d3bb3164875724ef373469436cce547
SHA1fc475962574a03e5704eab51b265e20ed61b63be
SHA256890c2358693e3f98798c25d44b4ebde0c8617f0dc63160c56127f2587b9a6980
SHA51232d8040f895cfd679363e7764d7990d2ca67aab7ec17bea6faba59853d6f159a634c35919a7961d8aad51db4ce9f0824e9850dcaa29b1879cedc22fddba9fd9a
-
C:\Users\Admin\AppData\Local\Discord\download\afe902ace405ab777efdd00843acc3d39982bf076c9b87207af6d4556392a5ba
Filesize2.5MB
MD55725479b074ee67d37fd6d79ae5d3661
SHA1cfb3db60b6b1b4e3581506f50ed68d3dfcb3c9e1
SHA256afe902ace405ab777efdd00843acc3d39982bf076c9b87207af6d4556392a5ba
SHA512b4a20576c2075025a6ef113add2ab5bc1dfefca374ad5b23556f85b6050e4b19276b825bd8c88c48fc9f3d4f61776d584459b11e48bbd1d87ef1d7b4929e2b9c
-
C:\Users\Admin\AppData\Local\Discord\download\b9e2c8415779bb214375fccd56f8a2bc0a3bc288d3e01e6811efbc2d2355e541
Filesize386KB
MD5bafb752579e230f712e213c6f4a5257d
SHA18c711ab8c0880653e6744baf983acdc51320df7a
SHA256b9e2c8415779bb214375fccd56f8a2bc0a3bc288d3e01e6811efbc2d2355e541
SHA512f90b203c10f01e4331238632ca64928acd98ca3b9324fade8ea73ed093a5dd05e2f73eab625d8d1c7b77c1f2054e067b90b6ad62226f907439a9cf56bc20bb82
-
C:\Users\Admin\AppData\Local\Discord\download\db98eb559f2cf6ff00ae11c08025444883326d1a0cd59316d09a27248c0575f3
Filesize16.7MB
MD5a7c99d4d6057ce15220db45b1eb3801d
SHA12e3ad81c6f88e45b33575013fb618d5393071761
SHA256db98eb559f2cf6ff00ae11c08025444883326d1a0cd59316d09a27248c0575f3
SHA5120474f2a651a9588ccd1039a0314788568c599442e8ce7386d73ad267b5d74ba72947f38d03ae5a00b8f831f30172f5dcfa871dd8f26860ed3d61a4d5f600addc
-
Filesize
73B
MD593f82a9f48e68ec6ee0a4af0ca88ff09
SHA1113acfbf4492e9f92dfc005cd6d9c0c2e546b783
SHA256111ea8599c8bd51b583c7d2f96e365971f9c4f90d110e34b1c1af125b8cb07aa
SHA512cca37897398dfbcb8784ec712c60b4cceffcc38449092de37e3c9cac5f2f96de1b12f9f5ac5dcae573e7a21f9dd8d493b22b16f5eaf3f1dece46a99598e26243
-
Filesize
649B
MD521c790a798e9385731be43a9a335a4c0
SHA1a937149b6aeb8ba03b484bc0f92845bf060b2c35
SHA256b202afa02927b5ae90678ce3268807d1af37dc4e22f29d012dab819d398b01f9
SHA512318630606ee064ee033b20f3d51469546a6c6bea5a4fa5530467ade143d510bc50600a54a07bec704ddf89322987f106ff0a88a8d0550dac266240d07ef2609f
-
Filesize
366KB
MD58af9c9af250339f71eb9d036f3310893
SHA17a8cd64fd10508d784ce30de59fd286e4dbd3375
SHA256c719d3d86df635f70d00e2fde56f0a5041bb7e1d6ed3e2115b850d9e907d49ea
SHA5126d0643026fa4be31137c0648f1e021ae32e2e9e0d116e7aa2d2424bbf31a44ff827e6d7580c9b00d13d67ec9f69dc6f6a6780a78f0b8126bd9111a8c1902219d
-
Filesize
552B
MD54c3b83c27fb617688b2388103974d0fb
SHA19f650b594ff16b427ef971476bd8e460663766b2
SHA256b7db76c6a6d2041426b520518813397f7f224d220688ab1b79954c1ef09cb727
SHA5128b0e0b9c0fc9fa1f4e9899f643648d5afefae894dc92cce7fa8d4ac8d36c56d1d48448e2b9f81ed80b14a3d855b22dfe4d56aa512c1e969b917ba390952a520e
-
Filesize
1KB
MD551cd2893048c4bffb9f2ba0465ded526
SHA1cd363e085cf200132af297ed5b4487a9baa519c3
SHA2560d51d866d76bcc35b8586630b3b8f963f39e88bcca279a587167df237e1e5bb9
SHA512d517cc2b35a4e746a16e5eb2489a5a5d68a3ee1d781b4c9650c429804dc254b3951e2fdfe5ce9b3b46f628019d5cf5e48d58d500b47ef6130e9508f57e662a98
-
Filesize
9KB
MD53c7499ff909f10229e458eb60bb22a28
SHA121761fc36f7f32c608a4f9e3a5194468f27374ba
SHA2569483347ccb69fc369901f29cd31ecb403d4fe40146e00e3384f52b74bf267d0d
SHA51267b6ded9efa896a6c8d4f6b7a00248d25c0740f47d49e6b21609df39fed63691ac8b640221578f63bc5578c1904bf68cf36230210d88cecb56340c33db0f413f
-
Filesize
5KB
MD5c504649e9d1f58146b02aefa9a754048
SHA1bfc1f39a561db1c8cc40ca8ab223814a8072429a
SHA256cf2b90c4a91db0f4c6f940f5fe13c283e5ed6f76325408cb3673f9ac6f37c22e
SHA512754cc4439e2032ec28bd339a2681bbde33fa6230aa12fdab2729810327a309a9d9f1b3cba4c925a00d6ffbc32cdf284399143de8c85b8e0c939ffea708ae8672
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
1KB
MD509629c4cc8e780195e8cb3f03a1f5e14
SHA13617ed1fcd1539189daf208e5333cf1745e49831
SHA2566691729a0b61fe1112d3b7f9779d0676ced36a6dfa5f7def76215e20d399ecbd
SHA512db1a9842cae8d28c206cf318345d8d11820a053cab8bb846aef254173a699c53aec3e9f05da37991521968c417a8ba560ea323ddfa89300d3323b40e8a7bac59
-
Filesize
1KB
MD586d6b01e90e86508fba009bff2a61b87
SHA19ef2c7c4224e9745cbbd0a175b63a7e57652a463
SHA256981868fc077dc8b12de468308074df3375eff96ba2fa38ba3b80e559cffb74d0
SHA512db6771e7bf38eda46ef20788724dda14a2feb10f99402df9bfad2c08eba67ebfde134228823bed758e353de62e28c0be729101f63faac8d9ee3a5c943ab94cff
-
Filesize
1024B
MD53a8a5bc8071c0e5f5fe481f3074e78c6
SHA11cff46e44008a37a25627b263924e5327f13e10e
SHA256293cd6b56be1be024b77af4dd927c4df4964d1f58e3e85a00d2766cc9cd0f78a
SHA51263be557dfd12f16f8cc94044bf5af04281c0a485fd51e4ee7e721bb6ebf893306be27715910bc0e77a900b01dca2c995941ee06949e8f29679539a6704977074
-
Filesize
1KB
MD5835d0765d33fbcfdf0e3b8c545c2a4fc
SHA10e494b65ea79641b8409fa37983c4f1c894bd5ad
SHA25653b6f5d914968544a14316ad2a3dfcec6bbc53277908abd105b1b2b7e466e964
SHA512fc05457d59be155d6f8fa17afdd25fe23580f76bf6ba5adc981f2f2e4f8f309f4ed4c0ec4a0361e7d65ee62a2a780507d3e9a39eba021ea5f7f371171c132359
-
Filesize
1KB
MD54848e1c14e3c5adf43a1a4301c1517b3
SHA1ae5da80f03e99ae4b7b3c7d4cff04514d294cca9
SHA2565830d4514f28801c591ff5deb1705b3d72e3892aea459619ba3cacc4811fec82
SHA512279ff4090fe9e0638c832afcaae71954f650bed3d6adfe58a70a7e5a6d0e990cb75b8cd1458eb6f4266f19e4bfe9535ef42cf4c725fecc9ac2c6b302bec162e1
-
Filesize
1KB
MD51cb3a5f9bc48c356dae277b27c0cd1a1
SHA1d34b2e1ca4ed2484517f400487a719bae0274d53
SHA25698b512f0ecd3a8178578503493bde974866d75e55b064e8c0ad12794f54037df
SHA512d45fbe52dec6c568b100c196df0fd7d252cd0f76705452ceb511f249be3f986be82d190e1d5db6c1ef9aed38e8a34ae41cb2b6129d108024ef797407391ede02
-
Filesize
9KB
MD5bdcddfab736f4c6c023035bd8efe6959
SHA11511abe94e9eedb0229e23cb549842192dd14829
SHA256a796ac16d9ff357145f1d586dd76cc3e6ecc8d45c40ee496632e0832abedcbb3
SHA512486beafffea5c0cde7f6003a746624aa9f13672892b576f2a6971b8d2094cd59bd7ec4a5321e49b092b8c985b4425882cd9966f638f01c5fe4d346761b02824a
-
Filesize
10KB
MD5fb9aa891256d52011f3af672f815c08b
SHA12de57af9dd40c79392fc2f83af8402a94b49032e
SHA256820be0dcb7425aeac3a3624b3f6a1012c223a779316e6e6b4c4d772f446ab095
SHA5120e79d9a5ef8fc413bf56a9336302e24cb4dd88e1d684e901d802a8fcf46288ada40bec01da7b949a4732247bfef4bf5f11c89a7df1db1eb2fd33c305026a4396
-
Filesize
9KB
MD5e18152b11e2d21939f99720439590e06
SHA1a6229a461564842be30d0096232840af23bfcc51
SHA256f4e40966896f9bc170f1a02ff0f1e1f5c18aad529201fce62d2101e4952bd265
SHA512be9f3732ea8d2cd1ff883afbb1f53edaba827eb0ccc10f6aa101e20750dade57c7e0cf1c4a6053bcaac331286da990a075d676f3c075f40072475d4b81241828
-
Filesize
9KB
MD5671f327bd3ee373ff4ea3ea95a435e06
SHA188eb5ca21fb10ee4482f45c245f4cffda61b6fa6
SHA25641b03ce9f20063a84150fe2d1410cfa095fd65c749961a051fedc08bdf310e2f
SHA5124ad125e04a55f67dc465f0cf55f4e5a370de4f00a2952027deca9fc487d960851577757d9d20f39757151d7aef68d9894bb57c58c009fc91e726f8c4c8a5ee9a
-
Filesize
9KB
MD5007f50f816fea8743ead9f958f214f23
SHA13893fdf4a9eaf612fb22f1b600147cdc4f3ae830
SHA256417241da1e33dd538af8f36ca6dec7bfbc745c870dbcbbdc5651da244b13f9dd
SHA51261b3373b4f18a533eb68723058b2f933013a6b6f0d74ed45c8fe2412a4fa92d5c4ded4568aaf5cbe72884e5e0b1cefdc602b6274cfc536080e7bdf8954799d94
-
Filesize
9KB
MD506ce71df52f3d0ddae0cb6ca274bf5ee
SHA15788e4ce1744647f20471bd09a66f6e87736ee5d
SHA256a0fb1840d3fceca68b312de6db16e3fe3f5755a8fe6825fb3779c282591ea999
SHA512ffcdcfa0a259d49a09842cc00d9ea44abc886ec2d8035f6097c5897e414f30a52943787fe8caa84dbc5b7b468d1a87043acbff791eaa96dcc8ecf14580db8cda
-
Filesize
10KB
MD58eda3a26492040dc3e6319a077d44450
SHA1a3dd639ec9a479c8dd6f1c1bc95c14329d3677cf
SHA256cd48e137473ceeb6b642c6409b5448e1c0a1aa1008d788d160f97a8d58b66040
SHA51234ce037625a0bf33f739f09692cb75b5f8daeef1693ff5fa1a8c8dcb1acf3d456d28d0feb4b5e73c0f85346a06b1a96bcdcf56a80fd0ac273b330029d8ea83f9
-
Filesize
9KB
MD51306dacb39f6590b0603691646ab443f
SHA1148bd7d8dd9ad6f59de328b5f83c3d1cbbf06830
SHA2562632e40fd5058e22b9bd16d3dc8df54ffa6a16b1e1a20cc4c23f8bd4cd6dcd64
SHA512fd5ea3f5446f20b10d451f266914e734b28b2c7635125feadd140cfa9d437e250db66ba1e48ea18efebd99958ed8b94372641a0f43be933d5cd8368a06e71f17
-
Filesize
9KB
MD58ecf6daa0be2110da09a834d47d75013
SHA1bdde6fca3305f38de6d3984d74edcac1816c8e61
SHA256c8c6dc8117698b5a16ddd37567133d4a7d2f15d924114c6fc654e35166d86631
SHA5124b0d52599767967eae697e55e08a30ca8b8389f08662f61b0e2dc3b1b26d329022c99f39548c6261164af7fc8b43d2495920dc7af026eb47903c5a0714545c7e
-
Filesize
10KB
MD51c2c6335f7c6d0a8a06413a5523f5d43
SHA1677c0f30ed998c0bc5db3304cb1a76941c6b2576
SHA2567b411a518e61c46cae7f3b10f9fffba1b3010a1dbb0d138817c827edb885887c
SHA5120a5dfdfbde96ff9da1d79126cbbfebbb3e62e80cb305f3bbaddc3930911ad15e3703351002efc76e75ba0dd250a20542343986d35fc2a198a9c7dc3bbb6f23f9
-
Filesize
9KB
MD5f3deb7172b2cd548bdd0029a0562f1ed
SHA149f67d59be5255336796a8a5759e983e5a2f3199
SHA256b5c543ddcbaf7c3483459fb7b1dd6b6142b1b219570c4345312879baaf81dd0b
SHA5126fa2f66148a22329749daa4b9dfba83090b9f86ab97c0aa040366e363ca8490e9a68980048b4feefc2cc3394c3b9f8db6b3d45e989c91a8bdb7983beacf9ca59
-
Filesize
9KB
MD57b50b56dc63e5c8944e8899a923b5f6e
SHA16684695de81599b215325345d212af76cda7bc66
SHA2569ed043d10db044310df73159477d868133b92842432e85a6c73bc917de715767
SHA512160573bf2f30dffea4f3d37453eb59d084f985ddee547584cca437979bc4d4378bc506651b7a8760dd672709d98681136b402c91c30a6301f5f35dabb9191fad
-
Filesize
9KB
MD5f584dcacf8b665b8485cdae090c27585
SHA10bc9299e272aa38d995580165216d8d30c6dd6c5
SHA2567810a017100908308898ace18c0ae736076e22495a35c6cd9a5d1c4c50098e8f
SHA512baccaad7d3c9a26d7959cd7e3947eaad50cee3812a7dca67acf0c2e0f6b449587287527c67500cfb0a6ca2578162d975aefb5d9dc114504c7aded5c85ce1a53d
-
Filesize
9KB
MD52d7de842ec4dd92ba6e0d2fc76fc4515
SHA1c3b6073730b46781732df15e1f3cd2803aec5b11
SHA256bc3db2542017385941693b6c83ebf40450bedc2ab94fcfe921b2cb61c68d75a7
SHA512e35f4f08fc84e4ae2d4e05a241d2351c08dffc1e895b6ca4c078bd4ba9b8a7dc1d3334b9d087c31d65621ec80822f3d9578f74c0096c23969ce78ac8dca6e98f
-
Filesize
9KB
MD53de2e00438cb8c8d701cddb68f6c7489
SHA11556a5b976cc1e8651bb119e3a5b0c3c844bd2f8
SHA256ceebcffdc5b7f8f6a49398cb33fd39610a965452c01aa09fa25e99ea9148ae00
SHA51221ae043ab60c87d15a1359b24d915b96749b0ad074a54b937b304b8a601e3c9c203f310f9adaa5b914b0c29142755f395505080d0438a274693c2c5206130727
-
Filesize
9KB
MD53859030c34492cd8ef4cf5242361208f
SHA13da86a82fdc61e7619445e20fa4acbd2f94aedc9
SHA256a166ef9604ca5a5f091097c47d6ebe07ee48c344aeb92040307d839b10cfd13f
SHA51240aaa492fca3ffccb558bee298c2108af43f04866051b4a037324810ef392959ebf3f5ed35b99290e1c7b3bc0645570501b3541159632a16710da6401b1d5ba3
-
Filesize
9KB
MD5a711f228361fa886c36d4e4c0b2f16bd
SHA10310cbc6e6da82236d7ba13360ae1dea80b75137
SHA25628430880dd22d828ec2b7f8925783a59187dbf1facafa7cf5d5e76c4e9360198
SHA512a74f2e664079429646a86195ce26d4537c6d5348b9b43176dd44ae69630f58b430fc1bc360138c51f47f7332d31998f31720d47780d65d0c375d0a614e221e54
-
Filesize
9KB
MD5e82c06a709f651bcdb90d898eca10964
SHA1945d9285186f948cfa1514ee898a7d6710c2c532
SHA2569716bd17fc7db42939caa5cb6d0b476054f8e84f2220222685fb3367537afa75
SHA5122be20824261cdcaf9d5522250a29df097c5b9619e3f00d2510f003c43934e96c6d4f7885e00d11d639d21f76268637a60e40aa077f4eb2dd1f7c8b0fdde58497
-
Filesize
9KB
MD506b5175a0dce864e638d1fe6f74c459a
SHA1aa2becf4e155d369f52548269c2efec98eb23fb5
SHA2560e900cb347344370bc8fdd5b855d84e793e2fdf5a9dbb4be5ce15c7e348a1d7b
SHA51242bce70fcd30cb9232996c48b3b6c2071a51f069f046afc6797c97d1c3f79efd9c358567f4b2be051a08d60d3dce5d9ba68939054e5b867bdb78e400b7f53d0b
-
Filesize
9KB
MD5bf4cd6ac7c0a70c255223e8007642d2f
SHA15e23528b4b411fb5a44586eb5d4ea9162558431e
SHA256f794e714c7c623a85d85101576212b178b74445ec33abb54039b5f31d8c4536c
SHA512ec5435a0ecf6db55a95333bc37e2ede1d0b731a805babc5cee12bc2e8ba8023b21514ed2ad43b938a6f47d207e4cbb7c9782ac1ac2b5ceddd5edafe4bc7e316f
-
Filesize
9KB
MD5f76092a28b5f517e066dbcbb8093bcfa
SHA1c5a2b5ef392552e810aa8f15321897ddfc04214c
SHA256e4af04b24c885e47a5716ffa0b6f1addb9422f47ff7ef6b39e43dcad7e568c9c
SHA5127de2141fbac0aaa5c863d422ddb8c9f52dc33fd450bad2872ad1f544ed16c28b5c7743ac2bf49379b2b14ae2fe442d788b65e1423f317b18db10b659c1107dcb
-
Filesize
9KB
MD5499fd770d32c58f3c47e99269ca536fa
SHA1cb22328085d36805e8769a40bedf119f11ad4889
SHA256857ed0a612084ef21a117b518ca40a2a33b5057585ce7b2ee6657e04de7874fc
SHA51244b09f7fd3d774b4ab0b02946c67945aa5d9d319ccce8e034e9752a3c0c58462602fe6202d4094ae56dd3f4db65f6b82e3a79eb843d68f5bf1e9b454b88faeb4
-
Filesize
9KB
MD5db37de27e596b74296198e342e89e8a2
SHA167cd63788ff9322dfe42bca7d74f8add571ddaa9
SHA2565f7ace126a04edcd498c2f72e6fb281a755f556dbd85de172423937407c88bab
SHA512ebc0ecb6b6b40e5cd367ddae4f1f9756eb218c35a31f701c615c795a637cd4ece15c379c583f7607be1b0862b989626c655a36f9af3f5ce829d3c37051085e32
-
Filesize
15KB
MD5a114b2e430881fdd1e32e362d0523505
SHA17d188f336ca52c6688c133e13521a3ccca0a6b21
SHA256b5b6e00610edd86429785a47c6dc4fe5bbacbdd5a8babde7d19a8670eeb87fad
SHA51280f5fe1ed82bab05b5fc2554f8bc2c39408553d584c5e6751ceb7d9bde9a85c72b077b5cf7f17336523b2997312f17fef5f1c5d6b32c374425c676f7a87733f3
-
Filesize
76B
MD5a7a2f6dbe4e14a9267f786d0d5e06097
SHA15513aebb0bda58551acacbfc338d903316851a7b
SHA256dd9045ea2f3beaf0282320db70fdf395854071bf212ad747e8765837ec390cbc
SHA512aa5d81e7ee3a646afec55aee5435dc84fe06d84d3e7e1c45c934f258292c0c4dc2f2853a13d2f2b37a98fe2f1dcc7639eacf51b09e7dcccb2e29c2cbd3ba1835
-
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5c909f.TMP
Filesize140B
MD58ff25b2de246e4a23ce11b4dfb2998f6
SHA1e25cf30a41ecb25c7b82a8c7f13b3bcc499a7ab0
SHA256e4049ba8634dd8640c4160a87c0da6556c7cb08ccfb4b5aa0f1c4fc7259aba68
SHA512867295e7bb9ced387f6033826b90ef814ac9117e47245ca42b48e81847b1836c59e3a375269e4eeb3379867af200d0a308317997c0b04b7684e16abe336748ef
-
Filesize
227KB
MD5c75e82087e700683fb361fb5a82581c2
SHA159da73cd9fa54d894aa376dfad37d6c1c8fd0640
SHA25686e744171fc02d4ed8b901b4bcaa0338bbec2978619e661ca90121962054f99b
SHA512ec1d23f84ce46fc430f917a87e040e93f27356f4a7801f2e79d6b6bf2c9d08d5ccd379fc126a6c7dbb624b97c98ff4d721282db1517af8dd7ccd64729cc49aea
-
Filesize
227KB
MD55969cab0858dc4aab815843deca19182
SHA1df7b9d881bec6b65ab391e1b11421b3bf9fe61a4
SHA2568436a1f87b277fb1fd7178f2eb94946506d8d2a9f9ffe8c29914aa5ac2178025
SHA51249d74f08fb5df4ff8feece408711012ec70b4a5d3c4073ce9774b0d3be1f3d95ee22820ef21c9ec915b9a0603c5dd72cffffdcb7a0f351f1da0ddc3fcad00a4d
-
Filesize
227KB
MD59667a93bf82da736b95082ca73e7e738
SHA118c9e88e408f743431f0bde73a6b5ba65db91266
SHA256d0065df156403cfd2101b0dedf0ec9f14de9982515f4ca6f69e8f78c192b34c3
SHA5127d9260a09af1db200994f2b172af31f64ffc05e8dc62d53856e97a4546bba9d6a15cdbe039b7e8412241fb65ed2760f746353894f15e023f1f5534c1f8a02233
-
Filesize
227KB
MD53eaea446ce0dd5083eb356a0ff3599ca
SHA11304338cb3b41db02e0ac0e7e81d5e07c41af36a
SHA2560982b6e888c14052882e9b695840f8f67c4285e68a2b559da790f3b600834510
SHA51286b3525747c9e2adf562010a07f83a8d0be059271a7fd73af0781d451d7c8d65ad613066d947c173e59bee33b892610ecfd8e6983c8378c49a737269d101d39c
-
Filesize
227KB
MD58c95a74a70fe564143bc07c263e094d1
SHA1f5dbb3391c85695ca4f36caf18f6ce442bca5050
SHA25673fc7c5cd81977645d0d9c9333ac147855f71a98e2c9cc514e511cd8caa72da7
SHA51207c5e565b4abeab397a802da162e440114ce26377fc7513663cccfd8ca6b8bc918f3fcc929b9f157d9b06bd3e8307799a2b991bba20552823ef9c521f1fdf40f
-
Filesize
152B
MD5cb557349d7af9d6754aed39b4ace5bee
SHA104de2ac30defbb36508a41872ddb475effe2d793
SHA256cfc24ed7d1c2e2c6585f53db7b39aa2447bf9212487b0a3c8c2a7d8e7e5572ee
SHA512f0cf51f42d975d720d613d09f201435bf98c6283ae5bc033207f4ada93b15e49743a235a1cfb1b761bde268e2f7f8561aa57619b99bff67a36820bc1a4d0ec4a
-
Filesize
152B
MD5aad1d98ca9748cc4c31aa3b5abfe0fed
SHA132e8d4d9447b13bc00ec3eb15a88c55c29489495
SHA2562a07cac05ffcf140a9ad32e58ef51b32ecccf1e3ab5ef4e656770df813a8944e
SHA512150ebf7e37d20f88b21ab7ea0793afe1d40b00611ed36f0cf1ac1371b656d26f11b08a84dbb958891c79776fae04c9c616e45e2e211d292988a5709857a3bf72
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize168B
MD5c6fd220a235618fc5e3903e003b14224
SHA1f0b9cda7df15201857086f83a755956e8dde55c0
SHA2567a22fb3cdbafc6b26c3df386c28c56fcb699d03f9ef82a08517fb6c8f5302265
SHA512b2c967ede45146f5ae75e13f1a9eda505af9d7b8f02b8e442fe68d542372348de57e6a9df0784b1380a995bedb63c69d20afaef2710a3e90b83ad5340ac3c89e
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
251B
MD52b888d7f7f574da0a851404e2c3c3117
SHA14592249f049f5aed045c8acf6770e91b24278d3c
SHA2566d914d1ddb4c5788216f5787efb5e94a9a3928e2953829857108ba0892021170
SHA5121367659f249b3112ec96b2fba99219da9b3d3a5630fda59266108ee86029871774aa4f6a25d5c23c4190fc3825a5679bfaa6c69660756acafc6508850b7a837f
-
Filesize
6KB
MD5e5c51efc3abb037102fdfb7572007843
SHA1662d784d6b3697e2112c32fa8a7b60971cc2a8a8
SHA256289c06daafa21e867ffffb1b665c50873c1f312d850be5d4dea0c5c32578bb2c
SHA512a76a470353535b17dea7151f2f124c68c2108a42185df8b275d23c825f4f7805d3bc200a21f1e389883a33c0127379019af56b2db960ac8869121730ff0550df
-
Filesize
5KB
MD5b212fe11175ee0c08df5f13429ecb009
SHA19c6ea3a549235391635ab7749647fcd966aa78cc
SHA256dcfa40f2d6c06815b5bb491ed79c69c5ce61db14717296b1a6599917fb2ef52b
SHA512dc34a58f92b920dd8247702b0a93e9922e8505ab1ace8c00877324066790a0d7b4a2f2d976c283d442618e0be9afc9951ca856ead77c59e611efff9cca3509bb
-
Filesize
10KB
MD5a0da260b1427697156735e388a678eb5
SHA199794cced7d1ab7a77c75160906b501150fd22af
SHA25604d4655d7a5894b3561de31e5d053a47996e10c89de8df878437424d32d884a8
SHA512671146a04ad081a7a0b6d8f1c70dd58ab0c1b5fc4f822a07fc7f17de43ea7990f84791795e362d2b6f1a03117138225a6025fba758a9a89bb8c2464d1be947b5
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AC\BackgroundTransferApi\805679e7-35a5-4f1b-b4c0-a329439fc653.down_data
Filesize555KB
MD55683c0028832cae4ef93ca39c8ac5029
SHA1248755e4e1db552e0b6f8651b04ca6d1b31a86fb
SHA256855abd360d8a8d6974eba92b70cbd09ce519bc8773439993f9ab37cb6847309e
SHA512aba434bd29be191c823b02ea9b639beb10647bbe7759bbffdaa790dfb1ec2c58d74c525ef11aacda209e4effe322d1d3a07b115446c8914b07a3bce4d8a0e2c3
-
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat
Filesize10KB
MD5811de73180216be8744c9b7adee0304d
SHA12dc17a10677152102484ae8d7c18fcfec49ca551
SHA256a96bfea7870be36678a9ec875ba342956a248e29e473af025b85fab0294e8eaf
SHA51271172785a8836d42db2ac54f7667ed8fb0dcfe89f77c9f264b80e328300fce7a67a0b3d3a52b6d3bad58692f328b66c9025f5cda2e5d04a478960e237ee97fcf
-
Filesize
81B
MD58ee463351a2a2a393f8bb952cb7bc4a1
SHA1184766276e2eaf41748830f1cc519d18be91fb62
SHA2560b1c594abdd971d7a55ccbdca5b1f406b9078676b34d9669badd9e469d63f9f0
SHA5129cbda6468131909865f82460083bb602b8f17e0f1feff70b413dbbe33905a42c89f64f2433543ba1f45aed1232af231632567b9869c78c50b8d7f5f02917be7c
-
Filesize
1.4MB
MD5cb2dcd8309631c854cb9bbee053f4cff
SHA135e5ff071ea28e4df56adac4047072a4408516a4
SHA25624b73b71890c02210f71fee5bd5f5d6f6bb869533119f18fc3176c34877688a8
SHA512ac1d93f040f90592c36fdb9e223a8c9841a056e7dc834a213e69e3cba55d21c1426c4552a47059b8fffb711f53a5ec62c8dcfcffee8197f1e67911f46bba76c4
-
Filesize
385KB
MD51ce7d5a1566c8c449d0f6772a8c27900
SHA160854185f6338e1bfc7497fd41aa44c5c00d8f85
SHA25673170761d6776c0debacfbbc61b6988cb8270a20174bf5c049768a264bb8ffaf
SHA5127e3411be8614170ae91db1626c452997dc6db663d79130872a124af982ee1d457cefba00abd7f5269adce3052403be31238aecc3934c7379d224cb792d519753
-
Filesize
8KB
MD512f9273ff3e7c1115ee71455bfe47ad9
SHA1ffba5dae3a4cd3c942d08aa9fe24f354972302d6
SHA256e169e150b168bf5e44564fc112b1bb61b9e9cdacda364b946a85eaa136259f99
SHA5122022f93edd0d0b00ffce759ec1e8ab8d1eae8e13f30ab9e2898f950e1385298643eda8778687a145e175a6221b11fcc8b2ef6f0f4334bf04aef4fd388193a126
-
Filesize
9KB
MD502bf8c78ee97f93632c032787ca383fd
SHA188c9f78b17f4770aa22ebe095bc403ee380a3864
SHA256cfe57a9cad9348e19b3180f96761388978325dba5bcf350cb40c682fd7f09de9
SHA512817a97a23ca6a39024bec18642c513a0373c2ef8f4886f9a73e3811ce7f22f95c4de6ceb9d57a9ea1f0112c05e13f9663ccef93702b5d6a98f90a9a46fecfd09
-
Filesize
312B
MD53b5f2333c693dd095907505e0338409d
SHA18c726bd0b18290ee26de4735f77ef710ca80659a
SHA2560e9f7a6e5f534974b489bf63fc51372b5cff1cb14081b13a43d1943c72639c11
SHA5121ab4f1e4711e9e8ce4d265ee94269a2b3e3bc3aab8f82b61fd6d120e6a44dee32cdf30c0cf12fa160736a5d6deaa33e0a902110c58fb40f8e2085a685de0fd52
-
Filesize
2KB
MD5b8b68e4be70a9816f7da1fbd55dbb426
SHA135158742d99b1ddf084f9921da244701602f50e2
SHA256be10ff0c2927aac44137f27e4e823c75d5836766ba27c161439fd8ba0d9e6e4e
SHA51244a721c42bd4fb5ff2950fdeb08c08fa40cb78a69cf2599ead805c16c02eac3ab74aad6ad48785c7989f16368c0e7d3587b98e56bf34a80ea26263eb7516e828
-
Filesize
2KB
MD5f7052e9462cddfd44f5022b4a2c74dc3
SHA1681571d6906b6b5784408afd99a77572e98f0992
SHA256375171e477e08602e56d4cce7d5875d5fa1f81444cb5de3f397692e6896c58fd
SHA51275d16c3db6d869f40c21f39d349693006d3747285d324a04fded1e9ee11bf182d17401bbd4f4877868df60c1c57d6ac6e75f07dee45c7ed4ec83cc553714c371
-
Filesize
745B
MD5b982de6d0e8772d74e013f4686844e9c
SHA15a319744dd37163a20fcad56c1c6bd7434953252
SHA256f6f464359881b0100309b7d0a3215648d39c68872acf03867e26b9c04638923c
SHA5120cfb966ccdba6dbb755f23b6d60de5ab4b23179a4047b9fbe16d746fd16d4a9d1b1a75408237fdbdacebe4c73b0ae97a8caae3ffca365e454360271e96775790
-
Filesize
766B
MD59ab1232d3649b4201d3720c66f660f4d
SHA1132e6fa925d7d51b6164a7a5f5cdb5257487dcb8
SHA2564c27fc8436569e18cd3c30c18e28a3da49b77aa2a3f334d34c5aa70709b8d31a
SHA51293fe52c76edd8b2d6c8169c1d6a6e963970089f621072cdb7eb549dfee285e9cd00bfb7a4da6fb947b560c4890157354016197d60b3cce547496f270f055de4e
-
Filesize
775B
MD5659a53146d7c21f33cdffb785edf26ed
SHA1af94524f9a89d954ff2e8d70264086834ab2f928
SHA256c57f9abb43cef7f479d57746064fa4c554ef53d46d7d7cf7026bfbacd03cdf2e
SHA512a11d02d12e4d7b81a4b3b1bfc46136d7b0a8850f0ba087135be6c32f563c9b033e100fda8803ca80538353fb8cb8ec25cfb5a7517f10b77ca0bf9ff83ee4c1fb
-
Filesize
832B
MD538400e2e3edae6ba3fe07f17316f15af
SHA15ebaca0bea1033c4fb74c1053ccbaa6704e7dba4
SHA2565276a197367d3f23ff1f9e31d02dfba4370feeb669842866df58d9c92a8646d3
SHA5129139a817c21bacac928675c105fb070edbba9dd98325e4d48e40f5b646dea0d4b5a5bdc74ef982768e4ba13d83bf7c9be40c824dfdebd515da441dfe0c25bafc
-
Filesize
312B
MD50c04ad1083dc5c7c45e3ee2cd344ae38
SHA1f1cf190f8ca93000e56d49732e9e827e2554c46f
SHA2566452273c017db7cbe0ffc5b109bbf3f8d3282fb91bfa3c5eabc4fb8f1fc98cb0
SHA5126c414b39bbc1f1f08446c6c6da6f6e1ceb9303bbf183ae279c872d91641ea8d67ec5e5c4e0824da3837eca73ec29fe70e92b72c09458c8ce50fa6f08791d1492
-
Filesize
468B
MD5aa315eb25c35437bbd159db3fdd5ad54
SHA1ee6be0b7b9559cb6b30a1cde56eade1c70e70d7e
SHA2566532d5135266a4c85c7f503a1dad9d866f1bafdf646bd3f710ec7399d964d5c3
SHA51224354ff6f5f8051ec9eecb2b33e4b2ad4d739a92189e394425f19714b686089e0c17939920b1e81ef52e122f6012a860cc34c01560d2f0fa62a02d021ba0c69e
-
Filesize
468B
MD5a8ada7cdb6b283660ec77086b57cbd3d
SHA10370380b62c6ba6487176129ad05360437b49b7f
SHA256c52ec2fd4f60a6e7711a966649e5196ae0a2244ef81ee11aade078b946fbfaf9
SHA51222a9b734f9457dbe8f83c632b603049a33db9a94f758396672ff10619f778581083fe19b6f383e4f665f4fd9e60f49dcd8cb981796a95736962081a7e48be332
-
Filesize
2KB
MD5448b732f9dd868fdd2df5f24a99b4609
SHA1c021f7f127bdaf15b437d40991078565bf4b0261
SHA256f2bf449700ac9677c3db1a57542a7ee58081edb1666d202683e9e95c4b7af6ce
SHA5121ca5a48e4b2e4776ad09318732b40a2555b3eb0379832e8e7d84035dd97883f6aec741527433f2d71b741bce1b736ec35d7ece2c9e116e14034f52d94700eb1a
-
Filesize
3KB
MD50dce249e02b4e2d888b7c25c85bdf90d
SHA1757fb9d8682eb3dd9e259363187ce75385137092
SHA256f67db51f15d92df5ec0971514d7101c9219b13576639e6146882bad7c443abcc
SHA51297edffe4773dbcd1b525d44be2adcc8452f42442288b0ca710925fd1a3db2fc249c219ba90898f1d7abfceae1e3a6b8f80b1c6983758450c6467a01711435154
-
Filesize
3KB
MD53772b35e1507a6c1c21af7d28058e3d4
SHA1d3e34e1aad5ab0e516770011e5c74dae1f33b3bd
SHA256318e5007448f2b38343e487bb85cbfe3101eeb1de494ccbf60cd643b6a3acf93
SHA512134f0360eeadfe42e9bb730247dff038bd4afd1d48be79b6ab52373d9e087e574407c67601974b3ca3162ea511fd75dc7ddae5d92f790a9ea631badac86a39cd
-
Filesize
3KB
MD56f30c3532c6a3fd4154fc09c10b7cbe3
SHA14c1531a6eb3474a7e9f55a92e580813cedbf5883
SHA256ffda05b123b7fbb3511c019ef1751797ec84c8928cddc77d1b8701bd8443ac73
SHA51263b54659ab6d9d40a563c939050cddf41abed4f5ae7257cb4e581cbc8634a15be3360ab011e2f9e7188644501e9a3da160b963776d07b886864e44774855872b
-
Filesize
7KB
MD52e107953c2b376193bdb871df235d6b3
SHA1cc2814f521e0107fd6aa07f05c0b5bffa790c91c
SHA256350c02e978005acef1f08c7b2f3133e1578b944e713042e48b6aceb0cdb53e20
SHA51245287cf8ff4285fb437906183675ab321e2d019b7621065c60ccd6a639281e95a7c5c7f52c9eace2d0b08d91dcfc194e9c53d08b6fe1a18562a346c9b30ce240
-
Filesize
7KB
MD574c4a9e2e5f36bbb237b8a3a8bdcb10e
SHA11ed380391076b0bc569b4157b34b8918dd9765fd
SHA256f86c99dc762575b860b8c3b2931d960712601e56ce1a2dd641ffaa476c6bf8ca
SHA512efa0054b09aaf00bec3a6e73f8304c7824aa1b9b0baca208b9520819d14714566fe6cace6adbb40f180e5a0e8583aee71e3e9cb6c607647c50ec09ab2057c041
-
Filesize
6KB
MD5ef4968004505e078097b117b5d4bc1a5
SHA18fb0588e85e7f2b5c9e907a5d35d1b687a353e72
SHA256797120e944a0dbc97de426acaf9a63d9a307b2f0dfd57e56fde9b4ff480ec53b
SHA5128314b19aca4e5efad1773715609bf0be53cb1ce1064f11fc64cb0c22316b75c900e10199abcd784895b86add233703cc0062e0ba88bfb41a55dad6b05c2f63cf
-
Filesize
6KB
MD5a09c1205e3bc29ae634000d3217e5a24
SHA103172b0643a2438ab6f2ac18d2218c8d737e7d78
SHA2561cd56db21067b4db4889a7752450c081b97c757df9f3051a04623061e06b22c3
SHA512c939ff3ca3a9289bcb9b613db1f0b966a6301b6fc7b121b511455651f16baea17a07016ea8bec8246ac3fb994bc3b4ade49f1abf8d206629e2e23caab5b4046e
-
Filesize
1KB
MD5e763a603dbc200a388faa21c589b5dcc
SHA16939d32c712af7c6de3410c0f817ba7c7b1b0030
SHA25623da9b7068236216aeb202016c05aa603c86a8dfeb5719fa45dd5e8580ab6a2b
SHA51274c3f3315dee679fc4fb91685761aacf92aa7ea84132dbc8f42a657647b917da112032a874d71949113f4e02c2f4f492a4d7255827ec94e7d5e9f7f3cc1b670f
-
Filesize
1KB
MD539be698f0020e5fb6c296a60ce43f9ab
SHA1385cec69200e7304cbd19f0bf27d5749864bce3b
SHA256150b72132866e7c178b8f495fd55e3d5dea35dfcc7b531766de15573f0ead610
SHA5126d6fdd16d3346c1bd28c46cdabd8c31fd8abc3bafdd9116a46f7e605be5325b07cf9588f3eab911da85cfcbcdf41a744fc43d462a4aea3342bc0be95ac972de7
-
Filesize
1KB
MD5f98600368e595e248503f615f719af44
SHA12275e9c32a5e963ee439898d7cbf3ac2f0f5a98a
SHA25671e4ffee43a8b0eab8ac69d3795e4487e5e7e39b3d7f6a0beae02f646e7fb335
SHA512f28bbd007bdd555b1c5542b1a4c228ae5a45a6a789dc40275d4a1a3b3c25dadbfd0a666f836bf2bb225761cc8f654b1058fd5d408482f406dab01512d7baa97c
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
2KB
MD59056fbfa28896064c9ce3bba6fe8d5e1
SHA18dcb3d42ee6bc33b695f22bd5f604961be97773e
SHA25637e9ba0e5573c5bb9a262217cafcfb2209cb2ed9e6dd7c078ada835e6d905e0e
SHA5129de4ae26c980f22352490d37c931dd2384fb19acd495ea9593d457d37afd0ec862a498a6ff4d94cd0732622d0fd71f322ad921d390ae9bf618169d04a5975951
-
Filesize
1023B
MD540ef46b1d10182a101c4abc5332d217e
SHA1184bc3be6f994b8532f1a3fa04d1f38a1032e7cf
SHA2561342b4e58f97a20b4795bb1bb68f84328d49a44d603c06dfa7b70197a4c65ee5
SHA5125abb06ac0532b71e164c5dda3543e8fe48ca13696460100b80abc967f6a2d38ece4a9feffc35e0b127a62852e5e402c1a0f63f6e00ce912e539d4f8290799f70
-
Filesize
1023B
MD502e7b9d7b2886fe73a86f275cebb076b
SHA16f4265463dc0e5361af3a3cc4b98e3db7e92d73e
SHA256ac7e0d3b7d35931dcfb3662da1ee7ebed910061e8e871a2749435df2068dfddd
SHA5122def315f0d3da2d084feb5be1d8277767c1a7aa9b65abad422b8228b8c4b89ac6bb7745fa3ed133cf186603c5e4fd5afc05179bae87dc3329e010fbefbd9cd60
-
C:\Users\Admin\AppData\Roaming\discord\MediaFoundationWidevineCdm\x64\1.0.2738.0\_metadata\verified_contents.json
Filesize1KB
MD53e839ba4da1ffce29a543c5756a19bdf
SHA1d8d84ac06c3ba27ccef221c6f188042b741d2b91
SHA25643daa4139d3ed90f4b4635bd4d32346eb8e8528d0d5332052fcda8f7860db729
SHA51219b085a9cfec4d6f1b87cc6bbeeb6578f9cba014704d05c9114cfb0a33b2e7729ac67499048cb33823c884517cbbdc24aa0748a9bb65e9c67714e6116365f1ab
-
C:\Users\Admin\AppData\Roaming\discord\MediaFoundationWidevineCdm\x64\1.0.2738.0\manifest.fingerprint
Filesize66B
MD5d30a5bbc00f7334eede0795d147b2e80
SHA178f3a6995856854cad0c524884f74e182f9c3c57
SHA256a08c1bc41de319392676c7389048d8b1c7424c4b74d2f6466bcf5732b8d86642
SHA512dacf60e959c10a3499d55dc594454858343bf6a309f22d73bdee86b676d8d0ced10e86ac95ecd78e745e8805237121a25830301680bd12bfc7122a82a885ff4b
-
Filesize
1KB
MD557589088fe0e7861d43c07a50b871293
SHA1676095a392db6e9db7823909477ab1837347b966
SHA256ed84334619970771bdb14a84ecd0a35eb607399b344fd89066d714de42141dff
SHA51255ee1315ba9170769ea0ccd48d718e7554cb59c9fa3953064b8e55e1c2753d772d487e9ec5e670e4a71e3494ca0d573901b12ddf5939055ef33e1dc8cd74ecdd
-
Filesize
1KB
MD545b0a9bad6be6980dbbde38e4e335154
SHA1c9167b76671f34390c5b0b1912fbc8fd7805702d
SHA25600c02c24e0f9e5337df7f2adc46a1b7178e0e369503b6c5a063960d6fafaa913
SHA512c4273a969989a163b4ec4151c594d8db1d71ed83edf0dbcfbb66b57c8d6ced3c8c05373ffc963a240b8fcf22506055b331507016f81f60c8ba405587ef48931c
-
Filesize
1KB
MD53244aa4dec8ed2abe64e5ab732c81614
SHA1dc234a796a1b1941fc62098d0d48848b0f4b5828
SHA2566710e36083c16603f2633db5cab362455c31e82f6340ad4c8a249a27b684b24a
SHA512ef3c455545a1fe8a362c62b931522719909464c04db324d6be1a1beb43d53a1d3731d6b5409571c53a8f584739ec08a1f3cddfd9237ad6a33eab3a7534e0a08b
-
Filesize
1KB
MD574c507163273ecc290fe051093e5d718
SHA102c11b89290eee6af10a041346d474e6bbbabdb1
SHA25635ef3f3dab82bfa334cd27233d63be461865a494008faed0ce6d712578799982
SHA512f4239092a83d9865697180c895d524e8f7f1d22cde6ee2fc5256fc3dad86cbd962bd3e5d4c6e8e5f69aa9aee67096af1443104d13fc8707496bfe102c02305a0
-
Filesize
1KB
MD502c20bd03cab624af9f753d5be23215c
SHA1ec61e634bd2672a9f6bfff0ebfa512726ca64928
SHA256ed30e58185c4f1d5721aa5e1e432ce4e14d3528141d41ecc8bf0bb2c8282e39a
SHA51202cb40fd0c1410f15e61e483215543249335f27f2aebfa7ea6e80234368c99461d46e7bc3ec5a455c6fffda2ae90320ab1b4131bf192d9eb71831d071136068c
-
Filesize
188B
MD50b15c43ec97dbe9493299121687de49d
SHA1515f9d2fd7f746ce5f4961302eb7ba5983074b25
SHA256b403aa95e543df89d7692db09e75e3f171df6502f1d316a9477c92e8ba2b9089
SHA51211d97fb716e68d9c44d510c999458a57b1dc4f1469ed64b837991dd558e8eda584df27e1639f3d3048ceb8df73cc2922c987bf155699a43f785d83fc8df04ea2
-
Filesize
1KB
MD51d66b303c661b53d6d888424c1b7e524
SHA1c00eab76639b0c56df34dbd4088e133753a0b34b
SHA256764dbd70e3d5bb87e1a28e1fc10e36d8c178231824f59080a8f3105750f76cd6
SHA5129b58522a008ed299450cce7e8f29aade4cc2d5541b2cf9f25153b585386dd7e3cc688522705cd222f289e12d194f468bbcc776544965c29158ca6270c8b09366
-
Filesize
1KB
MD50682ddc8e012849f2965c660a10bf5ee
SHA19d500a8b7fd7da117b81b340552d111db6d23d3d
SHA256d7551e5749ccb63f50954c5735beb44c1b01f183207cb9624a1060eed8e7646c
SHA51240adf8dc788af69fbde10c249d4ff4ade7bf00df8f1ef6d8b0ce6ac322008485282686985e7ab7d1545b6b7bf5e0dba204f3302a7b6058551c64ee2f58eb72b3
-
Filesize
1KB
MD53f3333c4bc3ee4326fc28243aa35b932
SHA1e1853e4e5f4abbb5ad7ffbf261488abb593cb527
SHA256212a097cf4f9f098dbb0293a01e477174801343450d50bc38c12ee6c50ec2952
SHA51241475572c7762de6fb273533ae6412dd011af274e49670d34ec6cc33a8b69407fb54c28194263006ef9303fa19135ba82f2c86b8348d48a3a9e91b26790f16d0
-
Filesize
355B
MD5515be24bd23f489773c3d64d855830b4
SHA1b5d7a6cad3a34f1c9bc3844887541d41da58db5f
SHA2561c706fe3e230010e294f9404641cde2ba6a23f62dc26588b696188be2ed83a19
SHA51282a939ee7830d9e180c2cd5b2fd288326e88756f34eb2744968ceb9d0678863e3c03414cf548dd03eaf894cbdb3d1001c5209985ea8c1aff0843d5ef1a35dac1
-
Filesize
1KB
MD57ef2b400dac8fdb4201f3d246a4ae1a7
SHA15d186b2f1903b8b88c50f5c5c4c1906d9f2f8eb7
SHA256daad2390090165268e3858d711df59c789f3abd7f5b407af0de148e8ed6f6604
SHA5120bbd416eeeabaf246d9d9526c2f9b83b62e01961dc7282b481004f4a97f694d8a0c34b387fda90ae488717458b70774ca0875606ac951d52a1bdc5eea69a9678
-
Filesize
188B
MD5398349bbb0c160b0199cb41cb0175ebf
SHA1d32b8ca0d445861749e6ba7eb50466d8b0017cf3
SHA2566984855fe8bdf81d0ba6c2e9ccf6b61e5ab55487598082b4253edd2416e1b89e
SHA512f409398116ab1d9b6af794017477fa69fe98105177d53a2f7c05a1e225ddb0c0c09f57f2e7f2bbedd9ce7baf3615b43af22100805bbdcaeb82b0cb21bab633fa
-
Filesize
172B
MD533d9236936411726de8c94a2d2775b8f
SHA12c910c96ce0bdcce51304155f778d1fa614f2d74
SHA256458877047d389e2e1227c2ac1df9ba5d565dbe008c8243efc85240dcb062ae1e
SHA51255b72b37288d9971cc525c556cdd2edb746eb3b470349b4bc9a0f621ccf0f668b6c2b771e954f52491fea1d8aebb029ca023df9d95573411b6dab7aa45cebde5
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
57B
MD558127c59cb9e1da127904c341d15372b
SHA162445484661d8036ce9788baeaba31d204e9a5fc
SHA256be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
SHA5128d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
-
C:\Users\Admin\AppData\Roaming\discord\component_crx_cache\neifaoindggfcjicffkgpmnlppeffabd_1.c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed
Filesize1.1MB
MD5f265d47475ffd3884329d92deefae504
SHA198c74386481f171b09cb9490281688392eefbfdd
SHA256c900ba9a2d8318263fd43782ee6fd5fb50bad78bf0eb2c972b5922c458af45ed
SHA5124fd27594c459fb1cd94a857be10f7d1d6216dbf202cd43e8a3fa395a268c72fc5f5c456c9cb314f2220d766af741db469c8bb106acbed419149a44a3b87619f1
-
C:\Users\Admin\AppData\Roaming\discord\component_crx_cache\oimompecagnajdejgnnjijobebaeigek_1.567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632
Filesize13.8MB
MD53db950b4014a955d2142621aaeecd826
SHA1c2b728b05bc34b43d82379ac4ce6bdae77d27c51
SHA256567f5df81ea0c9bdcfb7221f0ea091893150f8c16e3012e4f0314ba3d43f1632
SHA51203105dcf804e4713b6ed7c281ad0343ac6d6eb2aed57a897c6a09515a8c7f3e06b344563e224365dc9159cfd8ed3ef665d6aec18cc07aaad66eed0dc4957dde3
-
Filesize
26B
MD5fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98
-
Filesize
2.7MB
MD5477c17b6448695110b4d227664aa3c48
SHA1949ff1136e0971a0176f6adea8adcc0dd6030f22
SHA256cb190e7d1b002a3050705580dd51eba895a19eb09620bdd48d63085d5d88031e
SHA5121e267b01a78be40e7a02612b331b1d9291da8e4330dea10bf786acbc69f25e0baece45fb3bafe1f4389f420ebaa62373e4f035a45e34eada6f72c7c61d2302ed
-
Filesize
145B
MD5bbc03e9c7c5944e62efc9c660b7bd2b6
SHA183f161e3f49b64553709994b048d9f597cde3dc6
SHA2566cce5ad8d496bc5179fa84af8afc568eeba980d8a75058c6380b64fb42298c28
SHA512fb80f091468a299b5209acc30edaf2001d081c22c3b30aad422cbe6fea7e5fe36a67a8e000d5dd03a30c60c30391c85fa31f3931e804c351ab0a71e9a978cc0f
-
Filesize
1001B
MD52ff237adbc218a4934a8b361bcd3428e
SHA1efad279269d9372dcf9c65b8527792e2e9e6ca7d
SHA25625a702dd5389cc7b077c6b4e06c1fad9bdea74a9c37453388986d093c277d827
SHA512bafd91699019ab756adf13633b825d9d9bae374ca146e8c05abc70c931d491d421268a6e6549a8d284782898bc6eb99e3017fbe3a98e09cd3dfecad19f95e542