e3c9d4027e21ad9e9b0efa1b7aac3d7bb0e20e1f3542f9d1061cfc09c0e161b4

Analysis

max time kernel
141s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:05 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

276d98b5b9d6e25002a4c3b75b1566f2.exe
Size

16KB
MD5

276d98b5b9d6e25002a4c3b75b1566f2
SHA1

ba2ad8f7e5296fbdd72dd1b5997c33c6c2057821
SHA256

e3c9d4027e21ad9e9b0efa1b7aac3d7bb0e20e1f3542f9d1061cfc09c0e161b4
SHA512

73383a3ad55a66cbb9dc2ad80377d5df82b5ec6ec3ad413ededa33f42f34d0979b07fee24d61627a13b727c4089b4ea840d0f057980172fc55d73b02565d96e0
SSDEEP

192:nLqts61A/0LihdxqfKD6V0wQ/WhiQrSQ2ZNOJPQQzr3mX2e2QjcWWHsU:Fx0i7xqsfQ2HNyQQH2X2e2AzCs

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\276d98b5b9d6e25002a4c3b75b1566f2.exe
"C:\Users\Admin\AppData\Local\Temp\276d98b5b9d6e25002a4c3b75b1566f2.exe"
1⤵
PID:2424

Network

DNS

www.terra_cartoes.kit.net

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

8.8.8.8:53

Request

www.terra_cartoes.kit.net

IN A

Response

www.terra_cartoes.kit.net

IN A

201.7.182.206
DNS

208.194.73.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

208.194.73.20.in-addr.arpa

IN PTR

Response
DNS

149.177.190.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

149.177.190.20.in-addr.arpa

IN PTR

Response
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

95.221.229.192.in-addr.arpa

Remote address:

8.8.8.8:53

Request

95.221.229.192.in-addr.arpa

IN PTR

Response
DNS

206.182.7.201.in-addr.arpa

Remote address:

8.8.8.8:53

Request

206.182.7.201.in-addr.arpa

IN PTR

Response
DNS

241.154.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.154.82.20.in-addr.arpa

IN PTR

Response
DNS

241.154.82.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

241.154.82.20.in-addr.arpa

IN PTR
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

0.204.248.87.in-addr.arpa

Remote address:

8.8.8.8:53

Request

0.204.248.87.in-addr.arpa

IN PTR

Response

0.204.248.87.in-addr.arpa

IN PTR

https-87-248-204-0lhrllnwnet
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

158.240.127.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

158.240.127.40.in-addr.arpa

IN PTR

Response
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

41.110.16.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

41.110.16.96.in-addr.arpa

IN PTR

Response

41.110.16.96.in-addr.arpa

IN PTR

a96-16-110-41deploystaticakamaitechnologiescom
DNS

103.169.127.40.in-addr.arpa

Remote address:

8.8.8.8:53

Request

103.169.127.40.in-addr.arpa

IN PTR

Response
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

18.31.95.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.31.95.13.in-addr.arpa

IN PTR

Response
DNS

18.31.95.13.in-addr.arpa

Remote address:

8.8.8.8:53

Request

18.31.95.13.in-addr.arpa

IN PTR
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

217.135.221.88.in-addr.arpa

Remote address:

8.8.8.8:53

Request

217.135.221.88.in-addr.arpa

IN PTR

Response

217.135.221.88.in-addr.arpa

IN PTR

a88-221-135-217deploystaticakamaitechnologiescom
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

104.241.123.92.in-addr.arpa

Remote address:

8.8.8.8:53

Request

104.241.123.92.in-addr.arpa

IN PTR

Response

104.241.123.92.in-addr.arpa

IN PTR

a92-123-241-104deploystaticakamaitechnologiescom
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

119.110.54.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

119.110.54.20.in-addr.arpa

IN PTR

Response
DNS

119.110.54.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

119.110.54.20.in-addr.arpa

IN PTR
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

171.39.242.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

171.39.242.20.in-addr.arpa

IN PTR

Response
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

194.178.17.96.in-addr.arpa

Remote address:

8.8.8.8:53

Request

194.178.17.96.in-addr.arpa

IN PTR

Response

194.178.17.96.in-addr.arpa

IN PTR

a96-17-178-194deploystaticakamaitechnologiescom
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response
DNS

26.35.223.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

26.35.223.20.in-addr.arpa

IN PTR

Response
DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR

Response
DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR
DNS

14.227.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

14.227.111.52.in-addr.arpa

IN PTR
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
DNS

88.156.103.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

88.156.103.20.in-addr.arpa

IN PTR

Response
DNS

88.156.103.20.in-addr.arpa

Remote address:

8.8.8.8:53

Request

88.156.103.20.in-addr.arpa

IN PTR

Response
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

dual-a-0001.a-msedge.net

dual-a-0001.a-msedge.net

IN A

204.79.197.200

dual-a-0001.a-msedge.net

IN A

13.107.21.200
DNS

tse1.mm.bing.net

Remote address:

8.8.8.8:53

Request

tse1.mm.bing.net

IN A

Response

tse1.mm.bing.net

IN CNAME

mm-mm.bing.net.trafficmanager.net

mm-mm.bing.net.trafficmanager.net

IN CNAME

dual-a-0001.a-msedge.net

dual-a-0001.a-msedge.net

IN A

204.79.197.200

dual-a-0001.a-msedge.net

IN A

13.107.21.200
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301155_1GGY831Y9L2UBT9JX&pid=21.2&w=1920&h=1080&c=4

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301155_1GGY831Y9L2UBT9JX&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 506560
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: FF7AEDA722F748A4B5D3AD4CA44655FE Ref B: LON04EDGE1112 Ref C: 2024-01-02T04:16:10Z
date: Tue, 02 Jan 2024 04:16:09 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317300911_1B8OV3E40VLMAHOY2&pid=21.2&w=1920&h=1080&c=4

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317300911_1B8OV3E40VLMAHOY2&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 347587
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D028B6CE75B6467C9DEB96F1F50530D1 Ref B: LON04EDGE1112 Ref C: 2024-01-02T04:16:10Z
date: Tue, 02 Jan 2024 04:16:09 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301626_12UQHHQXE25HHMLCY&pid=21.2&w=1080&h=1920&c=4

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301626_12UQHHQXE25HHMLCY&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 342455
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F52C23A161CD42B89A393B4A176BE4B0 Ref B: LON04EDGE1112 Ref C: 2024-01-02T04:16:10Z
date: Tue, 02 Jan 2024 04:16:09 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301564_1NPXYTFO6Z76HH02K&pid=21.2&w=1080&h=1920&c=4

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301564_1NPXYTFO6Z76HH02K&pid=21.2&w=1080&h=1920&c=4 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 324642
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 281840D9556C47B8AD3F8CBBE0711A75 Ref B: LON04EDGE1112 Ref C: 2024-01-02T04:16:10Z
date: Tue, 02 Jan 2024 04:16:09 GMT
GET

https://tse1.mm.bing.net/th?id=OADD2.10239317301217_1LGEUWZHPMKMEMITB&pid=21.2&w=1920&h=1080&c=4

Remote address:

204.79.197.200:443

Request

GET /th?id=OADD2.10239317301217_1LGEUWZHPMKMEMITB&pid=21.2&w=1920&h=1080&c=4 HTTP/2.0
host: tse1.mm.bing.net
accept: */*
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: public, max-age=2592000
content-length: 388861
content-type: image/jpeg
x-cache: TCP_HIT
access-control-allow-origin: *
access-control-allow-headers: *
access-control-allow-methods: GET, POST, OPTIONS
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 40603A5784344091935B076E508183E6 Ref B: LON04EDGE1112 Ref C: 2024-01-02T04:16:10Z
date: Tue, 02 Jan 2024 04:16:09 GMT
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive
GET

http://www.terra_cartoes.kit.net/tunbnail.gif

276d98b5b9d6e25002a4c3b75b1566f2.exe

Remote address:

201.7.182.206:80

Request

GET /tunbnail.gif HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)
Host: www.terra_cartoes.kit.net
Connection: Keep-Alive

201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.5kB
216 B
7
5

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.1kB
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

590 B
128 B
6
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

538 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.2kB
128 B
7
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

486 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

538 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

486 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.1kB
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

538 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

486 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

486 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.1kB
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.4kB
128 B
6
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

486 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.4kB
128 B
6
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

926 B
128 B
7
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

822 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

1.1kB
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

770 B
128 B
4
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

538 B
128 B
5
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

590 B
128 B
6
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
204.79.197.200:443

https://tse1.mm.bing.net/th?id=OADD2.10239317301217_1LGEUWZHPMKMEMITB&pid=21.2&w=1920&h=1080&c=4

tls, http2

49.6kB
1.2MB
900
891

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301155_1GGY831Y9L2UBT9JX&pid=21.2&w=1920&h=1080&c=4

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317300911_1B8OV3E40VLMAHOY2&pid=21.2&w=1920&h=1080&c=4

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301626_12UQHHQXE25HHMLCY&pid=21.2&w=1080&h=1920&c=4

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301564_1NPXYTFO6Z76HH02K&pid=21.2&w=1080&h=1920&c=4

HTTP Request

GET https://tse1.mm.bing.net/th?id=OADD2.10239317301217_1LGEUWZHPMKMEMITB&pid=21.2&w=1920&h=1080&c=4

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.3kB
8.7kB
17
14
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.3kB
8.7kB
17
13
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.3kB
8.7kB
16
13
204.79.197.200:443

tse1.mm.bing.net

tls, http2

1.3kB
8.7kB
16
13
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

http://www.terra_cartoes.kit.net/tunbnail.gif

http

276d98b5b9d6e25002a4c3b75b1566f2.exe

434 B
128 B
3
3

HTTP Request

GET http://www.terra_cartoes.kit.net/tunbnail.gif
201.7.182.206:80

www.terra_cartoes.kit.net

276d98b5b9d6e25002a4c3b75b1566f2.exe

52 B
1
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
96.16.110.114:80
52.142.223.178:80
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe
201.7.182.206:80

276d98b5b9d6e25002a4c3b75b1566f2.exe

8.8.8.8:53

www.terra_cartoes.kit.net

dns

276d98b5b9d6e25002a4c3b75b1566f2.exe

71 B
87 B
1
1

DNS Request

www.terra_cartoes.kit.net

DNS Response

201.7.182.206
8.8.8.8:53

208.194.73.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

208.194.73.20.in-addr.arpa
8.8.8.8:53

149.177.190.20.in-addr.arpa

dns

73 B
159 B
1
1

DNS Request

149.177.190.20.in-addr.arpa
8.8.8.8:53

95.221.229.192.in-addr.arpa

dns

73 B
144 B
1
1

DNS Request

95.221.229.192.in-addr.arpa
8.8.8.8:53

206.182.7.201.in-addr.arpa

dns

72 B
147 B
1
1

DNS Request

206.182.7.201.in-addr.arpa
8.8.8.8:53

241.154.82.20.in-addr.arpa

dns

144 B
158 B
2
1

DNS Request

241.154.82.20.in-addr.arpa

DNS Request

241.154.82.20.in-addr.arpa
8.8.8.8:53

0.204.248.87.in-addr.arpa

dns

71 B
116 B
1
1

DNS Request

0.204.248.87.in-addr.arpa
8.8.8.8:53

158.240.127.40.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

158.240.127.40.in-addr.arpa
8.8.8.8:53

41.110.16.96.in-addr.arpa

dns

71 B
135 B
1
1

DNS Request

41.110.16.96.in-addr.arpa
8.8.8.8:53

103.169.127.40.in-addr.arpa

dns

73 B
147 B
1
1

DNS Request

103.169.127.40.in-addr.arpa
8.8.8.8:53

18.31.95.13.in-addr.arpa

dns

140 B
144 B
2
1

DNS Request

18.31.95.13.in-addr.arpa

DNS Request

18.31.95.13.in-addr.arpa
8.8.8.8:53

217.135.221.88.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

217.135.221.88.in-addr.arpa
8.8.8.8:53

104.241.123.92.in-addr.arpa

dns

73 B
139 B
1
1

DNS Request

104.241.123.92.in-addr.arpa
8.8.8.8:53

119.110.54.20.in-addr.arpa

dns

144 B
158 B
2
1

DNS Request

119.110.54.20.in-addr.arpa

DNS Request

119.110.54.20.in-addr.arpa
8.8.8.8:53

171.39.242.20.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

171.39.242.20.in-addr.arpa
8.8.8.8:53

194.178.17.96.in-addr.arpa

dns

72 B
137 B
1
1

DNS Request

194.178.17.96.in-addr.arpa
8.8.8.8:53

26.35.223.20.in-addr.arpa

dns

142 B
314 B
2
2

DNS Request

26.35.223.20.in-addr.arpa

DNS Request

26.35.223.20.in-addr.arpa
8.8.8.8:53

14.227.111.52.in-addr.arpa

dns

216 B
158 B
3
1

DNS Request

14.227.111.52.in-addr.arpa

DNS Request

14.227.111.52.in-addr.arpa

DNS Request

14.227.111.52.in-addr.arpa
8.8.8.8:53

88.156.103.20.in-addr.arpa

dns

144 B
316 B
2
2

DNS Request

88.156.103.20.in-addr.arpa

DNS Request

88.156.103.20.in-addr.arpa
8.8.8.8:53

tse1.mm.bing.net

dns

124 B
346 B
2
2

DNS Request

tse1.mm.bing.net

DNS Request

tse1.mm.bing.net

DNS Response

204.79.197.200

13.107.21.200

DNS Response

204.79.197.200

13.107.21.200
8.8.8.8:53
8.8.8.8:53

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2424-0-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-1-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-2-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-3-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-4-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-5-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-6-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-7-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-8-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-9-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-10-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-11-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-12-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download
memory/2424-13-0x0000000000400000-0x000000000040B000-memory.dmp

Filesize
44KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request